Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
File: pF3taOImAyG8o56EZbScJdWKVuY.cer (raw, json)
Hash identifier: +kca5Eg4IrHPScpZhYlbonqE+IJiLcT//X6ctjuGfXw=
Subject key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193E3633A3D6E49DE6A378D52CA905ACB54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Dec 2024 09:25:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a13:7cc0::/29
IP: 2a14:f00::/29
IP: 2a14:1f00::/29
IP: 2a14:2100::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:63:3a:3d:6e:49:de:6a:37:8d:52:ca:90:5a:cb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 20 09:25:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:60:01:21:7e:90:97:04:f8:44:16:a2:cd:
25:77:93:1c:66:dc:4f:53:9f:0b:52:f6:5f:83:4b:
9d:0b:b7:02:1b:72:8b:5b:33:81:ec:e7:2f:44:fe:
c9:64:e9:cc:37:3c:52:b4:eb:01:c4:b5:84:77:cc:
1c:f0:32:d8:df:46:bc:82:39:4b:78:84:5c:11:b1:
6a:2e:7d:9c:2b:c2:9c:c0:b2:ad:33:c6:24:49:d2:
f1:df:6c:d3:0f:6c:0f:99:32:54:87:9b:96:44:fe:
8e:3a:26:4d:c4:d9:02:34:72:e9:5d:1f:1d:52:da:
fa:3d:5d:17:55:be:88:fa:f6:a0:e0:63:43:27:08:
62:60:6b:6f:d8:70:ad:aa:2f:95:d1:70:b5:44:2e:
25:9c:d2:95:37:de:4b:80:24:a0:c2:c5:36:48:3a:
59:e4:00:5e:85:e2:51:df:be:c9:9f:c3:e6:64:73:
54:c7:4e:4e:fe:87:1f:ce:42:6e:ce:17:b2:ce:ca:
c4:c4:14:aa:ad:b6:79:7f:61:be:7b:7d:28:5a:63:
17:57:fb:ab:7e:a2:a9:35:08:3d:42:1f:7c:5c:14:
1a:bd:f1:0f:62:cc:a8:68:f1:ae:c7:6b:76:1e:03:
32:72:c7:dd:06:3b:13:1a:03:13:7c:8f:e8:a7:28:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7cc0::/29
2a14:f00::/29
2a14:1f00::/29
2a14:2100::/29
Signature Algorithm: sha256WithRSAEncryption
7c:2f:4b:2a:6b:92:d2:06:14:be:c9:c4:10:55:22:11:6b:4f:
53:4e:8e:97:4e:43:77:f3:79:8e:e6:3a:ec:31:34:eb:ef:3d:
04:d7:62:80:2c:d0:0a:9a:c9:12:9c:77:1f:56:be:c9:e8:d4:
b2:64:77:4b:de:af:0f:85:ac:4d:c2:10:82:8f:8f:a5:b9:a6:
5c:20:7a:17:20:80:93:c7:ee:47:af:63:ad:37:0d:be:8d:d8:
3b:83:ef:48:60:b6:d3:8c:2c:99:68:df:36:f2:4f:7f:cc:d2:
50:e3:02:10:2f:bd:d4:9d:05:ea:8a:65:8b:92:06:b4:25:cc:
b4:79:37:2b:f3:c6:47:2b:be:ba:b0:dc:ba:c1:e8:70:8d:bb:
92:7e:28:27:09:03:59:f2:3b:37:fc:2b:a4:13:1d:db:f5:26:
50:20:59:74:ec:b7:c6:0f:d8:de:67:15:54:43:aa:03:d8:ad:
6e:a3:c9:a8:0c:04:65:e8:d4:72:01:db:10:d3:12:02:98:33:
4a:23:d4:5a:05:ee:16:dc:17:4a:c7:0d:fa:40:30:06:2e:99:
6c:81:68:b0:36:65:d8:89:ff:1c:3b:6a:32:a9:df:4b:a1:ee:
d9:b6:24:d7:7b:47:ab:48:e4:30:27:56:38:c4:31:c1:0d:4d:
6e:3e:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:31:21 2024 by rpki-client on console.sobornost.net