Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.cer (raw, json)
Hash identifier: /2ZOGiDoOdeD9l5g5fBHdCSKC56VdcsnMhfW3VJx5kw=
Subject key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5E6139666B226089252AF398BBF1C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.1.185.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e6:13:96:66:b2:26:08:92:52:af:39:8b:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:39:f3:e1:da:ab:78:80:48:4b:16:1c:90:
40:51:6d:21:f2:e9:f2:25:eb:9a:bc:c8:20:6b:05:
09:5b:56:5c:7e:d5:91:8b:51:75:fa:8c:d7:f7:fd:
ea:eb:86:d7:ed:cf:c7:0a:63:84:4b:68:45:d2:28:
ab:6f:97:50:10:bb:9f:de:14:9f:8a:f2:83:64:d4:
95:74:77:34:b0:64:ad:5d:78:32:ed:a3:fd:ad:77:
69:62:2c:38:3c:42:d8:d4:87:1e:3c:0d:6b:0f:b9:
a0:31:cc:e6:c0:47:c2:97:ff:75:ac:d3:ab:cd:60:
b9:e0:45:96:2d:41:00:fc:85:83:6a:a2:c7:d8:9a:
33:2c:ed:47:4d:c5:85:1f:b6:4d:0c:f3:b3:48:2d:
98:69:1d:d6:49:62:a0:04:68:d8:3c:05:ba:93:46:
aa:1a:11:64:0b:e5:86:57:6f:a5:22:98:dd:24:92:
cc:2e:ca:83:28:1f:23:b1:50:e6:18:16:7a:59:ca:
00:94:2a:05:21:f5:4f:7c:91:b5:9a:ca:48:5a:7d:
bc:f9:ba:f1:b0:9c:6a:5a:35:89:83:19:45:94:a1:
e3:72:fe:88:52:3a:84:53:1a:b6:b9:60:4a:d1:83:
74:c2:42:a5:8d:33:9a:62:ef:37:ff:fb:b9:73:d0:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.185.0/24
Signature Algorithm: sha256WithRSAEncryption
82:19:59:c2:ee:47:63:a2:55:a8:44:8f:3e:c5:be:a4:09:34:
c3:ba:b5:90:00:92:ad:e0:52:c8:6f:c2:1f:95:92:58:78:7d:
f4:dc:be:f1:85:bc:5b:dc:c2:3d:77:4a:6f:91:ab:2b:7e:db:
ce:7a:11:22:97:34:aa:4d:6c:ef:e8:cb:ab:9c:96:d7:14:4f:
33:76:6b:1d:8a:05:b7:60:ff:c1:74:9c:0c:d3:1e:2c:b8:12:
ec:ba:d0:c0:dd:8f:e9:ea:fb:8f:f1:3d:0b:e9:8d:07:26:a4:
fe:9d:61:d7:68:16:bd:2e:dc:38:bb:10:3a:46:e8:89:9b:61:
d5:c5:8d:e6:f0:b7:3d:9b:a1:37:e0:e0:e0:80:a6:58:77:3e:
8d:05:8e:16:a8:94:fc:a8:a3:43:24:7a:b9:4e:09:38:c5:10:
65:e5:6d:98:a8:e2:a3:d6:7d:ce:79:ae:f7:b0:07:08:9c:41:
25:da:1b:fd:58:1b:63:7d:cb:46:eb:c1:2b:8e:0f:7b:3a:ae:
6c:e4:98:74:c7:e1:44:c7:74:51:23:32:13:0e:fd:b3:72:dd:
ad:6a:0c:2d:af:88:15:7a:0b:ed:3b:b8:d3:6f:bf:d2:8b:e9:
31:65:5c:b9:88:ca:b3:46:26:69:ab:c3:6b:49:42:4a:03:76:
10:08:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:26 2025 by rpki-client on console.sobornost.net