Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.cer (raw, json)
Hash identifier: CFG2wddTYkjlA+Is0kriVZIRiD7rBva7f9qgbMb9RBc=
Subject key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBC0EBAD010910AD6F34DCA90B3921
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.56.171.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c0:eb:ad:01:09:10:ad:6f:34:dc:a9:0b:39:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:aa:9b:de:9e:2d:12:0d:2a:83:58:47:4a:
82:39:c9:09:5f:34:74:cd:a4:55:da:f3:89:83:e4:
4c:88:b6:6e:20:8f:fa:22:aa:32:d5:16:a5:ae:b3:
9f:bf:a4:29:9f:10:32:d1:47:e4:ad:a2:a5:48:a2:
a3:26:cf:11:0b:7f:58:df:b2:3c:03:53:8b:a3:de:
0f:bf:99:ca:a4:25:57:56:85:e8:33:9c:9b:a1:98:
de:95:a5:86:fd:e5:95:44:88:e3:ad:4e:78:36:37:
14:3b:07:d0:43:17:d0:6d:80:e5:9e:85:54:dd:75:
d0:4a:ec:15:ab:63:16:95:79:b9:19:a4:c4:b8:2a:
c4:1b:57:d2:34:99:ef:a5:4a:03:60:e8:52:cb:d1:
ce:2f:03:88:93:7a:7a:d5:a6:ef:6b:31:26:5c:08:
6e:50:e2:6e:de:2e:34:6f:0b:33:c4:41:40:25:e2:
8d:76:9f:dc:82:3f:0e:59:31:25:53:62:44:84:bb:
25:9b:ac:f6:09:cf:fb:49:f8:21:b7:c1:df:ee:97:
5d:63:d7:13:4d:c7:d9:ba:f2:97:63:60:af:80:c4:
28:dd:59:48:9c:1e:f9:d4:b0:39:ea:c7:b2:29:b3:
8c:25:5f:16:a9:3a:a8:b9:b4:86:55:62:30:9a:b8:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.171.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2e:b5:79:b8:d1:85:50:0f:06:00:40:c0:8f:cf:46:e2:16:
a6:ca:c1:59:f0:c1:14:2d:c2:ab:91:7b:d6:f9:b1:49:45:97:
24:b0:55:9e:24:84:09:ec:c5:c5:99:24:2e:7f:5c:6f:76:53:
ff:e6:bc:db:bf:8a:12:43:8c:3e:06:43:47:f8:8c:d9:e7:53:
16:10:c8:91:ed:a8:98:4c:de:c5:44:3c:2c:f8:08:d2:d1:c6:
7a:5f:c0:33:df:cc:a7:1a:3d:4a:81:95:8a:e5:47:8c:ab:18:
95:a7:dd:dc:17:88:b5:93:79:bf:53:31:e4:5a:cd:17:76:7d:
a8:3e:f4:cb:f3:85:72:a4:22:40:8e:6c:99:f6:bd:53:44:1e:
2c:da:58:c5:ef:69:89:9d:53:96:5e:7b:f3:ec:e2:f2:79:64:
3e:04:ce:2c:cb:42:0c:1d:41:c0:f4:49:89:b5:08:60:9f:60:
0b:2f:64:8c:ec:e8:c2:85:5c:72:a4:eb:8b:76:3b:41:c3:ec:
c4:8d:dc:6f:72:2e:91:81:82:8c:ee:f0:01:e5:26:66:be:a3:
b6:a0:26:91:0c:4b:8d:44:1e:80:d8:f9:00:cc:10:89:91:16:
ac:13:20:24:a4:e4:a4:8e:99:2c:1c:ec:d8:eb:ac:77:59:ad:
4e:ec:10:8c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQi+8DrrQEJEK1vNNypCzkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTZhYmRkOTQyMGYwNGJhOWMxY2QyYzM0ZGM3YjM1Mjk4OGFmOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Oqm96eLRINKoNYR0qCOckJXzR0
zaRV2vOJg+RMiLZuII/6Iqoy1RalrrOfv6QpnxAy0UfkraKlSKKjJs8RC39Y37I8
A1OLo94Pv5nKpCVXVoXoM5yboZjelaWG/eWVRIjjrU54NjcUOwfQQxfQbYDlnoVU
3XXQSuwVq2MWlXm5GaTEuCrEG1fSNJnvpUoDYOhSy9HOLwOIk3p61abvazEmXAhu
UOJu3i40bwszxEFAJeKNdp/cgj8OWTElU2JEhLslm6z2Cc/7Sfght8Hf7pddY9cT
TcfZuvKXY2CvgMQo3VlInB751LA56seyKbOMJV8WqTqoubSGVWIwmrgiUQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLFqvdlCDwS6nBzSw03Hs1KYivjZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzJhZGMz
OS0zNjMwLTQyNWYtYWYyOS1mYmIwZDNjMTA0MjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMmFkYzM5
LTM2MzAtNDI1Zi1hZjI5LWZiYjBkM2MxMDQyMy8xL3NXcTkyVUlQQkxxY0hOTERU
Y2V6VXBpSy1Oay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAAjirMA0GCSqGSIb3DQEBCwUAA4IBAQCVLrV5
uNGFUA8GAEDAj89G4hamysFZ8MEULcKrkXvW+bFJRZcksFWeJIQJ7MXFmSQuf1xv
dlP/5rzbv4oSQ4w+BkNH+IzZ51MWEMiR7aiYTN7FRDws+AjS0cZ6X8Az38ynGj1K
gZWK5UeMqxiVp93cF4i1k3m/UzHkWs0Xdn2oPvTL84VypCJAjmyZ9r1TRB4s2ljF
72mJnVOWXnvz7OLyeWQ+BM4sy0IMHUHA9EmJtQhgn2ALL2SM7OjChVxypOuLdjtB
w+zEjdxvci6RgYKM7vAB5SZmvqO2oCaRDEuNRB6A2PkAzBCJkRasEyAkpOSkjpks
HOzY66x3Wa1O7BCM
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:02 2025 by rpki-client on console.sobornost.net