Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
File: qreGFvOzntSCDQTOCY6nwgZVMUs.cer (raw, json)
Hash identifier: yFOPNJ9JiHbT6ayjM4jZ/6InaBLCna3FFCopOALdSpI=
Subject key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F4FC0F104CDDA2C35D0BCB10E1E79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 92.119.64.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4f:c0:f1:04:cd:da:2c:35:d0:bc:b1:0e:1e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:cc:5a:0e:2e:2d:b5:4b:72:36:5c:a5:c6:
91:21:22:21:1a:fa:e3:c3:63:59:2a:a0:bc:a6:df:
e4:38:96:6f:1f:56:e7:1e:79:d8:7f:10:4d:fd:cf:
50:eb:c3:8b:44:82:05:8c:c0:a9:c0:a8:9e:63:b4:
27:1d:4e:62:74:62:9f:24:88:ca:f8:9c:5a:65:c8:
bd:81:b6:49:12:96:c4:30:20:55:db:81:92:7b:2e:
d4:12:cd:1d:44:bd:69:4a:d5:2f:32:eb:2f:54:ac:
3f:e3:ef:77:0a:39:33:41:37:0d:a3:73:6f:f6:fd:
3d:00:84:cb:1f:4f:6f:f9:65:f2:29:3f:80:44:8d:
c4:27:f4:70:96:43:cf:72:6c:c5:e3:71:fa:ce:e5:
ed:a2:fc:3e:9e:2c:5b:b7:b7:f3:48:3b:94:69:78:
2d:7d:45:54:c9:11:5e:ec:43:4e:8e:61:bd:be:83:
24:20:62:52:72:3e:9f:5f:17:9a:b2:3b:0f:64:4e:
cf:c7:8e:0c:8d:69:f5:c2:f6:49:ce:2b:0f:85:28:
e2:64:e8:63:ab:14:98:81:50:44:58:97:14:2d:e1:
78:70:2d:f5:61:27:0f:f6:04:70:4d:be:31:0f:b8:
09:fc:b8:46:cf:bd:c7:22:7a:31:d1:68:7c:6f:86:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.64.0/22
Signature Algorithm: sha256WithRSAEncryption
96:58:bd:fd:70:8d:83:b6:a9:5f:af:10:9b:60:77:dc:61:5d:
b9:26:31:a6:85:1c:cd:28:3b:2f:6d:b8:93:de:89:2d:b0:ff:
24:40:a0:cc:53:b1:1f:3d:b9:a7:65:06:85:c7:2b:96:dd:01:
11:83:66:86:e0:79:c6:ce:52:1a:4d:fa:1a:ed:de:20:0f:1b:
84:a0:d5:58:ab:cd:ba:55:83:93:eb:10:8a:37:0c:f4:b3:cf:
68:cf:5b:82:81:13:c9:cd:6a:10:cf:b7:49:bf:e0:86:d2:e3:
94:37:70:43:28:aa:d7:86:74:98:73:bd:c2:87:df:62:6c:8e:
b4:3a:56:16:4a:9c:1b:bf:62:6f:b8:43:4a:46:ad:2a:6e:40:
cc:74:3e:2f:b2:04:f0:cb:a0:3f:73:4f:32:d4:8e:45:25:0b:
08:8f:15:c5:8f:10:8f:16:b3:4b:30:bf:63:dd:f6:bf:ca:b3:
55:1e:59:1b:09:c1:fb:78:39:9a:7f:bd:63:10:72:1c:8c:a8:
68:a2:45:e2:24:9e:32:6a:58:45:c3:67:83:a8:e5:7a:01:e7:
08:d7:dd:9a:0a:f9:e7:fa:41:76:97:49:11:98:7c:9c:95:a1:
95:96:88:9c:3a:68:76:a9:54:0e:9e:a8:59:0a:cc:0b:59:56:
05:09:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:57 2025 by rpki-client on console.sobornost.net