
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
File: 1dhc7fCdgveSwYDZClqaI21qcFw.cer (raw, json)
Hash identifier: oOXiIXCv/vxyOhxgqbc0OWi6HUXkCGAZJtqWpkzX7t0=
Subject key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143D242AB24545E8B881A8D7ECFDEE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34611
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d2:42:ab:24:54:5e:8b:88:1a:8d:7e:cf:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:24:fc:55:9c:d2:f7:b2:18:13:0e:16:8e:
82:6a:8f:ae:ea:7f:aa:eb:b6:cd:af:3a:d3:ff:40:
73:ce:d5:2c:1b:58:e7:de:a8:9c:8b:29:b0:17:ef:
f2:75:2d:1b:17:82:74:f0:ac:73:73:09:0a:24:b0:
bc:cd:be:41:68:28:4d:73:2d:02:94:ff:ac:f4:b4:
0a:20:89:f5:0f:c5:b8:87:18:04:37:24:0f:1c:c1:
cc:e2:90:b6:31:22:89:19:8d:8f:52:bb:7c:65:7b:
d6:ff:9b:ae:b3:08:66:a5:fa:88:67:d9:e6:3a:56:
f8:10:44:a6:85:5c:92:8b:26:ab:d7:75:76:e1:0c:
c2:1f:52:2c:0b:3b:39:40:4f:a5:12:de:2e:b2:7a:
52:c5:34:be:5f:68:0f:03:e3:73:9b:42:d0:77:32:
14:fe:ad:8f:ff:a1:67:24:0c:a9:95:61:e3:35:c9:
b7:b7:e3:4a:49:cb:07:ab:38:35:9c:3c:bc:bd:0d:
46:10:c3:2a:0a:30:47:6b:ee:31:1b:1f:8b:6b:c0:
1a:cd:a0:f9:8e:e7:9d:52:63:a9:81:f7:15:a3:67:
53:c5:fc:69:91:95:d6:78:5d:7a:7b:16:fc:29:71:
4f:76:a9:ea:0e:09:d3:11:de:b7:92:6f:13:fb:3a:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34611
Signature Algorithm: sha256WithRSAEncryption
0f:95:53:25:ab:70:b7:9a:00:ff:4b:7d:08:4b:dc:a4:1b:80:
4c:ed:31:93:35:d6:3c:f4:96:65:42:1e:f8:ac:a3:4f:d0:13:
43:cc:2a:ad:84:b3:4b:15:d1:76:97:3b:6b:66:7c:36:c6:71:
a0:60:33:8c:05:e8:54:6a:37:75:59:55:04:ba:7b:1b:09:3a:
76:ca:8d:d6:e5:23:f6:d3:20:aa:06:38:9a:78:58:4d:b7:f9:
1b:5a:32:53:fc:e2:af:ec:3c:f9:f1:e6:ae:35:00:45:35:c4:
46:ec:eb:7b:e4:ad:5b:ee:ae:df:59:7f:4b:08:ba:a6:27:37:
78:c0:7d:1e:7f:be:46:39:0f:dd:a3:f8:72:40:83:22:6f:de:
24:74:3a:49:e5:6e:31:62:f0:62:fe:48:ab:ea:d5:91:7f:37:
71:71:46:57:5d:9c:b2:f5:d2:0f:f3:05:76:54:73:ae:1b:4d:
51:85:c2:9a:8d:65:9d:de:f7:e9:6d:4d:63:cd:29:db:d8:65:
d9:85:f1:86:81:21:0f:5d:28:2a:8c:9c:e5:94:29:b9:d8:73:
7c:e8:a8:8d:a5:b3:59:dd:f3:6e:86:a0:0d:91:9c:0f:ef:44:
80:2b:62:45:c4:70:52:b6:6e:0f:6c:7a:f5:cd:e4:73:17:5e:
bf:7d:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net