Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer (raw, json)
Hash identifier: ouxmwHkhxQYPdY+f9FytFHcJK6pzwRF5XLvh2uBwNO0=
Subject key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428274D568397D153E544DCAFCC93CE09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56496
IP: 89.19.52.0/22
IP: 91.224.210.0/23
IP: 2a0d:bac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:4d:56:83:97:d1:53:e5:44:dc:af:cc:93:ce:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:6d:74:8b:04:ef:df:21:cc:78:6e:4a:90:
f3:0b:06:1f:2b:01:3a:a9:93:72:78:3a:3e:ca:e7:
47:c2:90:bb:ab:57:b4:05:07:d0:c6:8e:48:0c:27:
4a:95:a3:67:8c:ae:d4:81:30:07:99:02:d8:4c:d5:
f7:80:14:d4:48:5a:e6:37:c5:b9:1f:7f:87:e7:94:
28:c8:4e:06:da:85:40:13:7f:58:28:27:8d:ab:3b:
5d:9e:6e:9f:04:85:85:33:08:e0:9c:39:73:03:8c:
a1:d7:e7:c0:c2:0d:45:d1:54:23:56:4d:75:45:b9:
4e:e1:94:98:fb:f2:e1:69:b9:10:18:d5:f2:e9:37:
e0:3c:d8:12:93:ec:77:40:91:e9:2b:ad:b0:21:96:
d3:0c:60:dd:3b:6a:95:90:8c:34:c0:6f:e2:10:1d:
97:57:38:ca:72:a2:82:ce:ec:1a:bd:e9:87:da:ba:
97:d6:38:54:f5:e1:0c:bf:2b:5d:d5:d4:9c:75:13:
c0:32:c7:3b:70:ed:99:b7:3d:99:1e:b3:c9:06:f9:
15:48:3e:24:df:19:e6:30:59:19:13:6e:ac:bb:1a:
32:23:22:90:b3:7e:79:85:f8:29:2c:ce:c8:62:c0:
54:1e:0e:c7:43:5b:92:c6:38:64:91:ba:4e:dc:5d:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.52.0/22
91.224.210.0/23
IPv6:
2a0d:bac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56496
Signature Algorithm: sha256WithRSAEncryption
63:48:c0:5c:ee:be:28:76:67:fa:a6:38:ea:9b:57:08:c0:9a:
2f:02:44:da:31:9c:03:a7:26:8c:fe:60:ab:72:9f:92:68:4e:
18:51:05:bb:34:8c:ec:b6:6f:2c:3a:60:c0:e8:c9:17:6b:c5:
c6:f4:43:58:0c:88:71:f0:3b:eb:f8:6f:c1:35:83:17:a9:4d:
dd:72:f6:4c:7e:e2:1e:1c:4b:04:bd:26:c9:d2:24:20:0f:82:
18:a2:bb:85:d8:8a:12:ef:5b:1e:73:ed:1a:97:ae:6d:31:f2:
28:72:e7:95:bc:58:45:47:8a:99:86:2f:45:2b:f0:19:36:a2:
82:3e:7c:03:3d:fe:77:89:a8:d2:6f:3e:f8:b0:e8:1a:46:84:
f8:57:1f:45:03:5d:23:79:19:57:d8:07:53:70:d1:bc:b8:6a:
66:cf:a7:ad:7b:fb:a5:81:0f:ab:e5:30:dd:78:2f:02:0b:e6:
6d:99:79:ce:02:49:e5:d0:a0:b1:fd:83:87:9e:5b:19:4c:78:
22:6d:f5:c7:9d:f9:40:f7:c7:d7:17:51:01:a4:1f:4c:d6:ee:
01:6a:01:3e:55:85:2d:9b:a3:db:5e:41:df:97:37:18:17:e1:
51:45:f9:20:0b:b4:df:4c:ae:39:eb:f0:7c:36:25:23:c7:01:
57:86:93:80
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQoJ01Wg5fRU+VE3K/Mk84JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1NDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzJjMmZlZjljOGNhZjhmMmYwODIxMWVmMDJjM2QwYWQzNDc0OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4htdIsE798hzHhuSpDzCwYfKwE6
qZNyeDo+yudHwpC7q1e0BQfQxo5IDCdKlaNnjK7UgTAHmQLYTNX3gBTUSFrmN8W5
H3+H55QoyE4G2oVAE39YKCeNqztdnm6fBIWFMwjgnDlzA4yh1+fAwg1F0VQjVk11
RblO4ZSY+/LhabkQGNXy6TfgPNgSk+x3QJHpK62wIZbTDGDdO2qVkIw0wG/iEB2X
VzjKcqKCzuwavemH2rqX1jhU9eEMvytd1dScdRPAMsc7cO2Ztz2ZHrPJBvkVSD4k
3xnmMFkZE26suxoyIyKQs355hfgpLM7IYsBUHg7HQ1uSxjhkkbpO3F3FxQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFNwsL++cjK+PLwghHvAsPQrTR0kXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzA4NTMx
Yi1iZDY2LTRmY2UtYTU2OS04NjQ0YzU4MTRjOWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvMDg1MzFi
LWJkNjYtNGZjZS1hNTY5LTg2NDRjNTgxNGM5YS8xLzNDd3Y3NXlNcjQ4dkNDRWU4
Q3c5Q3ROSFNSYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCWRM0AwQBW+DSMA0EAgACMAcDBQMqDbrAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDcsDANBgkqhkiG9w0BAQsFAAOCAQEAY0jA
XO6+KHZn+qY46ptXCMCaLwJE2jGcA6cmjP5gq3KfkmhOGFEFuzSM7LZvLDpgwOjJ
F2vFxvRDWAyIcfA76/hvwTWDF6lN3XL2TH7iHhxLBL0mydIkIA+CGKK7hdiKEu9b
HnPtGpeubTHyKHLnlbxYRUeKmYYvRSvwGTaigj58Az3+d4mo0m8++LDoGkaE+Fcf
RQNdI3kZV9gHU3DRvLhqZs+nrXv7pYEPq+Uw3XgvAgvmbZl5zgJJ5dCgsf2Dh55b
GUx4Im31x535QPfH1xdRAaQfTNbuAWoBPlWFLZuj215B35c3GBfhUUX5IAu030yu
OevwfDYlI8cBV4aTgA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net