Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer (raw, json)
Hash identifier: 8bIFu4GIGiH3he0tNAncnrTw4/An/3HvN618ZxV0QWE=
Subject key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222033A192779574F1E8E8B884879882
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.14.28.0/22
IP: 91.200.8.0/22
IP: 185.175.244.0/22
IP: 195.22.140.0/23
IP: 2a0e:880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:33:a1:92:77:95:74:f1:e8:e8:b8:84:87:98:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:8b:dd:a2:cb:a3:58:4d:ea:ce:79:aa:9e:
76:d6:93:bb:26:32:2a:b4:1d:08:f3:70:52:c5:4b:
e4:42:97:3e:1f:03:3d:e2:ff:b7:3b:3c:3a:0e:60:
82:9f:b2:83:ce:98:19:ef:49:9d:df:8c:cc:b9:48:
ad:53:02:5d:a4:18:e7:b1:a0:37:81:da:cf:9c:46:
a8:58:7f:91:c2:55:8d:fe:91:df:af:d2:f8:7d:60:
e2:48:0d:5c:62:c6:04:58:84:ff:f3:c9:c9:73:70:
af:b0:b3:cd:ea:fd:39:e9:f1:28:5b:8b:04:0a:f3:
df:a3:10:ae:99:21:05:03:c1:54:15:d1:5c:44:1e:
12:ba:b0:17:13:a9:9d:5a:e9:ec:14:6b:68:f7:9a:
18:c0:8a:4a:d6:0f:e9:a9:2d:26:51:e4:4c:cc:5c:
b5:e2:7d:62:c5:10:c9:4d:c7:0f:a1:6d:54:e3:2d:
d0:94:ac:39:a6:72:32:41:cb:d5:3c:0b:85:9a:19:
6e:42:d3:e6:32:16:01:fc:0e:de:1b:b1:61:4e:80:
76:7c:2d:d5:de:de:52:04:32:76:46:07:2b:80:ac:
27:1b:e5:8b:c8:b1:c8:cb:0a:a2:6e:fa:d4:bb:62:
c5:3c:ce:cd:95:01:c3:48:21:d8:38:28:e5:1a:0a:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.28.0/22
91.200.8.0/22
185.175.244.0/22
195.22.140.0/23
IPv6:
2a0e:880::/29
Signature Algorithm: sha256WithRSAEncryption
9c:cf:b3:aa:bd:4e:01:55:5b:f3:73:41:f9:df:c1:3c:e7:d9:
59:fb:79:2d:f3:47:32:ee:94:9e:9c:76:2e:0b:50:86:aa:8c:
eb:65:01:43:5a:74:ab:f3:b9:e2:ff:59:8a:6e:42:d0:72:7d:
a9:aa:3c:66:05:70:0f:66:80:2a:bc:44:fc:85:f0:4a:9f:b1:
09:46:fd:0a:23:f9:33:ff:81:b4:90:5b:0f:55:ee:0d:35:51:
3b:d2:49:0f:8d:9d:70:f1:17:46:87:a9:af:58:c4:3a:91:6b:
9a:f4:b4:d1:1a:82:a2:b9:5e:c4:41:85:f3:4e:9c:a0:65:e0:
63:12:7d:b8:5c:c6:41:9d:a8:e1:e5:8e:29:34:7d:1a:1c:cd:
19:78:f6:9d:07:64:09:f9:bd:fd:8e:78:3d:a5:2c:1d:2e:1d:
af:a7:07:e1:ac:05:21:9d:81:04:ee:c2:74:21:75:6c:78:6d:
f9:32:d0:a6:93:63:8d:0d:c3:57:75:63:8b:34:9b:05:73:88:
3d:53:33:d0:07:ae:e3:a4:25:b0:f2:44:12:d5:a5:e3:3f:3c:
fe:d3:ad:21:cd:a1:3c:e8:e1:0f:c1:26:9a:b2:15:f3:e0:16:
c2:02:af:41:0b:f8:c2:39:db:12:3d:56:04:fd:13:80:e5:b3:
8b:5f:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:05 2025 by rpki-client on console.sobornost.net