Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer (raw, json)
Hash identifier: s+MtddKB3K+Tt6W2HEsp4td164mi/ZZ94j9wamml0Gw=
Subject key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5C061BF2979799A438F5127A9BDAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.2.227.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c0:61:bf:29:79:79:9a:43:8f:51:27:a9:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:9c:21:10:a0:e6:f3:74:43:25:21:c0:73:
b6:9b:94:92:bf:44:fb:bb:68:d2:22:2d:5b:16:75:
16:a1:4b:aa:03:e9:6b:4a:e3:28:59:ff:cb:d9:ee:
e2:85:d7:e8:35:a1:d9:da:a4:da:fb:20:5d:3e:85:
c6:76:71:15:cc:c7:f4:9d:9c:f8:db:b3:61:a2:38:
d7:e1:f8:42:61:2e:4c:4f:eb:70:85:b9:00:fe:47:
a6:60:a0:d2:f0:dd:86:b4:0e:9f:6e:74:f7:bb:3e:
fe:36:ee:dd:2e:46:c1:05:57:31:62:4f:11:3c:1c:
1b:d0:83:b2:e9:7f:3d:75:31:b3:6a:b3:c0:8f:97:
37:8d:64:41:81:75:7b:cc:44:e4:69:c5:00:f2:23:
90:01:57:ed:39:d4:5c:4d:f6:3c:e4:fa:88:34:c7:
fc:9b:9e:33:5a:32:4b:1d:9c:4a:04:e3:f4:6e:72:
7a:d5:3f:88:ce:20:94:8f:e4:99:b0:ae:b3:47:9e:
3b:8c:4f:66:c7:50:70:0f:01:16:c5:66:ea:0a:41:
d5:49:3b:1c:13:f4:44:72:fc:7f:e9:1d:b9:44:7c:
13:c6:d6:92:59:8e:2f:42:b0:ec:89:8e:4d:79:fa:
02:8f:b4:68:48:3a:f7:c4:1a:83:57:80:7e:04:24:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:01:80:ac:5d:a0:df:07:23:ed:61:11:4a:21:d2:e8:8f:09:
49:6d:80:18:42:f9:f4:ec:2d:93:6c:aa:1b:8d:59:29:24:eb:
65:68:30:59:14:f2:35:a2:e1:1a:84:09:4a:7c:bb:55:43:7a:
4d:f1:86:d7:32:52:3e:fd:4d:7c:d2:9d:6a:11:b6:bb:c0:02:
5f:da:a3:18:5c:77:57:84:06:54:b4:99:96:3b:c2:30:e4:1d:
c6:2c:c0:94:b7:4b:d9:33:4d:76:15:ca:97:95:5d:46:ea:e8:
93:f6:3a:31:2c:1e:01:2d:06:e1:9c:ad:60:4f:22:49:56:da:
d7:6b:91:94:17:48:b1:a9:ba:9e:53:d4:96:55:3c:42:68:d9:
8b:50:4e:c7:9d:af:ff:51:4f:9d:d4:3d:36:97:d3:a7:39:a2:
e4:ec:fe:3b:cf:16:54:47:5c:ff:d6:7c:04:7b:dd:e8:dc:16:
df:97:bd:84:0f:7f:88:d4:de:82:09:2f:1b:e9:31:d4:4d:75:
1c:5a:fe:90:c3:26:fb:ef:86:78:a1:b6:fa:d2:91:00:f3:37:
db:2b:d4:eb:ad:ff:b5:af:86:a5:b9:1a:78:f6:98:6a:90:8e:
3c:90:a7:48:9b:27:48:13:ec:45:82:d6:a5:7b:4b:69:e1:21:
b7:3f:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:12 2025 by rpki-client on console.sobornost.net