Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
File: qHxnPzWntwWmtCTTORT6OS07li4.cer (raw, json)
Hash identifier: OFaWVrpQ5f7hvNrCdqlYdJlxhohDnRbyFrmbDNBOrro=
Subject key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B18FC5D891D37F9A205188105290E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.232.124.0/23
IP: 95.215.224.0/22
IP: 178.216.247.0/24
IP: 2a0c:a940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8f:c5:d8:91:d3:7f:9a:20:51:88:10:52:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:94:52:53:55:67:96:c7:31:98:dd:9d:bf:
d9:03:70:1b:d8:89:14:5a:03:64:5a:61:99:ff:b3:
fe:e5:1b:4c:06:e2:05:16:59:cf:25:a4:85:39:46:
b3:05:e1:bb:84:25:aa:59:1d:b5:b9:81:05:ff:5a:
63:8e:ca:42:63:95:1b:e2:64:b2:c8:02:a8:23:60:
b1:33:56:83:17:32:08:06:4d:63:a9:f2:2f:87:75:
ab:2f:fb:a6:22:66:49:4f:df:79:ec:13:4a:a4:8b:
08:1b:59:84:e5:e5:27:44:24:54:a0:28:ca:ab:40:
2c:c1:0d:a8:7a:dc:29:d5:25:72:65:57:ce:8d:4c:
44:46:46:1e:d8:94:d9:2c:cc:a4:e0:6c:8c:c1:8a:
30:61:fb:2b:31:e5:1e:93:78:e0:24:cd:fd:a8:4c:
91:5f:af:2f:ab:a8:b8:20:2a:98:71:2a:09:a4:18:
d3:be:6c:8b:92:82:6c:fc:2c:0d:80:89:55:f0:98:
c7:01:e2:0b:cf:cd:06:3d:06:cc:10:1e:dd:8e:3a:
ac:45:97:eb:d0:bd:bf:1e:ae:53:e2:16:df:6f:b0:
a5:20:11:76:d0:c8:be:fc:aa:87:50:55:81:78:b6:
5d:45:74:47:8c:e7:9d:9d:b7:45:30:bd:e6:e2:6e:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.124.0/23
95.215.224.0/22
178.216.247.0/24
IPv6:
2a0c:a940::/29
Signature Algorithm: sha256WithRSAEncryption
77:e1:6a:f5:6d:c5:3e:82:da:42:dd:71:10:a4:f2:3e:4b:9a:
32:d6:38:89:1b:a3:77:b7:17:00:28:3b:e9:b7:22:2a:89:85:
9c:36:04:68:77:30:66:96:7d:00:11:58:9d:2a:6a:bb:ab:a9:
5b:80:40:16:db:64:57:a1:b0:98:90:3f:ea:a0:61:16:74:41:
8a:75:20:fb:8e:6d:8e:cf:96:1b:bf:9a:d4:1a:e2:0c:72:99:
03:69:80:85:ad:f0:ff:15:06:d7:e9:74:74:b7:05:aa:18:ec:
88:3e:32:76:03:29:17:4e:31:4e:cf:96:e2:96:95:f0:a9:c6:
5e:45:41:31:69:bc:e0:08:1a:f0:c5:f8:52:7e:89:a5:5d:ab:
94:6f:db:42:e5:7e:22:cb:53:2f:72:02:dc:62:64:f2:36:2a:
6f:02:19:04:36:89:46:a1:16:71:96:01:23:71:e9:7a:6b:00:
7d:af:2b:af:b8:c7:12:3e:5b:9e:e7:0f:3d:11:cb:38:07:10:
b8:26:87:fd:5f:da:e3:06:e4:9d:69:d3:ea:84:90:1e:cc:50:
23:a6:52:a2:ec:8c:aa:1d:99:f3:14:61:80:82:a7:b6:18:66:
88:fe:99:93:cd:86:75:db:fb:af:d5:59:2a:2b:6d:53:22:8c:
f6:19:fd:2c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQhsY/F2JHTf5ogUYgQUpDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODdjNjczZjM1YTdiNzA1YTZiNDI0ZDMzOTE0ZmEzOTJkM2I5NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF+UUlNVZ5bHMZjdnb/ZA3Ab2IkU
WgNkWmGZ/7P+5RtMBuIFFlnPJaSFOUazBeG7hCWqWR21uYEF/1pjjspCY5Ub4mSy
yAKoI2CxM1aDFzIIBk1jqfIvh3WrL/umImZJT9957BNKpIsIG1mE5eUnRCRUoCjK
q0AswQ2oetwp1SVyZVfOjUxERkYe2JTZLMyk4GyMwYowYfsrMeUek3jgJM39qEyR
X68vq6i4ICqYcSoJpBjTvmyLkoJs/CwNgIlV8JjHAeILz80GPQbMEB7djjqsRZfr
0L2/Hq5T4hbfb7ClIBF20Mi+/KqHUFWBeLZdRXRHjOednbdFML3m4m46hwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFKh8Zz81p7cFprQk0zkU+jktO5YuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2FhMWFm
NC05MjU2LTQ2YzgtYWIwMi05NGU2NDcyNjIxNjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYWExYWY0
LTkyNTYtNDZjOC1hYjAyLTk0ZTY0NzI2MjE2MC8xL3FIeG5QeldudHdXbXRDVFRP
UlQ2T1MwN2xpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQBW+h8AwQCX9fgAwQAstj3MA0EAgACMAcDBQMq
DKlAMA0GCSqGSIb3DQEBCwUAA4IBAQB34Wr1bcU+gtpC3XEQpPI+S5oy1jiJG6N3
txcAKDvptyIqiYWcNgRodzBmln0AEVidKmq7q6lbgEAW22RXobCYkD/qoGEWdEGK
dSD7jm2Oz5Ybv5rUGuIMcpkDaYCFrfD/FQbX6XR0twWqGOyIPjJ2AykXTjFOz5bi
lpXwqcZeRUExabzgCBrwxfhSfomlXauUb9tC5X4iy1MvcgLcYmTyNipvAhkENolG
oRZxlgEjcel6awB9ryuvuMcSPlue5w89Ecs4BxC4Jof9X9rjBuSdadPqhJAezFAj
plKi7IyqHZnzFGGAgqe2GGaI/pmTzYZ12/uv1VkqK21TIoz2Gf0s
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:56 2025 by rpki-client on console.sobornost.net