Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer (raw, json)
Hash identifier: wB5DoWW5LW746e4wDd3GBlVHSbyXlm7ViP4gEj/zgms=
Subject key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D2B4EFF70835C7B4EEDA0F6CC76C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207496
IP: 195.162.6.0/23
IP: 195.177.194.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2b:4e:ff:70:83:5c:7b:4e:ed:a0:f6:cc:76:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:c1:bb:54:f2:aa:77:1e:6a:96:35:41:3b:
3f:00:cc:2c:a3:a6:26:f0:94:21:29:69:90:8a:f9:
64:54:9b:a2:05:80:b4:e9:ed:39:a8:1d:b6:f5:1d:
29:a5:21:00:21:8a:98:8a:d4:70:d4:7e:5a:01:b2:
cb:33:fb:92:97:f4:0c:de:99:02:9b:b4:03:7b:e2:
1d:df:91:0e:d2:27:20:f5:7f:95:02:92:04:2a:a5:
57:ca:b7:bc:10:14:29:54:50:6e:cc:08:1d:88:e3:
d3:c5:a7:f7:17:8c:d5:0d:07:7a:e6:82:eb:14:6f:
79:02:0c:31:64:ab:e4:bc:0d:a5:ff:15:83:42:e9:
5c:95:fe:0a:81:82:a7:32:9e:17:e7:b8:4c:16:ec:
f9:6f:0b:6e:87:5c:5a:4a:a4:ca:8a:38:25:39:69:
ad:0f:68:2d:ee:f4:6e:78:15:48:ea:c5:19:1f:7f:
4d:36:b6:85:35:81:a9:b7:94:a0:ba:f5:1a:9b:16:
40:c7:0c:5c:89:c0:0c:17:0b:71:96:ae:cd:b3:86:
27:c3:fe:ce:ba:e0:ce:71:22:90:cd:a9:02:ba:d8:
6f:f5:a4:64:b2:96:39:b5:05:7b:ad:0e:e4:41:09:
1f:49:a9:eb:a8:e4:7c:e7:d3:14:7c:4d:33:8a:3b:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.6.0/23
195.177.194.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207496
Signature Algorithm: sha256WithRSAEncryption
16:b3:83:bb:81:19:b4:ad:0c:c4:bd:89:e0:cb:b8:f0:40:19:
36:a7:0d:ac:30:91:98:6b:bf:f2:3a:59:fc:bc:4a:73:ef:84:
7d:56:27:6d:08:29:af:50:98:29:f8:ca:c4:8b:84:5e:3d:32:
63:33:95:6e:c3:58:e0:b0:8c:5f:01:d6:44:51:7f:48:58:24:
e3:83:6b:ed:40:df:8b:7e:cb:ec:4f:40:2a:ae:01:01:ec:69:
1a:bb:34:c8:b6:08:3a:d1:0c:a7:28:69:2c:81:e5:c1:65:54:
32:f8:75:a2:c7:2c:6a:7d:da:7b:d5:ce:59:32:96:da:a2:e7:
5b:8a:ba:a4:83:f1:fd:de:7e:04:a8:c2:fd:12:b6:30:70:b1:
50:2a:68:f4:9d:fe:70:8f:11:b0:a8:f2:ae:71:2a:b6:a9:30:
b3:c0:63:a3:ee:9c:41:6b:7a:60:d2:07:5b:5e:b8:00:12:a3:
7a:c9:6d:ed:5d:bf:58:f5:6e:39:8c:78:da:3c:c8:55:5e:2f:
b4:91:9c:12:8a:31:0f:53:eb:f4:b3:e2:a3:12:80:6d:da:60:
40:f6:b8:0f:44:f7:4a:15:3d:9e:1c:f9:02:dd:4d:30:de:80:
8c:04:fb:d7:32:ee:ed:b9:7c:58:0b:46:20:72:db:24:29:c4:
0b:28:dc:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:59 2025 by rpki-client on console.sobornost.net