Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
File: xafD9LFGk1EiAllaik-VsNa3oQE.cer (raw, json)
Hash identifier: TgRemX5dyilK+hB1zFazxadWkJOWSTSjAnir3p9ObDY=
Subject key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D94DB5E5A4F0D94BCB01D8D7950366
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 134.158.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4d:b5:e5:a4:f0:d9:4b:cb:01:d8:d7:95:03:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:c4:aa:08:1e:f6:5d:43:f2:62:70:46:5d:
e8:f4:00:69:c8:8c:ff:79:13:81:62:aa:da:de:dd:
78:88:5f:b9:3d:af:8b:f3:bd:e6:4f:5e:31:7e:b9:
af:2a:f3:59:eb:36:66:11:02:5a:5a:ce:ae:7d:11:
90:99:02:1c:d6:e9:d3:23:ed:62:a1:72:b7:38:5b:
12:af:ac:11:ad:ad:33:d3:6b:b8:97:5c:4e:24:45:
54:aa:1d:96:9a:98:82:d4:d4:6d:b1:74:fa:5b:17:
7c:b0:28:d6:13:cb:9d:c8:52:37:a3:b1:6c:c4:60:
9e:11:36:1f:0d:2a:a5:38:ef:aa:c7:06:78:10:c9:
27:c2:63:1c:76:1e:b9:1d:e9:96:3c:56:eb:66:15:
13:af:09:20:28:77:38:20:0f:1d:d0:26:ae:25:f5:
80:a3:08:ce:06:95:e1:6c:ec:30:1a:60:2e:ff:ab:
d8:df:61:57:5c:d0:85:28:68:81:86:38:95:f8:5d:
30:07:d4:e5:61:0b:0e:ef:64:30:07:43:20:3e:11:
df:51:c6:a3:64:72:29:46:51:42:a4:d1:2f:8c:6e:
63:f7:9d:77:f4:57:39:f0:41:16:a6:b3:97:f6:a3:
28:84:b2:b2:cb:c6:46:b1:ca:e5:ba:4a:7d:54:7e:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:22:da:d2:40:2d:96:fd:94:dd:07:43:f2:43:36:f1:68:a3:
db:8e:82:ce:e8:4c:2c:95:2a:a6:06:39:f1:42:29:15:c3:f4:
6a:8a:b9:97:ce:68:51:e3:f4:98:6a:08:66:44:91:bc:79:31:
2f:b6:41:a0:b8:ee:3c:0e:69:9d:5f:0a:6c:bf:b3:a3:98:59:
0c:38:d9:12:aa:0c:3b:09:af:81:3a:e3:37:3f:8e:44:b4:fb:
50:2b:61:96:08:c7:7a:e0:5b:c8:69:0b:fa:88:2e:c7:97:d6:
77:77:72:f2:d1:c8:ab:58:f4:84:f8:1c:be:c0:be:29:55:4e:
33:6c:fd:fe:78:08:ed:fc:87:ac:95:9f:2a:35:aa:ae:ec:35:
c2:c2:fd:5d:0b:36:10:f0:23:df:50:b1:5a:85:51:39:f4:74:
41:81:d0:6e:9d:35:95:e5:c3:de:c4:b2:2d:5e:53:28:b1:a8:
05:27:fa:99:9a:f2:6e:76:af:68:cc:ba:ca:c2:cc:b2:a8:e3:
ab:97:0a:bf:8c:b4:94:d7:bc:88:f6:0e:4c:58:17:ec:c1:5a:
32:cf:a9:90:df:ac:1b:d9:27:36:2d:48:87:9d:46:25:1f:1d:
d9:3c:f4:68:ad:8a:48:b9:e9:80:4d:c5:10:35:20:69:fe:54:
0e:d0:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:16 2025 by rpki-client on console.sobornost.net