Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
File: nkz1EkerV_Um84ByWaeNKwJZBgM.cer (raw, json)
Hash identifier: oG5+GPYB4g3z/HjcQYcwXs2Jf4kUasZcN1aHvGCGO/Q=
Subject key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D8E6E71CF58D60F24C92E4EC6677B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.62.180.0/22
IP: 2a07:dc00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8e:6e:71:cf:58:d6:0f:24:c9:2e:4e:c6:67:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:59:21:5b:04:33:81:56:67:b0:c7:7b:23:
97:3a:12:a8:9c:7d:cb:38:c7:ce:b6:ff:24:ac:a3:
2a:ab:7e:b4:99:f2:53:2c:16:d0:d9:27:d2:32:4d:
53:1b:f5:ac:a0:19:08:35:a2:ab:ad:cd:af:9f:24:
d0:69:b6:5e:7c:37:81:95:23:0e:79:9e:09:8f:69:
68:e1:fa:11:7d:e0:70:97:88:d9:5c:23:3a:6c:4c:
73:4c:c2:8c:c3:b8:39:f1:f3:ff:5b:a6:dc:a4:0b:
bb:d4:d6:3d:69:fd:51:61:e5:2e:82:b9:50:07:29:
40:0f:0b:ec:45:50:dc:af:3c:06:ef:e3:45:23:b6:
99:0d:df:42:b9:46:57:0e:a2:43:b2:e4:43:f1:b3:
38:c5:85:a8:ae:f3:2b:4f:16:d1:07:34:6a:e9:53:
90:0c:d6:67:ea:b9:19:48:5d:09:e2:08:dc:43:48:
8b:f4:f7:63:3f:13:3f:cc:28:a0:65:1c:a4:ca:c1:
9d:b7:e0:7d:69:67:cd:29:bb:c9:17:e0:64:a0:c8:
4d:5e:93:a7:de:17:e7:50:2e:5c:b4:92:b1:10:e4:
68:ee:08:67:be:4d:a6:64:39:5b:bc:e5:9f:ae:2a:
00:82:02:1e:36:ce:49:c5:d3:a0:f4:47:40:94:3f:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.180.0/22
IPv6:
2a07:dc00::/29
Signature Algorithm: sha256WithRSAEncryption
18:85:3e:9c:77:dc:26:65:c1:e5:67:d3:9b:af:bd:31:90:70:
39:87:88:a3:43:db:6e:89:d8:d7:b1:99:3b:08:82:e8:83:e3:
70:bb:b2:ed:6f:37:09:ca:98:44:77:a2:5d:d1:1a:f7:42:bd:
f4:c5:b2:a1:e7:c4:28:fe:2d:ae:16:08:6f:f4:19:db:50:12:
d3:6e:81:e1:ab:a7:61:03:f6:e7:a8:dc:9a:38:25:a5:0d:fd:
fa:47:c8:c0:a1:d0:e9:66:6c:31:95:50:3b:f1:25:81:e3:1b:
2b:6c:45:10:28:af:a8:db:83:25:5d:64:c6:8a:74:0c:93:72:
4f:bf:73:c3:05:04:ee:69:75:fb:b4:cd:e5:1c:76:6f:3d:9c:
bd:cb:3c:95:8d:c3:86:51:85:07:14:b8:1f:0a:05:d6:f0:70:
99:da:d9:a4:0c:75:01:36:67:4f:49:bb:d8:9a:35:b2:b1:0e:
dc:9e:28:9b:ba:95:98:a2:ac:45:b4:7f:97:ee:26:74:cc:65:
f2:1c:1b:e5:2c:98:b8:3e:51:52:14:29:5f:9d:db:84:dc:d0:
fa:71:38:bd:d3:9d:53:aa:66:d7:11:02:fa:cb:87:a6:61:bf:
ac:23:e0:6b:ae:0c:72:ca:0a:e7:72:8a:ad:40:49:97:14:2e:
b9:ff:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:30 2025 by rpki-client on console.sobornost.net