Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.cer (raw, json)
Hash identifier: Zu6+8zI7nXHekzL56Dde+5x6z90gd2+7kL+lSoFbvMo=
Subject key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9A31B8264EE56AFEC43CECC2CCEB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 147.32.0.0/16
IP: 193.84.104.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a3:1b:82:64:ee:56:af:ec:43:ce:cc:2c:ce:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bda61043542485096b0df4351cc0da977f3770dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:de:c1:ff:5a:70:cc:71:98:b7:a0:e1:8c:
ce:27:56:1e:0d:42:18:99:fc:67:5f:45:42:83:5c:
ff:14:a3:30:a3:d7:de:cf:0d:39:6c:0e:6c:c6:cf:
80:f4:62:c0:fd:d4:6c:b0:e2:38:65:a0:85:3e:a3:
14:61:1a:5b:c3:04:32:4a:f0:06:22:5f:3d:23:11:
6c:1c:ae:52:0d:68:f0:88:4d:ce:53:cf:7e:24:69:
9e:53:5b:55:2a:46:17:ab:2d:a5:2f:87:07:6d:4a:
b0:50:03:ca:b6:a6:7f:e8:d5:b7:0f:9f:c0:94:2d:
5e:de:df:2b:89:c4:9e:dc:76:e6:b5:70:72:01:3c:
44:76:16:c1:65:f1:82:e8:ef:56:92:e9:2d:97:25:
fc:85:c5:39:92:ce:56:dc:9d:83:c8:20:ff:40:90:
66:71:9a:ab:9b:a3:f0:94:a5:79:06:cd:da:9f:c8:
63:da:11:cc:01:17:8f:28:81:97:44:e1:da:82:4c:
bf:79:23:74:2d:7c:d6:3c:80:cc:a2:d7:0f:43:1f:
cb:f4:26:78:6f:91:36:86:c6:63:96:39:04:2f:6a:
c9:15:60:e4:69:6f:1f:3b:6e:f5:4d:25:fb:0c:ee:
f4:3b:8c:4e:75:69:d6:91:df:61:28:00:23:57:7c:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.32.0.0/16
193.84.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:2f:58:f0:16:3b:36:43:e2:af:19:df:e9:0f:a9:b6:c6:92:
17:f9:cb:07:a1:65:b6:6d:da:29:3f:bb:cb:56:06:b2:56:96:
fe:2e:7f:97:8a:3b:59:dc:06:a6:6f:cf:24:b0:f9:bd:dd:e2:
a7:98:4d:80:c4:27:66:bc:64:91:39:c3:ad:e9:dc:a4:a3:d3:
9a:4c:d5:e1:8f:44:01:07:b2:c3:8d:b0:1b:dc:43:51:22:ea:
9f:05:64:ea:f2:74:ec:48:ce:85:4e:37:1d:80:02:96:98:05:
87:e2:d3:f2:d8:63:c4:42:5b:cb:e4:e9:d7:a5:0c:1a:d6:8e:
c6:76:81:6d:bd:f9:04:9f:92:c7:b3:a4:d7:41:bb:2f:74:17:
de:5d:2a:a0:4e:69:bb:86:8b:fd:ec:b5:ec:30:85:4c:de:43:
44:a5:cd:ff:16:9e:1b:39:49:b1:2f:58:43:93:01:62:e3:1a:
f6:dd:ee:16:a1:79:ee:66:6a:df:1e:36:d9:8c:7c:35:b9:58:
68:d8:3f:d5:16:03:3d:83:c5:3d:c1:64:c1:fd:79:ea:8f:da:
8e:27:f4:14:70:59:6f:0b:cd:76:ba:9b:7a:9a:51:9a:c3:67:
23:c2:fa:46:d2:5e:97:2e:c2:ba:aa:56:17:cb:41:a9:5b:5d:
41:5d:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:11 2025 by rpki-client on console.sobornost.net