Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
File: uXhT3Vdz8qawcYefW567Dm9Ofao.cer (raw, json)
Hash identifier: B4E0DGjAPiYbh16lUAnza1GyibiXuA0kJ9Z8Y5R8Sn4=
Subject key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B39532B08C98FDAB03EEA49A6EC8EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.104.219.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:95:32:b0:8c:98:fd:ab:03:ee:a4:9a:6e:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:d4:f7:cb:f7:f8:6d:f5:f8:c0:cc:ad:c3:
31:b2:4a:4c:9f:de:39:ae:a7:46:94:a7:54:ae:43:
2f:0e:9b:3a:d3:6f:9a:92:c1:12:6b:88:13:13:3a:
6e:91:47:fb:89:fc:fe:ec:29:ef:b0:31:dc:9d:6c:
bb:56:c5:74:51:0c:08:96:b1:a8:c7:e7:0e:47:8a:
16:bc:07:7b:e1:2d:e1:00:71:26:3c:65:14:ad:74:
d4:f8:8d:9d:2b:8c:1c:43:4b:83:e8:b1:9d:47:ef:
5c:20:c2:12:1a:c9:1a:3c:d5:57:42:d2:0d:47:b5:
28:06:b2:f5:36:cf:96:30:5a:32:a0:2f:10:11:d1:
d0:ce:00:f0:e2:ef:23:1b:21:64:6b:5b:6a:b9:94:
52:53:8e:5d:aa:7b:69:9c:d2:e7:e7:5c:0f:de:42:
af:c7:0a:cf:0b:51:64:f4:08:5e:14:ef:48:de:0a:
4c:ab:c4:dd:cd:eb:85:52:01:4f:9b:dd:c6:1c:63:
f6:19:db:33:39:ed:0c:e3:01:ea:41:32:4b:82:f4:
55:39:3c:9a:61:8e:45:00:ee:0e:3f:db:61:b3:d8:
92:31:17:73:b8:7e:15:f2:1c:d4:f8:ee:57:ba:20:
54:26:2a:8f:d6:10:d3:1f:8c:a7:a1:31:df:4d:ff:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.219.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0b:ea:f9:bb:40:0b:11:e5:df:3e:13:90:e4:7e:d2:3b:38:
13:fb:a1:2b:2a:7d:be:49:ec:7c:51:3d:5a:f1:fa:72:84:d6:
39:66:8f:f8:37:7a:b2:5c:4f:e8:05:eb:fe:1b:2f:0f:ac:e2:
12:a9:9a:f2:ac:dd:5f:b5:d8:0c:9c:88:b2:3f:d1:82:b4:78:
85:2c:ac:a5:d5:33:92:98:a1:25:ad:f7:24:1f:6c:3d:0e:3f:
e0:eb:ac:ba:1e:b4:bf:25:4b:84:6f:69:8c:b9:43:f9:76:9e:
16:92:1d:54:a2:fa:b6:a2:d7:a5:32:66:92:93:93:1e:fe:f1:
bc:5a:a6:46:54:11:57:97:ca:67:78:27:ed:81:0d:6e:36:2a:
00:87:0f:9f:e3:0b:8b:87:a3:80:b4:e7:54:1e:f8:3d:b9:ff:
d8:fd:4f:24:70:25:98:fc:75:bc:82:b9:58:3e:51:64:a4:4d:
1f:f4:f4:7e:8e:77:13:4b:a0:d6:8e:a6:2f:a5:ea:19:b5:9f:
cc:1a:22:f0:0d:f6:8d:99:b6:72:07:bf:d9:e1:e4:9d:41:1e:
6a:df:35:3f:be:dd:fb:c2:21:33:72:c2:87:7f:8f:b8:45:9b:
5a:9f:41:fb:a7:1b:d5:8b:6f:94:49:15:98:32:bf:d9:da:46:
6c:ca:c9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:07 2025 by rpki-client on console.sobornost.net