Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.cer (raw, json)
Hash identifier: FiQCMGfT+M6tKMfsWCaJcA0ji6Vg3V6excMvXKrhc3Y=
Subject key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196018B9C7C300C3E49E8BBC71704F8F4BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Apr 2025 16:04:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a14:1980::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:8b:9c:7c:30:0c:3e:49:e8:bb:c7:17:04:f8:f4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 16:04:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:e8:53:74:e4:9d:62:51:75:eb:1d:a7:18:
52:cb:58:dd:84:a9:67:ab:ef:1e:c4:89:ca:d3:4d:
a3:7b:7e:b3:b2:a3:28:0c:ec:f1:f5:61:1b:28:00:
f0:6e:f2:dc:bb:63:34:78:4c:a0:b9:e8:70:94:a1:
be:b1:84:f8:77:68:9a:51:34:21:ce:ff:6d:a6:86:
3b:b8:59:f2:1f:3e:c3:c9:b6:48:53:f7:28:b4:3d:
43:44:25:e7:89:4d:3b:f7:9f:08:30:63:1e:b5:70:
69:ad:5b:97:58:11:6a:ca:8c:e6:1e:56:1b:d2:3d:
27:a3:f4:29:2b:26:e4:a8:50:67:20:cb:69:ed:5e:
1f:c2:96:28:7f:76:f0:1a:40:54:9c:6b:67:e7:6f:
03:9a:c0:31:0b:94:08:1e:87:5c:d6:ca:c0:1d:fd:
94:2c:07:f6:79:ab:c6:45:cd:9c:7f:93:79:17:ad:
34:e4:10:68:11:36:fd:14:6c:1d:f7:0a:78:04:c0:
39:4f:e6:e9:2c:27:09:44:7e:e4:b6:65:53:e6:7f:
58:3a:88:20:c7:2a:e6:f5:a3:c9:d5:43:27:87:ce:
0a:d1:92:9f:2e:30:45:dd:b0:a5:96:60:27:29:e2:
94:da:92:76:34:79:d3:2f:eb:46:74:ca:05:91:b0:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1980::/29
Signature Algorithm: sha256WithRSAEncryption
78:52:6c:8f:41:33:8f:cf:84:27:75:68:18:e8:9a:d3:dd:ad:
81:a3:23:8a:94:6a:9d:b6:7b:51:5b:0c:fb:c3:47:25:f0:ec:
bb:cc:02:21:f3:52:13:88:21:d9:5d:10:83:24:34:56:0c:ff:
8d:8c:2d:bd:19:54:f2:99:c5:39:3b:69:0c:65:3d:d5:26:43:
e4:e3:78:46:3f:8e:d9:b7:0a:87:0c:65:02:f5:cb:65:85:72:
55:ca:bd:a8:3d:a4:2f:5f:ac:6c:b1:6f:11:93:a8:ac:fc:d1:
a5:b7:70:4c:6c:bd:a7:76:58:0c:43:76:5e:06:b1:7e:be:12:
dd:62:aa:87:85:55:49:9f:b2:78:e9:dc:76:93:5d:7d:b5:c9:
1e:fa:58:e4:50:47:d0:d7:7b:dc:a7:04:f3:f7:ce:f5:64:41:
b7:22:1e:6b:41:d3:de:a9:e9:7b:5f:06:58:ba:9e:d5:bb:b3:
b8:ae:b8:00:07:90:86:f1:32:6c:17:1d:ca:0d:bb:e2:da:18:
14:48:53:54:54:c4:8f:49:4e:6f:8b:c4:e2:b7:cd:7d:98:a2:
d9:e2:7c:ea:15:88:7e:31:1a:96:eb:30:76:d2:4f:bd:ef:12:
ea:62:95:68:5c:0a:2d:88:28:1c:29:b8:27:d0:00:da:62:1d:
dc:2b:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:30 2025 by rpki-client on console.sobornost.net