Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
File: vFbbeW3vDb20x48kRavswVcKb9k.cer (raw, json)
Hash identifier: cpHzVeAIpkaasDP/uaZaw16lOXPc5C2ckKZOVeRV5kQ=
Subject key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E4389E545FE498B45D33BD1A0D1A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.199.16.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:43:89:e5:45:fe:49:8b:45:d3:3b:d1:a0:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:9b:3e:c5:ab:85:fd:c3:7b:90:24:f0:dd:
9d:2f:ce:c0:32:cd:1d:2c:87:e8:f0:29:30:08:43:
f1:7c:8f:5d:16:2f:8a:56:91:3f:0d:53:de:8b:26:
5c:99:6b:f6:2f:54:b5:80:84:c1:9e:a3:f0:81:8b:
57:51:36:94:74:d0:25:8c:d8:16:bd:a5:55:d7:96:
e5:85:18:df:6e:f0:0e:e6:3f:54:39:93:8d:cc:7e:
5e:cf:38:04:12:8c:b3:60:36:9a:ca:62:93:dc:93:
c0:5e:1c:84:c1:7e:72:a6:34:a9:06:e0:fa:31:52:
10:37:30:14:43:7d:2e:56:76:fb:4f:97:ed:30:08:
50:c0:6e:86:e2:bc:77:53:31:9a:65:f5:59:14:82:
86:f4:ef:2e:e9:a8:a7:3f:d9:bb:41:5c:e1:52:d9:
4e:c2:38:93:4d:72:ae:19:97:3c:2e:d2:37:c3:48:
7b:a1:10:11:ca:26:4a:44:8d:6a:bb:71:40:b5:31:
73:9b:0d:5d:4f:ac:84:d8:2e:1d:15:f7:e8:cf:11:
1e:10:58:38:53:2f:45:19:d4:2b:1c:8b:55:e2:cf:
16:a2:bc:88:2e:d8:12:cb:c1:e8:ba:72:91:63:f0:
13:e1:21:f5:dc:05:45:a6:47:7a:6f:0d:20:d1:2b:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2a:ab:c1:0e:9f:77:ed:7a:71:f7:94:c6:0d:86:bc:5a:8a:
53:58:0f:ae:a7:f5:0f:7f:ba:6f:88:e4:22:f8:94:53:15:b1:
2a:c1:7a:07:0a:18:88:07:8d:12:e7:36:f8:36:24:6a:1d:cf:
4c:14:05:70:68:09:a6:43:b8:ab:dd:15:f8:21:51:ac:50:0d:
cb:55:5e:9c:1c:eb:de:a4:11:6e:3d:12:60:1f:a9:d1:29:6c:
d0:c0:95:56:1b:f5:22:7f:15:43:6d:5f:a7:0b:b1:ad:7a:82:
08:da:04:80:aa:53:d9:3e:63:9f:d7:8b:56:87:63:a4:51:f7:
99:9a:a1:4e:b2:cf:7a:3b:ae:a3:16:37:a3:a0:52:88:1f:46:
91:b6:a4:ec:ef:54:55:24:13:04:d1:dc:01:9d:90:c4:82:52:
84:98:e2:bd:f5:6c:af:eb:ee:6d:4a:f5:76:4f:ea:21:5e:ee:
e8:b4:19:00:68:00:ec:b2:11:ad:5d:aa:1d:25:d9:3d:58:0e:
63:e7:ab:eb:d5:2d:04:94:7c:77:46:ce:c9:46:08:fa:0e:ef:
98:be:9b:db:cd:96:d2:d6:0d:00:10:84:25:11:83:3a:1b:3a:
4e:c6:07:00:54:93:ba:41:e3:0d:84:e9:26:e5:db:85:e9:35:
b4:08:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:10 2025 by rpki-client on console.sobornost.net