Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.cer (raw, json)
Hash identifier: VRm9QOPRCH5sAlheWfnH/rBPqp9Af6rbu60TEodN2AE=
Subject key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D8FF43EF723E5783AE817BCE2AA45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 33821
AS: 41353
IP: 194.176.115.0/24
IP: 195.28.176.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8f:f4:3e:f7:23:e5:78:3a:e8:17:bc:e2:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f2:0a:52:29:22:5f:46:03:2b:22:1e:11:b1:
36:a7:83:58:f9:46:47:29:9e:96:ca:7c:aa:61:fa:
ce:fe:e3:8c:1a:8f:dc:e3:c4:5b:44:4b:3a:a3:f0:
a1:49:b6:d0:f5:03:7e:2c:f3:a6:6b:32:26:e0:10:
f2:23:32:bf:2a:8c:05:f8:75:25:59:41:dd:ee:fd:
34:6f:32:2f:3e:f8:2f:9b:f2:8e:31:90:82:c6:c3:
96:02:e4:8e:f5:7c:0b:b1:0e:e2:48:5f:1a:09:8b:
1f:c5:0c:eb:81:be:40:a9:54:ef:ae:b9:d7:85:5a:
9f:cc:9e:a4:72:92:2a:52:3b:ab:cf:27:86:08:79:
ac:62:b4:c9:a4:ff:79:82:d1:e0:86:79:46:3c:94:
06:3b:af:3f:81:d1:a3:8d:4c:6c:58:e2:87:48:29:
f9:2e:16:4e:b4:2a:36:8d:75:2a:d1:51:cb:43:a4:
ef:4e:cc:e8:86:d3:f3:1b:2e:86:4b:3c:07:58:18:
f2:f3:7a:81:bd:3f:8c:9e:85:64:cf:47:e4:0b:e4:
8d:bb:e4:88:7f:2c:b4:f8:74:55:96:3b:2e:30:4e:
e3:08:e9:a6:0b:3c:23:24:10:67:51:e0:bb:a1:f1:
a9:a6:49:82:1c:01:07:c2:33:69:4a:e0:fa:5b:a3:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.115.0/24
195.28.176.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33821
41353
Signature Algorithm: sha256WithRSAEncryption
64:13:de:ae:de:62:af:f8:51:0d:b7:02:ef:06:ad:f3:48:28:
e9:e2:4e:e0:33:55:2f:77:4e:65:fa:e1:cf:0e:b2:77:39:3e:
78:59:f9:c0:c2:30:15:42:42:ef:63:67:81:c0:19:91:3d:37:
87:b2:ff:6c:fe:bd:d6:ad:30:56:07:9d:26:6c:91:1b:30:34:
a6:33:eb:8d:d3:08:f7:db:36:b2:2f:c5:0c:4c:5f:82:a7:9c:
f3:1e:68:91:8f:d6:ef:42:a1:19:45:d4:1c:4a:85:03:d0:37:
76:97:ec:71:2d:7b:13:02:9e:4d:91:82:2a:3d:c2:08:6e:a5:
65:e7:68:6d:cd:ad:e4:04:56:35:d6:dc:17:03:c4:89:c3:df:
3e:a4:0d:5a:88:6f:3b:ea:2a:9d:9d:58:8b:b3:73:b5:c0:39:
1f:5b:8d:b5:28:a1:87:cd:13:a9:ed:a6:ed:88:33:db:87:43:
14:50:28:9c:91:9a:4f:09:65:bf:e4:0e:1e:e5:1d:17:32:c7:
db:dc:24:e6:31:b9:45:ea:08:a8:26:d6:12:ec:a5:5e:1f:fe:
68:95:09:f9:ee:89:3e:73:28:f1:d2:f2:73:25:ba:37:67:60:
a9:1d:df:df:1b:74:70:98:7b:3e:f1:0e:3e:b5:8c:d0:49:b9:
b1:79:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net