Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
File: wq8ZpG9azIz4_QNiSmG3koqBjNA.cer (raw, json)
Hash identifier: YrmJZfJlv1mMeigwTF2EiwYmw1FLDls5nTT+ZMJD0vQ=
Subject key identifier: C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6B41974FB22601D783A8C42292BCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 87.252.112.0/21
IP: 185.9.92.0/22
IP: 185.178.188.0/22
IP: 188.191.60.0/22
IP: 195.189.12.0/22
IP: 2a03:4640::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b4:19:74:fb:22:60:1d:78:3a:8c:42:29:2b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:c8:47:b7:38:24:ed:e7:0a:a5:02:ea:98:
4e:fd:58:86:28:25:1b:e0:5c:a1:40:fd:3c:21:a6:
c5:6a:27:b4:4a:f7:98:10:e5:52:3e:2d:a3:90:a7:
49:bb:cb:dc:f0:2f:18:57:00:d9:2f:ba:ad:ff:55:
3d:f8:16:cb:e1:c1:c0:12:84:b7:a4:b9:96:4d:e5:
87:97:ff:07:94:6f:6b:ec:36:db:24:18:24:90:3f:
e9:ec:9c:af:33:9c:25:09:79:17:91:c5:88:47:68:
95:2f:02:c8:d8:19:b1:85:b3:c9:e4:42:c0:b6:39:
f6:48:f9:dc:19:8f:c5:dd:20:b7:45:e9:db:42:31:
23:78:a7:25:7f:41:ac:00:c5:be:f2:7d:52:21:97:
63:47:88:63:3f:ff:b7:5d:87:4d:b2:ee:42:06:dc:
65:39:9a:dd:56:94:5a:e7:2b:fc:7b:81:90:d6:d5:
5a:d2:4a:bf:2a:b8:77:dc:b6:b3:b4:2a:55:ab:3e:
c8:4d:3f:30:56:b1:4a:27:07:60:c0:85:41:81:d6:
99:7d:05:fb:19:95:c2:35:48:13:8e:d9:77:45:17:
38:9d:74:bd:81:d7:c5:d8:7c:da:31:de:0d:01:e9:
a4:74:38:12:9d:ef:fc:4d:79:98:f1:1a:b5:08:b2:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.112.0/21
185.9.92.0/22
185.178.188.0/22
188.191.60.0/22
195.189.12.0/22
IPv6:
2a03:4640::/32
Signature Algorithm: sha256WithRSAEncryption
a1:e5:71:d8:4b:3c:ec:c1:c3:e1:62:9c:9e:0b:10:a8:08:e3:
21:71:99:e6:48:93:08:c0:cc:12:36:3a:28:18:23:05:56:4a:
4b:a5:21:88:05:53:00:d6:8a:39:e8:68:07:cf:bc:38:00:4d:
02:b4:60:3e:95:ca:e9:47:4f:f1:90:4f:75:1b:b6:bd:7e:25:
55:f2:ce:c5:80:68:4d:82:49:05:4b:55:3a:58:f7:99:dc:50:
43:2f:19:40:01:dc:31:f4:b9:e6:f5:c3:b0:c2:49:19:b8:17:
7c:9b:76:28:47:a5:f8:57:e1:4c:34:1b:b3:39:5c:0f:c6:bb:
9b:77:ea:68:08:99:96:25:33:ef:00:33:c2:9c:a1:8e:c6:79:
40:34:59:0a:86:4c:9a:ce:5d:e7:62:07:ec:e6:37:93:d7:0f:
f9:15:2b:37:24:f7:df:28:a8:44:c2:66:c0:a9:38:b7:05:44:
aa:37:d3:a9:49:c1:59:57:35:c0:83:25:eb:39:29:99:4a:ea:
fc:c7:77:1d:fe:b7:4c:e6:8a:e8:bb:06:5c:8e:4c:d0:64:6f:
83:1f:e9:2c:1f:49:ba:6f:6e:ca:03:80:d1:65:3f:b5:91:b2:
76:1e:0f:7e:f3:39:c3:d3:70:d6:d4:8f:72:39:1c:ca:4a:3e:
f1:c1:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:14 2025 by rpki-client on console.sobornost.net