
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.cer
File: 4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.cer (raw, json)
Hash identifier: MLTT7EX3QfOkdrRVyIQw++O7j3Cap/ELJAmkwxPkQZk=
Subject key identifier: E1:1D:8A:A7:4B:87:6D:6B:94:FF:E5:09:E2:4E:3F:64:6D:96:95:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FF93C5C8B094051E04952CC6ABD7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/90c150-0a02-4180-9c49-62645295ee1d/1/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/90c150-0a02-4180-9c49-62645295ee1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211704
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f9:3c:5c:8b:09:40:51:e0:49:52:cc:6a:bd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e11d8aa74b876d6b94ffe509e24e3f646d9695de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:cc:ee:ca:e3:f1:f2:4d:5e:c0:b5:4b:1f:
6e:55:0c:83:5a:54:5f:8c:f1:3d:85:17:90:38:ac:
f1:b5:1a:43:2d:b3:da:73:0f:59:6a:9d:e4:1f:16:
12:71:73:c5:43:8c:33:79:81:89:12:a9:6e:fe:94:
49:fe:d5:0f:d6:87:bf:88:57:63:df:24:b8:4d:77:
80:ad:45:cc:2d:99:87:2c:81:83:e6:6d:97:8a:71:
94:ec:89:79:90:74:ce:be:9b:81:8e:1a:e9:42:51:
c1:fa:3b:34:5e:fe:c1:1b:15:3e:12:d9:ff:97:26:
65:7b:10:81:d9:a5:2d:2c:e1:b1:6b:6c:47:0a:e3:
ba:8a:04:c0:f6:85:3f:17:f7:8f:90:38:42:f5:03:
9f:94:05:18:55:3f:8a:9d:53:c7:33:e9:4e:b8:5d:
b9:6b:14:17:4d:69:a2:00:81:18:f8:cf:89:71:28:
b1:d8:f0:c9:4f:f1:d3:3c:6d:63:63:75:40:48:6f:
80:02:0f:11:f9:66:6c:21:0e:e9:32:3a:42:71:ce:
bb:39:06:b0:b1:9e:7b:39:69:a1:fa:ce:37:60:09:
0b:0c:97:cc:2a:82:19:1f:b1:10:fb:de:8f:3a:0f:
e8:e4:ae:4c:fb:c1:2f:9c:c9:02:22:d3:fd:f2:65:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:8A:A7:4B:87:6D:6B:94:FF:E5:09:E2:4E:3F:64:6D:96:95:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/90c150-0a02-4180-9c49-62645295ee1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/90c150-0a02-4180-9c49-62645295ee1d/1/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211704
Signature Algorithm: sha256WithRSAEncryption
3e:44:c6:25:00:96:16:bc:84:a1:63:07:3e:8e:80:63:d4:52:
e0:0d:20:e9:95:6e:5d:74:fc:78:28:1d:15:c8:42:16:ac:b1:
22:07:0a:13:d0:09:ca:76:10:ce:ce:a6:d4:3a:ca:4d:88:bd:
02:5e:c7:7f:53:8f:2a:21:ad:5d:27:69:b2:8d:7c:32:a7:b5:
4d:19:76:a5:7b:35:b7:38:f2:21:85:6e:f5:16:81:29:4f:36:
2b:79:6b:d2:ef:91:f7:80:91:ec:b5:6e:84:67:5d:0e:7b:d4:
63:7e:72:f0:07:48:a9:fe:ed:71:59:8e:f4:92:c4:5e:1e:64:
bc:25:fd:83:05:ac:4d:2a:36:5f:d3:a4:bc:d5:2e:f3:93:4b:
ec:c5:e9:ce:b0:b2:ec:b5:3b:4d:24:a5:ef:ac:71:a0:9c:b0:
f8:3c:08:8e:90:a3:37:8c:62:3a:d9:2e:97:c0:ef:1f:d1:f8:
6a:df:f4:7a:53:10:85:8a:00:e2:be:4b:77:63:98:94:6a:65:
75:09:1f:8a:7f:3f:7c:fb:f5:90:ed:51:78:13:cf:0a:2f:94:
5c:18:ef:4a:b4:1e:6b:e7:1a:1c:b2:f5:78:74:88:96:dc:ad:
6e:8a:84:08:bb:89:5f:b1:8a:99:88:5a:c2:8e:a6:3c:72:6e:
79:04:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net