Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.cer (raw, json)
Hash identifier: k+MxZrB/9X4lPNuPMt/eJYZ/YtgtREUzC0yxfWejXsk=
Subject key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D61C7076087EECBFC64CEEDBBF8316
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31497
IP: 193.16.103.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1c:70:76:08:7e:ec:bf:c6:4c:ee:db:bf:83:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:df:9f:a5:35:94:58:1a:aa:5d:d8:99:87:
a0:64:41:a2:cd:2c:11:55:ef:1d:67:e9:32:36:0e:
8f:f3:e7:fb:65:af:68:83:66:77:c9:9b:15:16:d6:
fa:52:a7:81:79:9a:98:65:10:61:39:9b:4b:0d:61:
ed:e2:af:e3:d9:a7:c5:50:90:35:51:c4:aa:1b:aa:
12:49:ef:3f:22:bf:78:d9:f4:0d:7f:bc:52:67:3e:
f2:3f:fc:4a:c8:65:9c:c8:98:73:3e:2a:e0:74:c2:
19:47:9f:50:97:60:69:df:43:ca:ba:da:2c:78:b1:
f2:6d:73:77:0c:ee:73:be:77:63:da:27:82:38:3e:
10:4d:6a:45:0d:07:da:ea:09:dc:ad:a9:8f:c8:b6:
8b:75:52:de:92:ed:f0:2b:5f:19:9a:56:33:30:cd:
ed:31:b5:ba:e8:5b:5e:69:00:f2:c5:d0:61:23:cd:
b3:1a:5b:d7:89:ee:47:f3:6e:f1:f8:7f:3f:cb:e6:
f1:66:1b:ac:51:5b:7e:aa:d2:04:21:ef:5f:8c:e1:
ac:d7:7b:66:f0:1f:02:8a:66:18:71:e7:62:c9:a0:
4e:9d:0f:76:9f:dd:b7:d8:4b:3e:f6:6a:e3:0b:ec:
8a:7e:ba:2b:fb:c6:1a:7b:0b:e0:d7:42:3b:bc:66:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.103.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31497
Signature Algorithm: sha256WithRSAEncryption
a1:9e:2b:a8:89:11:d2:c1:a9:e2:71:76:aa:35:2e:b2:f8:aa:
a4:58:9b:13:f6:28:87:20:a3:02:e0:f0:2d:33:37:ed:b0:1c:
cd:dc:63:ef:96:5d:08:61:50:c3:18:59:40:ab:12:cd:d7:ab:
87:4a:61:f4:5e:c4:bc:ee:fb:2f:d0:3a:58:76:48:f7:5d:d7:
1b:1b:ff:ce:93:69:cb:5a:93:be:23:b6:26:6d:1d:e3:ed:43:
83:89:95:74:45:f8:b4:0e:fa:68:67:3e:19:a5:1b:f2:7b:36:
87:3f:a9:30:4f:a6:5d:2b:d3:c1:7e:66:b4:69:52:41:95:f7:
0a:9f:62:3f:d1:30:0e:15:70:0f:7a:74:a1:22:a1:0a:10:8d:
c4:e3:18:ad:74:23:42:23:80:c4:f0:c1:c5:bb:3e:44:dd:75:
c3:0b:a6:0e:28:ef:f5:b6:4d:df:a7:87:0f:86:0b:4a:07:d5:
76:ab:7f:d3:48:04:4d:4d:65:f6:3e:e9:00:39:55:0f:75:fe:
f1:17:02:32:e7:22:3a:54:a4:31:13:36:5b:70:e0:04:da:9b:
22:d5:8c:ca:59:47:e3:46:82:f7:ae:c0:b7:69:c3:90:aa:8a:
97:d8:7c:ee:b2:58:17:77:80:6f:77:dd:0e:40:4d:68:e7:86:
5e:28:59:71
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQg1hxwdgh+7L/GTO7bv4MWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWRmOWE2NzFiY2YxNzg5YzFiNWFjMzYzMGM3NDFiZTU2MGRhZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmzfn6U1lFgaql3YmYegZEGizSwR
Ve8dZ+kyNg6P8+f7Za9og2Z3yZsVFtb6UqeBeZqYZRBhOZtLDWHt4q/j2afFUJA1
UcSqG6oSSe8/Ir942fQNf7xSZz7yP/xKyGWcyJhzPirgdMIZR59Ql2Bp30PKutos
eLHybXN3DO5zvndj2ieCOD4QTWpFDQfa6gncramPyLaLdVLeku3wK18ZmlYzMM3t
MbW66FteaQDyxdBhI82zGlvXie5H827x+H8/y+bxZhusUVt+qtIEIe9fjOGs13tm
8B8CimYYcediyaBOnQ92n9232Es+9mrjC+yKfror+8Yaewvg10I7vGZsGwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFN7fmmcbzxeJwbWsNjDHQb5WDa2gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2JiMTM5
Ni05YzA1LTRlMTctYmJjNS03NzY2MDUwMWM0NzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYmIxMzk2
LTljMDUtNGUxNy1iYmM1LTc3NjYwNTAxYzQ3OC8xLzN0LWFaeHZQRjRuQnRhdzJN
TWRCdmxZTnJhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRBnMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnsJMA0GCSqGSIb3DQEBCwUAA4IBAQChniuoiRHSwanicXaqNS6y+KqkWJsT9iiH
IKMC4PAtMzftsBzN3GPvll0IYVDDGFlAqxLN16uHSmH0XsS87vsv0DpYdkj3Xdcb
G//Ok2nLWpO+I7YmbR3j7UODiZV0Rfi0DvpoZz4ZpRvyezaHP6kwT6ZdK9PBfma0
aVJBlfcKn2I/0TAOFXAPenShIqEKEI3E4xitdCNCI4DE8MHFuz5E3XXDC6YOKO/1
tk3fp4cPhgtKB9V2q3/TSARNTWX2PukAOVUPdf7xFwIy5yI6VKQxEzZbcOAE2psi
1YzKWUfjRoL3rsC3acOQqoqX2HzuslgXd4Bvd90OQE1o54ZeKFlx
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net