Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer (raw, json)
Hash identifier: mgFVCPFjuGzjQbOfM9b3l+fu+V15dbmZx/cktpLDKP0=
Subject key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422201AEE502127B1F25A509871234E9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 89.33.107.0/24
IP: 89.42.108.0/23
IP: 89.43.79.0/24
IP: 185.128.96.0/22
IP: 185.197.149.0/24
IP: 195.62.51.0/24
IP: 213.170.208.0/22
IP: 2a06:cec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1a:ee:50:21:27:b1:f2:5a:50:98:71:23:4e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:16:5a:ee:0d:38:25:fd:ca:97:c9:53:50:
da:b3:c3:3b:fd:19:0e:d0:5b:e9:6b:7c:e5:eb:8f:
e4:df:39:2e:34:8e:3f:5d:4b:76:0e:d1:ab:fa:45:
e8:70:c6:4f:f1:7b:66:89:94:26:e3:45:53:53:ce:
79:2d:15:7c:60:dd:a9:10:05:e0:8c:44:30:5c:29:
73:0c:4b:99:a4:59:4b:52:d1:04:c0:d2:9a:44:45:
30:aa:23:52:9d:78:6f:26:92:0b:37:a1:93:0c:90:
75:51:41:aa:72:31:30:54:85:e8:5d:b9:5d:f5:71:
9c:c2:96:73:d0:13:8b:79:50:45:9e:2a:61:9f:99:
1f:be:e4:70:d3:13:b8:ca:20:73:56:50:4e:95:fc:
85:a9:c9:6d:60:4b:5d:86:3d:77:7f:0a:df:c0:61:
c4:36:fd:0a:57:34:a9:32:22:d4:dd:43:9b:80:80:
02:43:5a:0a:d6:5e:c4:19:1e:85:fe:e6:89:d5:b3:
37:b7:eb:fc:aa:b4:0d:13:10:02:a3:f4:85:28:f4:
8e:dc:d8:bd:88:13:e9:e9:8a:66:9f:1f:28:2a:a4:
e6:e1:08:d4:40:41:b9:dd:c9:cb:53:be:b7:76:fe:
07:95:d8:5c:98:1a:44:7d:03:fa:93:20:23:9e:a6:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.107.0/24
89.42.108.0/23
89.43.79.0/24
185.128.96.0/22
185.197.149.0/24
195.62.51.0/24
213.170.208.0/22
IPv6:
2a06:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
15:83:cc:a3:08:29:9f:8a:cf:44:c3:16:0a:83:b7:5a:bc:63:
a2:15:2a:79:65:56:62:6b:a5:87:4c:eb:81:4f:23:e8:1e:11:
d1:d9:88:0b:7a:20:20:07:c0:21:92:bc:b4:0e:df:34:0b:0c:
68:2e:65:b1:cd:2a:86:df:ff:3a:b2:b0:95:1d:79:0f:68:66:
6f:41:e0:d7:30:60:65:d4:9e:b7:e4:e6:a7:18:e4:f3:06:97:
63:c1:0c:be:27:27:bd:84:f0:52:6a:94:89:db:de:17:5f:bc:
74:df:45:ba:11:49:d2:c4:9d:02:10:90:28:3c:64:6c:68:2b:
97:97:fa:2b:52:fa:3b:88:b4:de:63:bd:c0:72:22:d3:8b:1e:
ad:f5:d1:3a:55:3e:b9:fb:81:90:80:fe:79:15:c6:92:dc:37:
0b:19:00:6b:71:ca:71:21:4e:2c:34:72:df:1d:70:ba:84:7b:
e6:db:1d:a9:2a:5c:ca:0b:36:34:f0:79:fb:50:f5:dc:f5:1a:
47:f0:8a:0c:1f:c2:ac:10:57:eb:8c:db:a9:e2:b8:56:6d:1d:
cb:5e:ab:56:d9:f5:0e:2d:fc:34:87:2c:6a:9e:a0:69:5b:e6:
e5:b0:ba:7a:d7:61:0e:af:62:54:be:ca:b2:a3:58:bb:78:e2:
0f:70:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:59 2025 by rpki-client on console.sobornost.net