Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer (raw, json)
Hash identifier: VCFWORJ6HQUVTcN2OENv1Z85UNufKm5Wdw5iKyblCrY=
Subject key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9746AB66F5DF2312CA0C98FE87422
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.212.109.0/24
IP: 193.247.109.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:74:6a:b6:6f:5d:f2:31:2c:a0:c9:8f:e8:74:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:a5:7f:01:4d:16:2e:c8:9d:cf:fa:11:92:
6a:62:e2:08:43:38:90:f4:b9:60:86:c2:1d:ea:9b:
3b:9f:98:55:1f:22:fa:a6:91:41:d1:42:d6:07:92:
6d:81:b6:50:4e:1f:84:f8:09:cd:71:1c:f1:13:5b:
ff:82:3e:7d:36:14:9c:08:ed:52:87:4c:03:8e:99:
21:48:ba:86:19:fe:94:f5:2a:cd:4f:46:53:cb:18:
3c:53:76:d0:a1:4f:d7:60:11:82:7d:89:e6:44:86:
4d:c7:02:0e:54:02:18:68:ca:f8:14:81:a4:a7:60:
9a:e4:a5:43:44:ac:86:12:8b:87:97:0b:3e:5a:55:
65:4b:01:aa:b1:57:f9:85:b7:09:97:77:75:c1:8d:
6a:da:86:50:54:a6:0f:49:b3:72:ad:32:1f:7f:aa:
31:09:50:0b:7a:97:a3:9a:2e:a0:3e:21:56:23:aa:
2f:f1:9f:9e:31:14:78:f4:39:ac:2e:cb:e0:51:ae:
07:38:a7:38:da:ef:c9:e0:3a:9a:47:6d:ea:4d:bf:
5f:1a:ca:43:f8:b1:f3:d7:8e:81:58:39:5b:ad:f3:
34:d5:02:68:c5:67:e4:5a:ef:79:91:d0:1f:6c:c9:
72:7f:4d:08:39:b2:ea:1a:58:b0:d5:3c:be:33:01:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.109.0/24
193.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0e:7c:c5:d9:51:41:b6:29:9a:cf:47:88:00:34:eb:8a:6a:
13:96:89:06:5d:b4:2f:ef:39:40:cf:0b:79:e6:04:32:45:4e:
1d:eb:aa:6e:d5:08:60:7e:e4:2a:84:88:ad:0a:26:80:0b:af:
9f:a2:60:68:3b:57:fb:9d:ec:3d:80:2c:e9:ba:e2:b1:ec:cd:
28:89:18:4c:37:28:2c:f8:e6:a2:c9:2f:ac:d6:c7:6e:72:a6:
17:1c:31:00:8a:ef:c6:f4:6a:08:98:2e:db:0d:32:ec:9b:bc:
df:be:2d:34:b8:af:f6:90:9c:d4:fc:7a:1f:ff:f6:d6:18:11:
bc:bc:76:a8:02:de:9d:61:be:d2:d4:aa:22:7c:e0:28:ad:ca:
b9:bc:ae:b0:2a:78:90:54:dc:14:f0:29:93:3c:6e:92:8b:b6:
68:ee:b3:05:ce:8c:f6:65:5b:96:61:97:1d:f3:08:e4:5e:9c:
a8:7c:e5:bf:9d:14:1a:3a:85:7a:1d:1c:d0:f0:95:b8:51:98:
7a:d1:13:51:6e:21:48:c7:7d:8e:27:dc:a6:09:3f:14:8e:96:
1a:f5:4d:c9:f7:4c:a7:92:d6:f5:73:ba:ee:36:c8:0a:b8:23:
dd:1e:1d:f1:ee:2f:bf:1e:b7:c2:97:e6:74:4a:50:75:d0:1f:
80:fd:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:06 2025 by rpki-client on console.sobornost.net