Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
File: pJuD9b3hodyT3mlHaDfp46N3l68.cer (raw, json)
Hash identifier: yt0Y9/GYmm2vJF6bPgK8b9FlFxM9H4tM0vW0e61URDs=
Subject key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FCAB50A0F7F1BF262147C87660F5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 134.60.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ca:b5:0a:0f:7f:1b:f2:62:14:7c:87:66:0f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:6d:27:c1:25:6e:ba:b1:49:02:95:46:9a:
5f:9b:85:18:b1:bf:27:13:a4:01:4c:ac:7d:55:91:
20:1e:e2:c7:01:02:51:60:fe:34:4e:f9:01:4a:1d:
66:74:49:f1:39:f1:27:b9:18:e8:e6:16:32:ce:f1:
2d:72:64:fb:a8:83:35:be:4f:a9:71:25:72:59:68:
76:3a:63:ed:12:ac:ee:0b:c5:ca:fb:b1:4e:c3:5d:
c9:56:e8:55:08:34:bb:01:d2:91:bc:31:b1:e8:32:
4c:40:88:12:7b:22:9f:9a:8d:73:eb:8c:1b:74:06:
c3:9a:37:2d:43:89:f2:3b:bd:77:4b:80:a8:2f:2e:
cb:fe:37:e6:b6:d4:c3:77:71:ed:dc:9b:47:a8:4d:
7a:0a:75:d6:6f:48:27:4e:4a:f4:d4:29:77:86:ae:
75:06:c0:07:9e:65:e1:d8:d6:be:15:ff:d1:3b:3c:
22:0f:dc:2b:d2:25:82:27:19:44:89:d8:81:67:00:
9e:83:47:9b:b6:75:51:20:1a:a1:67:a5:52:70:6b:
7d:71:47:34:4e:d1:b8:a1:32:f4:f9:49:28:36:37:
ff:f3:96:92:23:c7:77:9e:3c:72:b7:e4:f5:96:94:
e1:9a:d6:6d:d4:87:0e:da:84:82:66:3b:2a:6f:e9:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:e5:37:58:06:8b:2e:09:99:d6:90:22:16:b1:dd:45:95:53:
e8:be:01:9f:0d:2f:c6:40:50:fe:81:5e:97:c3:68:1b:f2:c7:
46:0e:3f:b8:11:a4:73:d1:d9:ff:3d:13:c9:56:76:bd:f7:d3:
09:2b:1a:3f:4b:a5:d8:f4:7e:0c:39:b2:f7:79:61:ff:f1:f0:
b4:59:fe:cd:32:95:fe:9d:5d:3f:5c:5e:5e:52:b1:59:e7:18:
57:7b:44:aa:af:56:59:19:a0:d4:d6:5c:c0:2a:66:c3:ef:6e:
ad:7e:8a:0e:28:3f:12:01:ac:e9:3f:60:b3:93:9b:42:67:0f:
a0:17:ca:c1:95:99:0e:14:18:e4:64:75:13:11:2c:58:46:bc:
a9:f1:41:1b:ac:b2:6e:a1:18:d2:75:c3:d8:ac:f8:d1:29:14:
a9:4b:80:18:62:6d:51:5f:53:e7:7e:08:9f:7a:3f:08:38:3a:
d2:01:f8:19:c9:a2:1a:c2:d6:33:03:19:f5:2b:30:af:ff:f8:
0e:4a:c0:f3:01:56:9f:e1:29:0d:94:9b:5e:b4:4b:3d:16:c1:
ea:5e:fb:b5:69:d7:eb:df:03:e5:e1:0f:cd:3e:61:0f:dd:e3:
e1:25:48:5a:b4:87:0b:17:6e:fd:4e:15:f1:38:a9:3d:8d:2c:
b2:71:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:52 2025 by rpki-client on console.sobornost.net