Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
File: 20IFnOKR1Jpmkgcxx2faVj7yESQ.cer (raw, json)
Hash identifier: 2NE1dE4IE+tbBlgGboBGKUqPl04wAfY+R4BhQ+jQrw0=
Subject key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D80094D6051AAF0EDD8ADAE6CD3394
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57815
IP: 91.235.165.0/24
IP: 194.40.210.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:00:94:d6:05:1a:af:0e:dd:8a:da:e6:cd:33:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db42059ce291d49a66920731c767da563ef21124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:b1:70:fe:7e:3e:43:c1:5f:9e:60:be:a7:
31:9c:32:55:71:98:ad:c0:b7:ce:4a:fd:48:7c:2b:
e9:7d:2e:ae:51:0d:f5:07:09:8c:42:cd:3a:da:64:
d3:c1:99:1a:7e:2a:b9:7e:7c:ac:c1:40:4e:34:4b:
57:ca:b9:a7:61:c0:0f:61:2c:13:76:a3:1c:72:f3:
36:12:3c:42:f5:b8:46:e4:95:7d:57:bc:e5:0b:86:
5d:be:9b:a5:59:dd:0f:55:90:16:bb:f7:20:68:c2:
05:9b:c6:03:6c:6a:6d:8e:22:cc:9a:92:fc:b4:1f:
cb:99:87:ed:6e:dd:a8:be:0d:9b:13:bc:2c:df:32:
34:9b:98:16:8e:25:d6:fe:bc:ed:af:d7:0d:1e:78:
10:9b:22:f2:bb:0a:ed:b9:65:ee:a2:89:c6:d3:68:
7a:db:db:c1:a1:80:5b:76:fc:b7:9b:70:fa:70:5f:
10:ef:18:9a:25:66:eb:cc:d0:80:6a:0f:ae:e1:85:
64:47:c9:53:67:3c:84:75:2c:b3:ac:81:37:3f:a3:
f6:21:ff:06:d6:84:2a:ed:75:fd:10:8f:48:35:59:
d5:ee:11:e4:74:39:a3:c0:ca:16:aa:ba:a0:6a:6c:
c2:f0:5a:11:39:e5:7c:08:0a:88:48:78:6a:70:eb:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.165.0/24
194.40.210.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57815
Signature Algorithm: sha256WithRSAEncryption
6d:1a:ee:cb:d2:48:41:ee:0f:73:95:3a:ed:f4:e2:95:5f:c3:
38:57:a8:fa:da:1c:7a:0a:16:ff:57:76:1f:b7:d6:87:c6:8e:
4a:6b:33:8f:c3:59:c9:3e:13:79:04:fe:2a:2f:4f:fd:60:d7:
3a:73:3c:2f:b5:db:dc:fc:a8:8b:e8:9c:a7:28:6b:63:b0:cb:
63:0e:de:d9:1b:1a:ec:f0:84:07:bf:ab:07:90:1d:36:ba:fd:
e3:0b:b6:c8:6c:25:b8:06:03:fb:b9:8b:69:22:d4:64:d1:42:
46:24:99:14:de:d6:1c:33:93:1b:b5:3a:4c:41:12:b2:91:8d:
0c:97:b9:f0:6e:14:71:cf:e5:64:2e:ad:42:64:7e:0d:c1:65:
72:f8:43:b1:86:71:6a:a7:bc:02:25:97:31:50:e6:1a:7f:a2:
fe:81:84:b7:56:4b:82:33:03:85:1d:ad:98:b4:13:b9:bc:ca:
b9:15:fb:a0:a0:0b:eb:32:96:4d:3d:1d:01:8a:6f:52:2e:e7:
95:81:82:b9:34:67:45:ef:29:be:28:31:cc:af:1a:49:4a:0c:
2e:f6:03:02:f1:0f:9a:af:4d:b3:28:c3:0e:ea:b2:b2:eb:93:
e8:9a:a8:b6:5e:31:54:ef:bb:a2:43:3b:41:f2:d5:70:dc:80:
23:38:e0:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net