Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
File: zNHiiTDXen65iRtvq7spFe44hao.cer (raw, json)
Hash identifier: Okor/wjA+6QZNp1CSzxINsniY7u8Mp7oU+VZyVPxO0E=
Subject key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274648AF14C6DE75FA3B9865858C9B83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 152.88.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:48:af:14:c6:de:75:fa:3b:98:65:85:8c:9b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:a6:c1:d9:21:cd:09:ad:f5:33:b2:59:d3:
a2:0a:50:32:0c:0b:9e:0a:d9:ea:ea:1e:1d:a6:e7:
72:25:19:c9:00:76:3c:25:84:33:1d:35:cf:ff:cc:
38:64:48:a5:13:36:76:52:47:8e:11:37:85:a3:0f:
8b:c3:31:4b:b3:e6:7a:71:a1:90:22:a3:64:0f:d6:
95:f3:9e:7b:be:63:a0:2c:51:2c:60:b4:f7:90:1a:
95:b1:d6:89:43:dd:35:84:fa:7a:d6:5d:6b:20:8c:
79:be:d5:b5:52:44:98:8a:56:62:72:f1:12:0e:c5:
79:50:25:59:e5:23:7f:d6:28:8d:30:0c:d1:c6:8b:
7f:b0:9c:06:25:75:fa:b1:2a:90:bb:1c:98:a0:17:
7f:48:ef:21:c6:8b:0f:a8:74:4d:70:39:ce:75:b0:
2c:da:92:7c:de:be:aa:3e:18:f5:19:2e:f5:ad:7c:
bc:e4:59:11:d8:a4:6b:01:06:b0:02:5e:9f:d7:3f:
2a:81:5a:b4:d2:fc:35:a3:35:a9:18:0f:a2:15:32:
72:74:d1:b2:43:9a:4b:c1:2e:29:bb:a2:9c:55:01:
df:0b:55:c0:63:d1:fa:a1:ba:cc:87:32:e8:2b:f5:
7e:66:65:c4:d6:b2:70:f7:a4:4a:93:85:85:91:03:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:33:ce:95:b9:15:0b:39:c1:3e:b7:a2:40:79:8b:3f:f7:ba:
9d:29:19:b3:6d:46:eb:0e:1a:68:21:eb:ca:59:dc:8c:88:80:
30:62:f7:92:fd:43:7b:02:bc:8c:c2:42:39:d3:20:21:f2:26:
8b:51:2c:c9:0d:40:d6:d4:2f:3c:04:72:27:1c:75:b9:49:f9:
dc:c8:e4:e1:44:3f:8d:b5:bb:bc:ac:83:09:da:dd:21:f4:eb:
1c:d9:37:24:f3:24:ba:c5:17:c8:16:57:4d:2d:dd:76:a8:33:
7f:76:71:c1:2a:be:fd:26:7b:44:ab:fb:73:79:4b:bf:e8:c0:
5d:5d:ae:48:1c:0b:7c:42:e0:33:34:eb:ef:92:b6:fd:d5:e4:
11:60:06:f0:1a:38:80:9b:66:60:e0:b1:83:7e:ec:a3:4b:15:
9c:6c:a2:73:0d:ab:19:cb:71:d9:73:7d:9c:0d:e5:95:3f:77:
eb:a9:b4:b0:94:6e:82:70:0e:85:9a:b8:bd:7e:91:43:ee:b6:
82:6d:24:28:d4:70:8f:a7:93:37:b6:a6:90:f0:0b:2f:6b:9d:
44:b9:f1:a0:a1:39:fe:54:df:87:e4:f5:a7:f1:a9:d3:99:df:
ce:fa:98:68:07:47:8b:bd:bc:d2:d0:a0:0d:1d:c3:72:43:4c:
6c:a7:44:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:21 2025 by rpki-client on console.sobornost.net