Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.cer (raw, json)
Hash identifier: Bg7XkalrVKnB4m2Hks4sxGpwpHA1UiDKBss5LmPyiNE=
Subject key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521DE168D43CA2FC08E4BAA423C0524
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.171.161.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:de:16:8d:43:ca:2f:c0:8e:4b:aa:42:3c:05:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:f2:32:fb:63:27:6d:92:d9:f9:f1:51:26:
72:30:ce:b1:d6:3c:ed:6b:24:16:0b:78:41:e4:a3:
8a:bd:0e:9b:3f:65:a5:16:b6:bf:53:7f:4a:7e:ee:
aa:3a:02:3b:71:8a:0d:45:3a:8b:43:b8:69:1c:36:
78:e8:59:f3:db:37:27:c8:66:75:c1:7a:4d:89:98:
a8:96:2e:1d:8b:37:cb:10:22:cf:16:4a:42:f1:fa:
ee:ad:a5:c2:6b:92:2e:bd:22:06:15:13:d6:11:79:
e1:14:9c:d5:85:4d:79:11:b9:f1:4d:49:14:35:88:
7e:3d:f5:c3:98:7c:96:5d:4e:7c:59:e3:4c:f9:89:
19:4a:7e:d9:d1:a5:35:07:f8:32:6e:c6:52:00:ff:
73:1f:71:7b:7a:6a:38:8e:d0:76:7f:25:a4:bd:6e:
17:2e:0f:b2:53:f3:cb:d3:a1:06:af:71:cd:4d:46:
d4:98:a3:d4:42:c4:4f:21:24:a5:88:8f:2a:72:bf:
dd:ec:3a:be:82:f8:5c:a1:75:08:08:95:f8:c3:30:
96:b5:ff:ef:c8:06:50:49:48:e4:52:24:fc:41:b9:
bf:5a:51:58:17:82:bb:18:c2:a4:41:09:65:24:72:
8b:b7:33:93:d1:28:8f:c8:4d:14:11:b7:44:13:f2:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.161.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c4:bb:00:54:7c:19:d9:e4:b0:44:99:95:11:60:36:2d:3e:
ec:a6:0b:b1:ac:d9:c0:13:7f:87:08:09:65:7d:09:19:53:71:
aa:a5:66:98:6d:69:17:f4:91:14:b2:15:b3:1b:e9:aa:dd:e0:
ba:82:1c:08:65:4c:05:04:1b:cf:3c:bd:b1:ba:ae:89:0d:27:
aa:a7:99:64:ea:a5:bf:e7:65:77:85:77:53:f9:30:63:55:36:
5d:73:cf:aa:ea:da:e7:b5:6f:9a:ae:15:d5:f3:c5:f7:11:49:
29:a1:8f:ea:df:99:ae:80:5b:bc:b2:c8:6c:ba:0a:81:7f:68:
db:05:47:5a:a5:0b:fb:b3:14:e0:96:c4:b6:4e:6e:01:be:c7:
d8:8b:e2:a1:e6:1c:53:bd:d2:ea:03:9c:26:7a:c7:8e:29:8d:
6f:ff:cb:f6:08:73:7f:d7:b0:f9:46:2c:4c:35:77:25:b6:8c:
ac:51:ac:ca:3a:63:eb:4a:75:f7:54:6a:b7:c5:8d:3a:ea:80:
83:60:f0:53:c8:09:74:4f:33:74:ff:62:5f:bf:d8:7a:0e:44:
c6:12:74:7a:94:0d:36:c4:7c:e9:53:2d:d2:90:8b:0d:10:e6:
89:80:68:a4:2b:be:70:1e:b3:81:13:09:48:21:ef:9b:e1:76:
cf:c9:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:56 2025 by rpki-client on console.sobornost.net