Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
File: sUiB-j51o4Uc9wQZE1q91SnS9oI.cer (raw, json)
Hash identifier: BmZHugG27CVJn0BpNnFjEdkWYup8Raw1rZaaCkt8psY=
Subject key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D66011C4DB3E2DC59D7C69EAD48B40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.216.234.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:60:11:c4:db:3e:2d:c5:9d:7c:69:ea:d4:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b14881fa3e75a3851cf70419135abdd529d2f682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:c0:d1:1a:9c:49:b4:f8:b9:58:1d:96:e3:
63:cc:4d:d5:ec:ff:1c:78:2c:2c:87:f5:07:74:fa:
ab:dd:27:39:31:a5:6a:f0:05:8f:7c:d6:55:26:05:
23:80:6a:1d:01:82:82:d3:7d:5c:c6:4a:03:24:b2:
df:1a:9a:c8:e5:f2:70:e2:f7:d2:2b:4a:bb:4f:98:
d6:d2:77:dc:f0:b4:a7:4d:f9:0d:2a:a9:8c:d9:38:
6c:8d:66:13:b0:32:b2:27:7c:e0:b7:f4:1b:cf:6b:
63:0d:f1:84:8d:65:22:27:48:83:68:27:f0:1a:2e:
e4:04:e2:b4:61:0f:68:8d:65:a9:df:f1:cc:3e:61:
45:66:4c:a3:d5:71:04:47:4e:7f:90:bd:3b:53:85:
77:f0:58:01:b1:68:1a:aa:c4:4e:ea:68:b2:91:af:
42:4b:9b:5f:a2:19:65:98:5f:eb:6d:47:5d:7c:95:
28:91:05:e3:67:40:19:50:8e:b4:dc:f7:ec:15:90:
dd:8d:6e:e1:bc:83:c8:be:f2:88:c0:f2:fa:9b:6a:
52:4b:43:55:88:45:dc:67:1a:bc:79:4a:b4:b7:ea:
65:b1:63:8a:21:02:ff:0d:4b:2e:06:3e:1c:a5:cb:
73:1c:26:1b:8f:e3:f2:c5:37:17:8f:70:7d:c6:92:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.234.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fe:eb:3f:b9:19:45:6f:64:6e:c8:40:f2:5e:1f:e9:fa:bb:
d6:a7:3b:4a:ae:84:22:3c:da:4d:a4:b9:d0:94:92:9e:98:71:
c1:74:4f:cf:b8:b5:b2:db:f4:14:4e:75:a5:62:de:0c:51:0f:
ea:22:06:06:1f:9e:65:9f:02:53:33:96:e9:57:4e:5f:91:4c:
c3:c2:3a:57:e0:6c:5e:75:11:e3:3a:56:72:12:6f:b8:0c:d3:
38:a2:e3:84:d9:21:44:71:98:12:5f:cd:bd:e2:69:c5:f8:74:
50:23:dc:26:32:ba:ec:0f:79:97:ba:56:3a:f2:b0:a7:e0:3c:
ba:eb:eb:c7:14:71:60:38:d3:84:6f:e8:91:f6:6b:16:d1:3b:
1e:d0:8e:af:d2:35:1f:da:be:0f:ef:40:21:d0:b7:e8:04:e9:
20:1b:61:3e:63:47:7c:15:42:f1:0e:5c:a4:e9:d4:89:43:d9:
f1:39:59:6e:37:7f:d8:1f:9b:54:b6:ab:2f:b2:fa:b9:75:f6:
35:33:03:13:a4:10:4f:52:73:89:2d:38:2b:a5:0a:04:dc:27:
d2:7a:71:04:34:ff:db:52:9d:44:ec:2d:27:60:2a:10:3d:1d:
6c:c8:fd:bd:eb:c3:ca:1f:57:00:4e:65:98:5d:2d:ec:21:d4:
88:06:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:02 2025 by rpki-client on console.sobornost.net