Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
File: ni6I9QfNLq27IyyGT3Htum7LXaA.cer (raw, json)
Hash identifier: H9TfA8AvfEX9EzbeLtDaYohS7kk8hC+kwMwLEb1YUtU=
Subject key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F54C6E01D20F06300284BBD4CF1AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.88.58.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:54:c6:e0:1d:20:f0:63:00:28:4b:bd:4c:f1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:ad:f6:fb:a8:4f:6d:41:90:63:f3:09:b7:
06:22:ad:ba:e1:b4:4b:35:15:06:4f:4d:e0:da:45:
f2:e4:8a:33:10:1f:d6:c8:8e:2e:e3:76:43:d0:4f:
36:00:5e:85:ae:09:02:fa:6d:52:3b:07:68:0c:11:
0f:3f:49:f4:6c:c8:92:04:71:88:d1:2d:a5:82:ea:
b5:ba:61:c0:4c:80:99:f4:cc:60:81:27:ec:fb:dc:
d5:fa:32:59:e5:13:c9:09:f2:0f:6e:a4:42:34:da:
ac:52:94:17:d8:bb:c2:72:4d:0c:26:ff:33:b3:fa:
0a:b6:c6:64:dc:47:2d:38:6f:25:7e:24:a5:75:b1:
16:33:39:3c:c4:a7:0d:e5:8f:e6:71:42:90:59:5b:
dc:39:1c:80:3c:70:2f:cd:a0:0a:c8:27:35:c7:87:
9e:23:2d:43:22:a7:b8:b6:90:03:ae:7b:61:a4:cd:
aa:67:b0:ef:66:e8:b1:79:b3:f0:42:05:09:5d:48:
8c:4a:1a:71:34:6a:0c:2a:ef:42:0a:ed:19:92:8e:
35:1e:7f:2f:6c:ee:8c:2c:db:60:51:dd:f0:d6:38:
c1:90:7a:13:72:70:26:97:3e:e2:32:33:82:13:22:
48:30:a8:ca:9e:bc:13:50:d5:f5:13:9c:6f:46:95:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.58.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:4f:5b:56:d8:ad:b4:e2:8d:fa:3f:da:85:80:c6:ab:44:e9:
19:98:24:d6:42:50:0f:4d:c7:ce:15:7a:cb:d6:d1:50:de:b9:
0a:12:92:06:57:8f:4f:10:b1:f7:09:e6:be:1d:75:1d:ca:fc:
ea:7e:0d:37:e4:1a:41:1f:55:22:61:21:7c:40:91:07:a7:28:
5c:02:ba:3b:44:9a:51:2c:34:ff:5b:f8:cd:fa:cc:5a:8a:62:
35:70:6b:f8:a7:7c:77:b5:84:6c:c9:0c:b2:c4:35:d9:14:a1:
f4:d5:3d:b8:28:73:7e:4c:59:a5:b6:ab:0b:03:d2:1c:aa:8e:
8d:c7:ac:c3:ed:68:e9:50:40:2b:3d:98:da:d8:69:fe:82:b6:
f8:7c:ed:60:70:13:b3:a5:ce:6c:b5:69:49:11:2d:68:0e:0e:
b9:c6:83:b2:1f:e7:16:37:73:0d:35:48:f0:27:d8:c6:19:19:
c0:a2:8c:93:47:58:14:b8:09:81:a7:9a:80:f6:93:4f:ca:93:
a7:86:a2:ba:f2:b1:77:fd:54:ef:49:2f:f8:11:78:e6:07:83:
61:9a:fb:64:76:fe:ae:cc:b2:ec:d8:0a:7d:b0:fd:d4:93:28:
34:4e:b7:d9:ff:d0:47:a4:ba:04:c4:d8:6b:2e:a7:7b:c2:ee:
a8:ca:e3:04
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQlj1TG4B0g8GMAKEu9TPGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTJlODhmNTA3Y2QyZWFkYmIyMzJjODY0ZjcxZWRiYTZlY2I1ZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/2t9vuoT21BkGPzCbcGIq264bRL
NRUGT03g2kXy5IozEB/WyI4u43ZD0E82AF6FrgkC+m1SOwdoDBEPP0n0bMiSBHGI
0S2lguq1umHATICZ9MxggSfs+9zV+jJZ5RPJCfIPbqRCNNqsUpQX2LvCck0MJv8z
s/oKtsZk3EctOG8lfiSldbEWMzk8xKcN5Y/mcUKQWVvcORyAPHAvzaAKyCc1x4ee
Iy1DIqe4tpADrnthpM2qZ7DvZuixebPwQgUJXUiMShpxNGoMKu9CCu0Zko41Hn8v
bO6MLNtgUd3w1jjBkHoTcnAmlz7iMjOCEyJIMKjKnrwTUNX1E5xvRpVeQQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJ4uiPUHzS6tuyMshk9x7bpuy12gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzMwNzY0
ZS03OTlmLTQ3MzYtOTY4Ni05MmQ1ZDM5NzBhNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvMzA3NjRl
LTc5OWYtNDczNi05Njg2LTkyZDVkMzk3MGE1OS8xL25pNkk5UWZOTHEyN0l5eUdU
M0h0dW03TFhhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw1g6MA0GCSqGSIb3DQEBCwUAA4IBAQB8T1tW
2K204o36P9qFgMarROkZmCTWQlAPTcfOFXrL1tFQ3rkKEpIGV49PELH3Cea+HXUd
yvzqfg035BpBH1UiYSF8QJEHpyhcAro7RJpRLDT/W/jN+sxaimI1cGv4p3x3tYRs
yQyyxDXZFKH01T24KHN+TFmltqsLA9Icqo6Nx6zD7WjpUEArPZja2Gn+grb4fO1g
cBOzpc5stWlJES1oDg65xoOyH+cWN3MNNUjwJ9jGGRnAooyTR1gUuAmBp5qA9pNP
ypOnhqK68rF3/VTvSS/4EXjmB4Nhmvtkdv6uzLLs2Ap9sP3Ukyg0TrfZ/9BHpLoE
xNhrLqd7wu6oyuME
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:30 2025 by rpki-client on console.sobornost.net