Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer (raw, json)
Hash identifier: CCedY4q0C1gGXW81EAu8efYQIJSAFj3B+DwWNxeD9xQ=
Subject key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC12ED7297C0F61ADFAAD40B1E9201
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.142.76.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:ed:72:97:c0:f6:1a:df:aa:d4:0b:1e:92:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:b7:c6:bd:cb:4e:aa:02:67:5b:84:99:3a:
e0:c2:f1:89:f9:74:c7:04:ad:f4:0f:93:95:47:58:
af:04:12:ff:54:a1:d0:53:cc:8c:bb:28:4e:7d:b8:
9f:47:d1:d5:51:49:07:77:1e:9b:3f:6a:ce:42:79:
b5:d7:69:58:68:cf:14:ad:f7:09:5c:ec:56:7c:93:
74:b8:5c:67:a0:f7:bb:42:ab:00:a7:eb:4e:b2:74:
8a:de:14:b9:1c:5a:86:a3:55:20:cc:de:a2:d0:d2:
b7:2a:8a:9b:8a:ba:e8:72:eb:3f:ca:97:b2:ff:e8:
11:68:f1:4e:25:d1:e6:18:42:83:5e:49:b3:1c:ac:
8e:3d:b3:34:78:63:38:53:18:2c:36:02:cc:f6:8a:
2f:51:f7:37:4f:d7:da:4a:1b:7f:9b:8e:5a:29:de:
54:1f:23:3e:1f:84:d0:2d:75:3f:67:58:a5:2d:f7:
68:cc:24:05:59:11:02:90:d5:27:41:fd:fc:99:25:
b6:2a:eb:c3:c0:78:18:63:1f:8d:2a:53:5e:71:5b:
16:78:9f:b4:be:aa:62:1f:71:9f:8c:e8:eb:7b:05:
25:bb:e8:58:b3:c5:c0:0e:93:65:f5:41:f9:31:35:
53:51:4e:49:ad:17:1a:90:e5:be:f8:40:ed:ee:f8:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.76.0/22
Signature Algorithm: sha256WithRSAEncryption
74:1c:be:d4:c9:f1:0e:7c:e6:d5:92:3e:96:fe:d9:b3:3c:b3:
ee:21:14:05:ee:06:5f:11:8c:0b:d1:6b:83:9c:22:62:cf:52:
9e:e1:79:25:33:18:d1:c3:09:73:7f:ef:4e:31:e5:67:48:8d:
bd:04:74:85:17:2e:a9:50:98:42:8b:5d:39:dd:5b:d5:6e:d3:
99:ca:e1:43:dc:ea:2a:2f:ba:d5:d9:15:76:9e:05:09:2e:cf:
a7:68:6b:a8:ad:4f:9b:69:80:14:02:76:9c:33:69:b8:de:07:
6e:42:a5:d7:a7:c1:77:c1:b4:4a:cc:6e:1e:56:67:3a:de:80:
e5:89:06:ae:99:36:7a:f5:a7:de:0c:54:bd:13:74:b6:05:2f:
45:8b:f5:9d:09:4d:09:58:f9:d8:5a:b1:06:e4:23:33:a3:2c:
11:0a:92:ac:3b:e0:2e:30:3d:e9:48:07:8f:b0:29:c5:d0:80:
ef:0b:21:3d:be:a3:2f:83:3c:dd:c6:3b:93:4f:ec:7a:c2:a8:
b1:17:b1:1a:e6:96:18:4d:c4:52:e0:87:fa:34:c2:9b:c5:40:
5d:d2:65:a2:f5:50:1b:aa:b6:4d:38:b0:23:d0:b4:f7:b1:02:
1e:cb:03:cd:28:2b:51:8e:50:9e:94:84:14:da:66:ce:5a:78:
8a:04:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:18 2025 by rpki-client on console.sobornost.net