Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer (raw, json)
Hash identifier: rES2PQ1CiCT/a23Y89cX1PGh26eqvs7vG+Lk2FU3ZLA=
Subject key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6045C8506AC87366E460031074A31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.27.43.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:04:5c:85:06:ac:87:36:6e:46:00:31:07:4a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:80:d4:3b:37:e2:2e:c6:78:67:b6:43:d7:
a5:c3:6d:c3:1f:c1:7f:b9:27:ed:07:57:39:d8:af:
1c:40:61:e3:cf:2d:bf:c6:4b:2e:4e:34:fd:7b:32:
a5:dd:55:ba:61:b1:06:6d:3a:01:20:d4:b6:50:3e:
cb:61:5f:d7:39:0f:d0:ee:ce:f9:b1:ae:0e:2f:0b:
a2:dc:6a:5a:f1:9e:48:73:bc:fe:e5:fc:4b:4c:3d:
b3:ac:73:83:40:68:40:5f:92:f6:5b:2e:cb:cf:7d:
b1:b5:6a:eb:39:cd:79:12:a6:e5:ed:5a:b9:2f:fa:
fb:2b:80:b8:a0:1d:6f:d7:b6:53:f9:6b:29:ac:6f:
f8:42:3c:f1:ee:08:5b:45:49:b4:dc:3f:43:1a:b7:
35:86:ad:3f:a5:87:77:84:03:66:3a:12:94:05:e1:
a1:75:fa:96:7f:7b:89:3d:52:4c:54:7e:55:a8:de:
27:22:b8:b0:13:ad:13:c7:2e:f2:cf:05:5d:2a:e2:
aa:fb:72:08:ff:11:bd:fc:04:26:62:57:d1:a4:64:
3e:26:95:9a:f8:d7:16:60:17:16:76:3f:99:4b:a2:
9a:94:b5:77:85:cb:b5:55:5f:87:f4:be:cb:54:8f:
ff:b1:3f:1c:76:40:5f:bd:2e:38:f0:25:a8:62:72:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.43.0/24
Signature Algorithm: sha256WithRSAEncryption
16:47:36:f0:ad:a8:01:7d:1c:46:fe:4c:4c:4c:e3:c6:c8:30:
4d:8e:b4:45:89:40:f8:03:65:b2:42:74:44:04:2a:95:21:26:
69:36:9e:0d:45:8d:84:14:a3:40:62:fa:4b:09:0d:be:4c:b5:
73:62:31:5a:a8:38:f7:00:10:e5:e7:41:18:7d:af:83:59:7d:
e1:82:b5:6f:6f:3d:af:32:b1:cb:8f:05:29:e0:e0:4b:c5:6f:
cc:be:38:f9:41:5e:f4:33:da:5d:7e:f4:a6:48:f6:c9:9e:36:
cf:bb:17:56:63:7f:45:cf:e7:95:95:ca:06:1d:dc:55:d1:a6:
10:b4:cd:b8:ff:2f:28:b4:fc:4b:61:71:9a:47:e2:b0:05:b1:
ad:6b:a6:54:93:16:db:65:7b:cb:87:38:c9:3c:9f:2a:2f:be:
12:67:87:e1:1f:3f:ca:64:fe:93:63:6a:1f:df:e3:db:77:ce:
72:3c:7c:9a:53:42:a4:93:3e:8f:20:b4:94:08:e9:be:03:4f:
f8:56:d4:cc:a0:f5:43:ae:d9:5b:ed:33:c5:5a:04:43:94:59:
41:39:c8:be:81:90:20:42:cd:72:75:ef:30:a6:e7:7a:02:65:
9b:9d:d6:9a:d4:ae:dd:09:fb:2f:df:b9:0b:53:69:3c:f6:a2:
55:d8:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:31 2025 by rpki-client on console.sobornost.net