Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
File: j35CW5mA3j5tTVVraau_8SVIZ7E.cer (raw, json)
Hash identifier: nTxo8jtJTnjJAhIsrXRBEOzu60B7l5Pwu+00AEFxwSo=
Subject key identifier: 8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01961A455A41D807A35848A723EAE3B7502E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Apr 2025 11:17:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.170.64.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:45:5a:41:d8:07:a3:58:48:a7:23:ea:e3:b7:50:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 11:17:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:c2:1e:98:84:bd:54:e2:5e:63:c5:01:73:
29:0b:b6:d6:9e:fa:ac:38:cb:d9:41:dc:a2:08:8a:
49:a2:51:13:e4:85:5b:79:50:20:d5:ec:36:d3:1c:
e0:2f:02:95:58:c5:2a:01:d6:7c:d3:f7:3f:43:4c:
26:a1:77:b3:b2:0b:73:65:97:b9:88:23:16:3c:bf:
2c:81:60:a6:52:91:ee:99:96:ed:ea:d0:c5:c6:e5:
15:c0:e7:0b:78:31:6a:8c:44:4e:1a:df:8c:fc:4c:
70:1a:13:6e:d6:93:16:71:b9:f3:3f:6e:eb:7b:49:
15:86:8c:aa:26:37:aa:3f:ab:5e:60:9c:0c:d5:aa:
d6:95:2f:a1:f9:c8:61:32:9b:31:76:be:dc:fe:c9:
71:81:4c:89:bc:1f:b7:08:86:56:aa:0c:67:9e:e5:
d5:e8:94:da:f7:b1:83:30:dd:97:6f:d4:df:23:66:
cf:0f:10:25:72:85:04:b4:2c:d3:d6:7d:f2:c7:ca:
e8:b9:70:83:ac:7d:86:ca:a2:69:85:ed:1c:68:e5:
3d:0a:a7:77:f3:04:01:53:bf:f0:28:1b:f0:51:91:
01:8b:34:98:75:65:7f:58:87:8d:c3:4c:e5:f4:e8:
cc:42:81:27:58:e5:dd:d0:a2:b4:61:fb:3a:1a:ec:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.64.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0c:c4:34:1b:5b:e9:75:52:78:11:f7:db:f3:80:42:af:5f:
13:9d:1d:b1:1d:90:73:f9:13:49:70:9c:f3:dd:12:58:f9:0f:
c9:d9:06:31:db:43:8f:7b:37:fa:eb:2a:f8:0d:63:88:a3:16:
9e:78:89:7d:d8:d6:1c:da:18:0d:1b:14:53:49:14:65:0b:16:
94:0d:83:35:12:a7:f3:c9:09:f1:32:e8:fe:0c:3b:77:34:e7:
29:d2:a3:6f:7a:b1:f7:d0:64:00:8c:d7:9d:a2:bb:94:a0:05:
88:ef:9a:69:a0:73:8a:d9:60:e5:c5:35:e2:29:bc:b0:f9:80:
eb:65:83:b1:7f:74:59:65:c8:29:9a:e1:b4:e4:93:6f:a3:de:
a2:e2:1d:34:52:7f:b1:3d:1e:6e:10:8b:b9:64:80:a5:d6:47:
6d:02:1a:c6:87:37:3a:d9:84:f5:e0:8b:66:fe:12:6b:0b:4f:
96:49:e3:0a:cb:5d:42:c8:8a:72:10:5f:74:31:10:68:fc:ef:
91:21:53:3e:73:f0:5e:e1:1b:4e:49:d2:8d:20:66:c5:8b:c4:
55:96:25:51:74:6b:4f:40:1c:24:bc:73:be:80:92:55:31:34:
cb:90:8f:e4:5e:3d:21:fd:27:6e:17:ff:92:32:26:38:4a:af:
94:c5:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:19 2025 by rpki-client on console.sobornost.net