Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer
File: zyJMhK66hZuQyJNsumFn7kxE7Oc.cer (raw, json)
Hash identifier: AqkF5wytVlnUeUFIfFBwqBZNXzM4U282O14xJ6lG7Ag=
Subject key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E062745136443A76229AFDAE90F18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.224.243.0/24
IP: 185.113.222.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:06:27:45:13:64:43:a7:62:29:af:da:e9:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:3d:43:7a:f5:78:45:2a:c7:be:fe:3a:98:
ea:44:82:8a:6a:17:5b:5a:a6:91:fe:a3:a8:ee:0b:
34:74:df:39:2f:bd:ad:f5:e1:67:24:83:4a:0d:b5:
48:6b:72:10:03:d2:7d:e0:68:8e:36:60:d6:fe:f6:
44:5d:4a:e1:67:54:b8:8f:97:78:3d:66:65:ba:8f:
a5:6f:79:f4:f2:74:d8:5b:01:8b:47:03:f1:8a:9a:
90:49:58:bd:b5:38:cd:22:80:04:14:e1:42:b2:01:
16:03:2c:e1:49:50:1e:19:d1:78:78:fd:36:6b:e0:
63:23:a6:d5:3f:ed:1d:b3:bd:fa:73:89:8b:88:3a:
76:a0:6a:15:d2:f9:9e:5e:e4:2a:53:e7:fc:16:c1:
59:b6:14:33:5b:01:aa:aa:f0:35:46:8e:f3:5b:ee:
9c:b9:88:14:77:5f:05:25:6a:b7:b3:d0:fc:8b:99:
af:16:cb:84:e7:e2:43:06:ef:74:43:a1:00:ff:8b:
48:cd:9b:4d:da:b6:47:f1:ec:3c:ed:1e:83:11:d0:
78:39:d9:c1:b4:9e:d7:35:88:59:d0:cc:a4:ac:39:
91:3f:5c:5b:88:fd:94:78:06:e6:49:bb:ff:ff:89:
3d:dc:ff:04:e7:bb:e0:a8:eb:e7:dd:11:bf:ca:85:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.243.0/24
185.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:96:da:71:f9:74:40:54:06:45:2f:4e:f3:de:b5:d0:a5:5a:
3a:b1:c0:f0:2f:80:54:19:e8:90:f4:4f:4c:82:72:de:50:7c:
0e:50:db:ca:e3:05:d0:59:b0:12:68:cb:79:04:e0:f9:bb:dd:
2e:d3:32:f2:6d:e3:d2:6e:e1:ad:32:32:6d:10:04:9e:ad:10:
81:6b:bb:af:bf:2b:5d:48:98:22:e8:81:e5:eb:5a:35:35:27:
fa:f5:fa:6c:0a:4e:13:9b:3c:96:d4:f5:ab:2d:1c:f7:57:bf:
b6:ff:fc:2e:93:7c:f2:10:49:4a:fb:65:2a:9f:9b:38:ae:bd:
45:6d:6a:92:8c:e0:bb:3f:76:0f:10:4a:f3:e9:f7:e4:07:f8:
8c:61:8e:21:c3:09:b3:87:6e:43:bf:ee:75:38:cd:07:ec:18:
bb:a7:37:6e:e5:9e:96:c5:cc:e2:4b:44:b7:8a:a4:35:f0:8d:
d0:c1:4f:bc:da:02:15:23:27:b5:26:7f:e6:dc:41:80:36:58:
a9:db:69:f6:48:ac:49:e1:4b:44:42:e1:2c:8b:36:17:34:5e:
d6:2d:ee:31:22:20:5e:e2:51:66:c3:4b:e2:ed:8b:e2:53:c6:
d6:23:1f:2a:33:e5:7e:b0:db:57:97:2e:b6:35:30:f2:5f:3d:
a9:37:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:22 2025 by rpki-client on console.sobornost.net