Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
File: yPGA3UiWddR5NSX-5s__Rpcv8zw.cer (raw, json)
Hash identifier: OCHz85X3y/LuBG58Kyi6P/RWwL7xyU+BgmoT2k0HFPE=
Subject key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DE2A575A7A61C21955B35D0AD8BC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.62.125.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e2:a5:75:a7:a6:1c:21:95:5b:35:d0:ad:8b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8f180dd489675d4793525fee6cfff46972ff33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:d8:77:41:fb:93:8b:9e:9f:51:f6:d8:9d:
c5:bd:b8:b1:d5:7d:52:c7:7a:e5:82:51:ad:6c:ef:
b3:7b:6a:51:b0:5d:fb:8e:18:33:7f:21:bc:30:7c:
d3:27:6a:2f:b3:f6:0a:83:b7:35:08:ab:9f:54:ce:
90:6a:d2:b2:ad:25:08:8e:58:bb:47:7e:c3:cc:e5:
81:0a:2a:b4:04:00:a2:34:c2:08:6b:fe:dc:47:51:
b0:28:cf:d8:9e:93:2b:b5:e1:0e:db:e3:89:fd:5b:
8a:9f:6a:7b:8f:a8:60:a8:11:9f:f8:7f:f5:59:89:
cf:ae:cd:79:7a:ae:d2:b9:84:54:1d:50:1a:4f:69:
78:b3:54:27:80:b0:93:bd:a3:2f:f6:4b:0d:c7:02:
5a:8d:8e:98:56:8f:c0:44:c2:0e:17:bb:dd:6d:84:
2f:ca:30:75:1f:90:42:47:ca:97:95:82:ac:be:d2:
1e:72:1a:00:c7:c0:5e:c7:74:4b:1a:c1:41:04:43:
b8:34:46:75:45:8d:f7:0e:03:d6:d7:cb:5d:0f:94:
67:6b:fa:f4:13:3f:92:38:c3:5b:39:11:1b:a7:45:
0c:65:fd:64:1c:91:08:0e:da:20:7b:03:42:b7:4e:
f9:98:2a:09:5c:12:e3:37:ca:0b:1a:10:23:f5:6a:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.125.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c2:8c:e4:84:79:58:7b:2c:80:98:96:82:0f:18:11:8f:f2:
3f:b4:f7:e5:a2:77:dc:08:a2:42:47:6d:56:1a:d4:7b:c0:e0:
29:9b:d8:1b:47:63:b6:2c:de:f2:fc:a7:99:b3:8b:2b:b3:6b:
94:8a:5a:89:06:aa:b4:34:43:8b:e4:2a:ff:2b:33:6f:d0:a9:
7d:ce:48:3f:98:4e:e6:88:42:3b:af:f3:cf:fc:12:32:93:41:
f9:e2:18:de:ca:77:98:1c:aa:ef:cf:f5:e1:a3:8c:1a:1f:c9:
36:f1:5e:35:70:05:e7:e4:a1:cf:e9:f9:06:63:2b:50:c6:2a:
3a:63:71:f1:55:79:c1:70:12:01:53:96:d6:03:50:04:cb:af:
ed:73:ab:78:ac:b5:bd:00:29:27:55:d9:b4:5a:f5:b1:ac:34:
b3:8c:5e:83:d6:f5:70:9f:00:16:c0:26:1e:5b:25:2e:ca:f7:
17:cb:56:8b:4b:3c:4c:5e:b3:d6:ea:8a:e0:00:3e:c5:74:43:
39:43:44:3e:df:a4:c8:d7:4e:f5:e4:90:ff:f1:b8:11:5e:f4:
22:17:af:4c:70:86:e7:76:7e:85:0f:78:8f:2c:7a:b9:c4:2d:
dd:68:b6:9e:bc:1e:c9:cb:90:37:2b:21:e6:37:a8:bf:a6:7b:
9a:9b:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:18 2025 by rpki-client on console.sobornost.net