Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.cer (raw, json)
Hash identifier: PlfGMG4os0RLd+M9Dtt+d2QOdKKZpAHi7+FHejzBHY0=
Subject key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6A1FA2D4059A6B980BEC392FA8DAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12884
IP: 91.209.252.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a1:fa:2d:40:59:a6:b9:80:be:c3:92:fa:8d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:50:84:df:28:b9:fa:33:09:77:9c:16:11:
ef:11:01:86:51:d1:db:62:92:e8:f2:d0:b5:6e:98:
ac:f9:fb:c0:ad:60:a1:83:87:22:13:1f:df:bf:08:
55:4c:28:53:46:9a:c7:8f:94:61:1f:cc:31:0f:fb:
0b:61:c0:b3:94:c6:85:1b:c8:93:f9:c0:5f:14:6c:
b8:79:47:84:31:99:7d:ec:a9:36:1f:d6:af:25:2d:
da:13:38:9c:7d:78:fd:6c:d0:a8:ab:ba:ce:bb:f5:
a0:e3:3c:45:28:a5:e8:0c:93:f0:c1:35:a5:0a:b1:
f1:2e:43:43:0b:08:42:de:7d:87:db:17:ad:62:f7:
41:91:dc:f0:9e:11:56:27:ee:fe:22:99:2b:8f:ae:
c3:53:d8:01:8b:fd:b9:ae:9d:df:00:93:a8:20:96:
c2:21:13:ff:1e:82:ce:ff:6d:6a:d9:e3:4b:e4:36:
be:45:29:4f:ac:51:4a:81:42:27:e6:69:63:bb:8b:
61:7a:74:90:67:16:56:56:57:31:46:18:8b:29:5e:
76:ea:cd:76:4f:7f:f2:e1:8d:02:91:2e:c4:64:ca:
1d:93:c6:34:69:e8:b5:97:c3:68:cd:a7:fd:e3:df:
26:a1:6c:97:b7:ff:27:d2:d2:67:01:60:4a:fd:6a:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.252.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12884
Signature Algorithm: sha256WithRSAEncryption
90:01:d9:7c:6f:1f:c9:fc:9b:fe:ea:98:f0:7e:97:c6:ce:50:
58:cd:7b:54:0f:bf:2c:78:86:87:61:16:4e:c0:4a:8b:6c:84:
98:ff:4f:bc:04:b9:36:7f:d2:ed:52:9f:a3:56:aa:b5:dc:36:
de:fb:5b:49:77:db:0f:60:a2:95:bf:1c:07:1c:ba:d3:79:28:
c5:96:52:eb:31:d4:55:c7:3d:8a:07:bf:11:ee:48:77:20:c9:
c7:b3:84:2a:b0:21:61:67:81:79:f3:74:ef:06:d2:32:c8:99:
bc:ea:fe:02:96:88:9f:79:ab:c7:fe:93:45:37:bb:7b:b9:b5:
2a:1d:ab:7e:53:0e:ec:5c:ce:4d:9c:de:db:9f:1e:8b:ae:6a:
b3:54:e5:41:28:1a:70:00:fa:9f:08:d3:14:b2:53:93:af:38:
3d:82:92:f2:25:6c:0e:87:a6:35:82:c4:ed:47:25:b8:a7:78:
fb:37:be:c8:c8:2b:79:46:15:41:78:bd:51:eb:48:fa:6c:18:
47:d3:de:9e:78:7e:c1:43:70:7b:ae:98:d9:08:15:73:9a:71:
7f:ca:6e:0e:6d:81:c0:8d:50:63:6b:48:36:13:b1:db:0b:94:
39:52:85:6d:51:77:7c:88:56:bf:ba:aa:ad:26:6d:17:cf:ee:
80:fb:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:24 2025 by rpki-client on console.sobornost.net