Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
File: jxLb_EZr00gJDtwa4yklIunXO9k.cer (raw, json)
Hash identifier: WOHoXRZfLGaWmdXKBInrcEjk0pRq/LK43FAilEu5jk0=
Subject key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B21AA130C692A0974A6B18F7A741F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.16.218.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1a:a1:30:c6:92:a0:97:4a:6b:18:f7:a7:41:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:01:9f:12:09:06:0e:43:4b:fd:01:6c:19:
fc:df:86:fc:94:4c:98:a6:a9:c6:b9:4d:74:8b:77:
80:c7:c0:0f:e6:40:b1:40:e2:c9:04:ac:04:97:7a:
ad:44:1f:75:65:71:17:d2:9a:e9:3b:95:9f:7a:5d:
bf:2f:95:7a:85:32:b0:0e:fb:ae:6f:d4:b7:02:b2:
a1:6e:93:5e:ac:5f:0b:a2:93:64:98:cc:59:7f:42:
60:e3:cb:95:fd:92:96:ea:c6:ef:47:e4:fe:63:b7:
1b:26:1f:1c:42:fc:d5:50:f9:2d:29:2a:55:62:a6:
19:88:f8:e4:a1:52:4d:91:00:de:de:0f:d5:61:95:
45:61:c7:ac:6d:a2:e3:83:03:96:5f:7b:aa:bf:35:
1f:4c:e5:da:6e:fe:3f:c3:e4:50:3b:eb:83:ca:ab:
21:ba:3c:01:db:e3:1a:b9:fe:60:29:52:65:02:79:
ab:09:af:4d:97:f3:9a:f4:a8:29:f3:ff:af:34:22:
9f:a3:f9:2d:2d:31:ba:3a:29:92:de:84:d5:b6:53:
70:82:f1:47:72:2f:86:b7:2c:91:2a:05:f8:ee:6a:
0c:48:7e:42:5c:4a:09:83:1f:b7:3c:43:36:64:e5:
5a:b8:da:c9:09:f9:6a:4c:07:2c:b5:a1:93:34:d7:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
81:49:ff:03:a1:ca:a3:0c:9e:dd:20:25:7c:98:78:7e:92:50:
d0:75:9f:09:0d:e3:53:0a:33:fd:ca:3f:08:c2:97:8f:5c:1a:
5d:98:10:7b:78:b6:dd:61:20:f5:74:e5:dd:a9:0e:7f:75:d4:
ab:81:bc:b9:85:bc:85:61:3b:1c:4b:35:96:a3:8e:6a:b5:6b:
26:99:44:b7:60:8e:75:6d:7c:9e:71:03:2f:e5:2b:12:f9:33:
3b:07:c8:4a:bc:18:89:2e:7f:53:82:08:aa:0c:73:6f:ce:79:
22:e2:b6:44:d8:75:21:62:8b:4a:73:f7:27:07:07:88:ee:dd:
3a:4d:c0:7c:02:46:3a:ab:40:bf:07:fa:15:25:ce:7c:f3:21:
8d:30:7b:9d:7b:29:bc:35:2d:51:ad:b5:4a:88:2f:f9:11:5e:
43:1e:4a:80:60:ee:46:e8:a8:26:36:57:77:96:8d:6b:56:76:
81:f5:05:c6:45:3a:d0:dc:b8:a0:49:08:b8:47:de:6d:d0:38:
3c:d4:09:33:69:d7:bf:cf:f8:4d:ed:28:fb:a3:3c:51:18:26:
fd:29:6f:d7:bb:25:d7:f3:45:05:71:c5:04:d2:db:4e:93:91:
16:a2:35:ed:cf:7c:e0:f7:4e:fa:d9:df:cc:f2:3e:ac:99:31:
49:ec:f8:d4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhshqhMMaSoJdKaxj3p0H2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjEyZGJmYzQ2NmJkMzQ4MDkwZWRjMWFlMzI5MjUyMmU5ZDczYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrsBnxIJBg5DS/0BbBn834b8lEyY
pqnGuU10i3eAx8AP5kCxQOLJBKwEl3qtRB91ZXEX0prpO5Wfel2/L5V6hTKwDvuu
b9S3ArKhbpNerF8LopNkmMxZf0Jg48uV/ZKW6sbvR+T+Y7cbJh8cQvzVUPktKSpV
YqYZiPjkoVJNkQDe3g/VYZVFYcesbaLjgwOWX3uqvzUfTOXabv4/w+RQO+uDyqsh
ujwB2+Mauf5gKVJlAnmrCa9Nl/Oa9Kgp8/+vNCKfo/ktLTG6OimS3oTVtlNwgvFH
ci+GtyyRKgX47moMSH5CXEoJgx+3PEM2ZOVauNrJCflqTAcstaGTNNfxSQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFI8S2/xGa9NICQ7cGuMpJSLp1zvZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzM5YjUw
OS1hNjdjLTQ2M2ItOTY4OC00YjA5YmQ4ZWQwNGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMzliNTA5
LWE2N2MtNDYzYi05Njg4LTRiMDliZDhlZDA0YS8xL2p4TGJfRVpyMDBnSkR0d2E0
eWtsSXVuWE85ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRDaMA0GCSqGSIb3DQEBCwUAA4IBAQCBSf8D
ocqjDJ7dICV8mHh+klDQdZ8JDeNTCjP9yj8IwpePXBpdmBB7eLbdYSD1dOXdqQ5/
ddSrgby5hbyFYTscSzWWo45qtWsmmUS3YI51bXyecQMv5SsS+TM7B8hKvBiJLn9T
ggiqDHNvznki4rZE2HUhYotKc/cnBweI7t06TcB8AkY6q0C/B/oVJc588yGNMHud
eym8NS1RrbVKiC/5EV5DHkqAYO5G6KgmNld3lo1rVnaB9QXGRTrQ3LigSQi4R95t
0Dg81Akzade/z/hN7Sj7ozxRGCb9KW/XuyXX80UFccUE0ttOk5EWojXtz3zg9076
2d/M8j6smTFJ7PjU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:21 2025 by rpki-client on console.sobornost.net