Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
File: jlNMDBgsQ4N_LCvU7csLizq-luk.cer (raw, json)
Hash identifier: SA/jqeIvXiALLseLzerjVvmQ2TYMtd1NJqLmgc2plTw=
Subject key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01958A46B4E2728082B8B0553D53BEF55D99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Mar 2025 12:14:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.217.209.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:46:b4:e2:72:80:82:b8:b0:55:3d:53:be:f5:5d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 12:14:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:00:58:41:40:53:bd:76:af:de:cd:f2:23:
5e:b4:df:30:91:f3:4e:6d:0e:21:b0:85:c3:e3:f4:
f3:73:13:04:d3:a4:8d:d9:da:3a:11:f3:51:f2:1c:
30:a5:37:f2:78:62:e1:20:42:6c:9a:26:54:c7:78:
b4:f7:d4:ed:4a:30:b9:d6:57:02:0e:aa:bf:55:d3:
50:a0:cc:c1:77:91:31:55:96:2c:24:4d:33:61:95:
85:9e:c9:f4:39:53:3e:65:62:90:a6:ae:bb:5b:ef:
a9:0a:53:8e:56:16:57:5f:0a:3e:95:3d:01:31:28:
b2:28:36:1f:fc:66:c8:d1:b0:31:3e:ed:bc:6a:cd:
c5:5e:1a:59:61:43:31:e7:44:78:03:73:74:40:83:
bf:58:02:02:4f:20:10:79:a0:64:94:6b:28:76:43:
0d:25:76:39:57:20:5f:c1:09:0e:87:df:25:b6:ef:
e9:bd:28:d2:52:d3:0e:1b:12:ab:d0:93:04:a9:04:
3b:7a:a8:bb:c7:a6:56:25:1c:c6:77:7b:27:33:7b:
2e:15:dd:83:81:35:ae:05:dd:19:fe:2f:a1:2e:f8:
b1:ca:27:71:25:33:3f:78:47:3d:31:e0:00:ed:29:
3e:fd:8a:bd:c5:3d:75:9a:5f:2c:06:a3:98:31:e6:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fe:a1:d9:e7:83:cf:88:11:d7:62:61:46:c9:58:0f:9b:15:
37:d2:8b:a9:34:49:b5:a4:67:2a:e6:b6:70:28:02:fc:a9:1f:
99:25:ec:62:d5:42:63:0d:72:92:50:73:c2:16:73:ad:45:8a:
4d:d8:2c:74:25:ea:46:ec:11:e7:81:1d:fd:1b:ea:e3:a4:df:
1e:cc:47:55:69:5f:8a:c0:1f:2e:b7:22:1e:46:5b:5a:91:97:
77:ce:c0:a1:0d:5e:1b:ef:eb:ff:1f:94:8a:1b:de:c4:b4:4a:
57:8c:12:d4:4e:e5:ad:9b:7b:e6:1b:c4:9d:f5:d4:05:17:0a:
3d:60:29:27:76:5e:bd:3b:9b:9f:ae:66:73:bf:a0:6b:f5:b0:
d3:e5:20:27:0e:c1:9c:f5:29:41:dd:9b:82:8b:19:2c:c3:f2:
86:3b:d3:8a:b8:8e:6c:8e:cd:7f:b7:8e:7e:e3:47:74:32:68:
41:e2:87:d3:b0:de:92:fa:09:85:61:08:11:68:8b:f3:c0:51:
3e:6d:86:5e:73:50:72:f1:e0:63:9e:0b:82:fd:93:5e:70:4b:
8d:e5:ed:4a:13:c8:8a:f2:9a:29:60:c9:3d:dd:97:d0:ed:7d:
21:39:7e:d5:44:20:07:7b:92:ae:9a:40:b9:e0:e2:e4:0d:6e:
b6:86:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:20 2025 by rpki-client on console.sobornost.net