Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.cer (raw, json)
Hash identifier: 1UJAAcpHnEtxsIc+cmyUsz39LEHYFhOycv6ti1CFF7o=
Subject key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01954B7C118DD5CEDAB521AEB6155938C5EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Feb 2025 07:36:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.124.0.0 -- 62.126.255.255
IP: 62.188.0.0/16
IP: 213.116.0.0/15
IP: 2a02:2a80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:7c:11:8d:d5:ce:da:b5:21:ae:b6:15:59:38:c5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 28 07:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:cf:a4:6a:19:9d:77:21:20:82:6a:bf:25:
a4:88:fb:0c:32:91:15:96:1b:74:9a:93:63:bc:c3:
ac:c4:39:ed:d2:8b:3e:3b:6d:63:76:87:26:f5:15:
e1:cf:a1:99:05:89:9c:e1:d9:4d:75:02:f5:60:6b:
f4:d3:6c:86:29:bd:9f:2f:87:a9:6a:b1:a3:11:65:
b6:c1:0f:03:12:ed:7b:ef:9d:e9:e9:07:b2:a8:9f:
3c:b4:17:83:47:a8:d2:c8:a2:e7:b4:d5:ff:c1:3a:
e6:d6:f1:80:8f:fb:9d:56:67:04:7a:f5:98:c9:06:
46:3f:8d:8c:bf:30:ff:1e:00:9f:36:b6:7d:c1:ac:
cb:40:61:ef:b4:fe:bd:d4:df:b3:ca:63:d8:f8:ea:
a9:c5:7d:f6:e1:3f:c2:fd:f4:60:33:a4:02:19:30:
ce:fe:df:f8:ed:ba:0b:a0:3b:ce:af:bb:ad:04:fc:
4b:20:a9:d4:71:ea:e2:1a:6f:76:c6:2b:93:e1:90:
d4:6d:76:23:23:81:1d:01:34:b0:5b:04:ad:8c:e0:
f6:30:98:d6:4f:a2:59:4f:89:fd:94:a7:83:32:f0:
55:f4:e6:c1:41:b7:c6:7a:e6:90:84:59:65:3b:d1:
a6:ea:a1:23:db:9c:73:e3:96:26:c6:d0:e7:fd:72:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.124.0.0-62.126.255.255
62.188.0.0/16
213.116.0.0/15
IPv6:
2a02:2a80::/29
Signature Algorithm: sha256WithRSAEncryption
83:3d:a0:0d:f8:fe:c4:d8:eb:6c:c7:82:88:f0:34:6a:2e:2c:
30:5d:ed:09:3c:06:41:cf:ea:dd:c4:cb:ef:7b:95:bb:38:28:
39:bb:58:11:d9:37:1b:37:eb:7e:03:72:0b:46:9d:19:69:9e:
32:21:c3:34:5a:e9:ef:c1:75:c6:e4:bc:c4:a5:91:ea:e4:9f:
3a:d5:81:23:94:9e:bb:74:ad:44:66:6e:75:11:00:a5:95:11:
fe:f8:29:91:0d:6e:9c:ba:14:03:ce:8c:bd:69:a0:5d:84:21:
4d:a2:ad:b3:ab:51:34:51:20:43:8e:c1:a5:91:70:6e:a8:62:
80:34:44:0d:e7:3f:b0:3a:14:06:64:a8:e5:79:bd:ee:bf:f0:
c1:17:10:ab:ce:1c:8a:c6:b6:ff:12:67:06:e3:48:85:17:4b:
0c:3f:8c:5e:b0:7c:3d:a0:52:90:8b:65:d5:ac:c8:94:88:63:
da:f3:2a:e7:69:71:91:ee:e4:a4:69:20:31:d8:21:e1:80:2f:
2b:08:d2:a5:3c:12:cf:af:a4:c3:33:56:f1:ae:4f:4c:e9:0b:
ac:9b:dc:f2:c6:2c:54:32:95:de:d1:1b:1b:b6:6a:a5:cf:f0:
c9:5d:61:f1:5c:a7:27:ff:d1:7c:7f:f9:ac:c7:85:35:99:bc:
c3:06:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:49 2025 by rpki-client on console.sobornost.net