Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
File: j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer (raw, json)
Hash identifier: /ZFUq1PtdQNzCeUcJc8oJVuRgNflsykyW3+7R7ccnJ4=
Subject key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195F0BBEF385CE16F045DF39070ED7534A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Apr 2025 09:43:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.195.192.0/23
IP: 185.46.112.0/22
IP: 193.192.50.0/23
IP: 2a01:86e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:bb:ef:38:5c:e1:6f:04:5d:f3:90:70:ed:75:34:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 1 09:43:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:9f:39:51:4a:1f:25:12:60:19:19:d3:8d:
29:36:1b:85:03:da:03:53:24:10:1a:e4:96:d7:9e:
a0:ff:f5:88:72:18:74:71:7a:a6:f0:9d:4a:04:26:
7b:f6:1d:e1:90:72:b0:4b:58:13:15:aa:73:2d:34:
07:f4:a4:a9:f5:88:08:ea:ab:aa:c2:79:27:db:ba:
8f:7a:44:b7:e5:52:25:be:8f:63:fd:3f:55:e8:76:
61:fe:37:66:8e:1a:0f:54:4e:78:2e:ca:a2:51:0c:
dd:6e:24:6a:53:53:14:c2:1f:4c:44:1e:88:6e:46:
7c:13:d6:5f:4f:f3:a3:c3:b5:3f:68:03:87:26:7f:
8e:df:49:c0:ba:e7:bf:fd:12:98:12:cc:fb:9a:f0:
50:b8:16:38:00:62:c4:e8:67:e7:c3:78:e7:a7:00:
36:62:8a:8a:1b:30:2c:52:fb:03:05:fb:65:d1:69:
13:2b:18:c0:42:53:2d:37:fd:e1:87:63:9f:5d:5c:
c9:c2:41:23:78:f3:58:47:f4:0b:87:e2:59:bc:a7:
69:87:c7:ab:9d:75:f5:15:17:bf:20:02:1d:d8:85:
6d:21:e7:93:18:d4:7c:8f:fe:33:1c:f6:40:4c:ef:
95:b2:b9:a4:1d:f4:bc:2e:aa:79:4b:2a:0b:26:fb:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.192.0/23
185.46.112.0/22
193.192.50.0/23
IPv6:
2a01:86e0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:4c:8c:48:66:59:60:1f:17:c3:28:ac:f0:73:85:94:d5:5e:
37:4d:a3:dd:52:08:56:0d:ce:15:1a:72:6f:cc:db:1c:f4:74:
de:bc:8e:7d:4e:d7:6b:2d:0b:e1:b1:d3:a5:4a:04:5e:48:b3:
e4:77:42:65:f8:92:a7:00:e9:91:04:80:25:55:0a:4a:1c:6a:
9c:82:77:92:e6:9a:4c:37:0f:37:98:78:e6:56:cd:d0:78:86:
e6:46:69:be:aa:60:af:ad:09:48:6a:2e:05:9f:ef:ab:19:02:
b4:e0:8d:48:77:9c:88:5e:33:76:9f:af:89:cd:25:50:ba:23:
ca:eb:ab:5e:e5:69:bc:95:14:3e:58:b3:b2:c7:67:44:a8:8d:
d9:95:35:25:31:d9:47:20:c6:93:ee:b2:91:b3:f8:e8:c6:47:
f3:9c:1b:aa:23:f4:11:40:a3:20:55:5c:b5:4d:af:ab:68:25:
24:ac:5d:9c:82:f0:31:6b:6e:bd:08:da:c8:38:4a:82:11:fa:
5f:17:a6:ac:f2:81:5e:80:92:bf:c7:a0:d2:4a:c4:cc:6a:c4:
0c:fc:e4:9c:ce:2d:f6:10:38:ac:42:30:4f:39:40:ec:6a:28:
18:41:dc:9d:90:2c:1a:44:38:40:96:0c:99:fb:90:53:14:39:
6b:85:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:19 2025 by rpki-client on console.sobornost.net