Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer
File: 56O9FwjGXepO6UGEnEbbQ-Z5Erk.cer (raw, json)
Hash identifier: Gs9umH78W9ZxFOvhuXRwB/cSQUTNQkI+ALs6moKvMoQ=
Subject key identifier: E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196236DF883C80BDFFC2CF9C796378005DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Apr 2025 05:58:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210738
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:6d:f8:83:c8:0b:df:fc:2c:f9:c7:96:37:80:05:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 05:58:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7a3bd1708c65dea4ee941849c46db43e67912b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:76:b0:df:10:a0:88:03:fb:d7:e2:1a:43:
dc:08:79:2b:f0:ab:e0:49:e3:d2:c7:0f:98:18:c5:
67:db:f4:bd:0c:7f:fe:40:9c:9a:9a:f0:89:3a:97:
58:db:58:a5:0c:5e:0f:9c:05:bb:a3:e6:18:b5:32:
7a:3b:a8:9b:97:57:e5:a9:d5:a3:a0:be:77:d5:aa:
4d:57:1d:e9:79:b7:e3:33:7c:c4:00:7f:2a:81:43:
97:c4:56:99:dd:85:01:64:23:83:0a:73:b0:64:c5:
4b:bf:7d:29:69:48:3a:64:b5:be:68:39:49:18:61:
cb:48:e6:53:c3:eb:cd:f4:8a:df:7f:ca:3a:97:2a:
e2:40:62:43:2e:32:19:20:53:8a:a1:d2:d1:d0:b8:
15:54:e5:55:92:3c:ce:72:40:86:1c:cd:c1:96:07:
29:36:ae:e1:61:a8:b9:ce:43:5c:24:6e:2b:eb:30:
19:d1:72:d0:0e:51:12:d6:7a:19:34:96:c2:15:8f:
82:d5:88:1e:f3:83:43:5f:63:62:4a:da:b5:91:e5:
a7:2f:97:b9:9c:12:09:46:4a:ba:4c:41:63:25:f2:
84:7e:1b:1c:da:b3:2b:e0:9c:5c:ad:f1:b9:b9:e0:
14:69:6c:6a:fd:79:f1:15:77:fd:b5:6d:4e:5d:68:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A3:BD:17:08:C6:5D:EA:4E:E9:41:84:9C:46:DB:43:E6:79:12:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ce3667-47d4-4518-bf94-7440ad2ce7a4/1/56O9FwjGXepO6UGEnEbbQ-Z5Erk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210738
Signature Algorithm: sha256WithRSAEncryption
18:db:2a:8d:d5:80:74:6f:3f:5b:54:d7:8b:b2:7d:8e:f9:f4:
07:e3:24:4a:db:15:2b:08:f7:dc:25:a5:9b:17:84:91:53:b7:
2d:7d:ae:2b:82:e0:88:5a:59:89:f3:a4:d9:a9:1d:ec:2c:c5:
24:12:b8:df:7e:bc:4f:0e:a2:65:82:b6:65:97:31:6e:71:5e:
d7:39:bd:1d:41:c4:ab:07:03:ce:1d:97:7a:67:24:4e:8e:34:
58:4f:c7:2a:c7:4c:1d:96:8b:be:2d:4d:af:f2:bd:e9:3b:a6:
1b:ce:24:1e:9c:a8:35:e0:6c:5b:5a:46:dd:5a:92:7a:bb:19:
f1:10:33:cf:0e:51:7c:ba:89:6e:b6:1e:a7:bb:5d:3c:1a:d9:
21:a4:d7:b9:34:29:69:28:d1:e6:08:0f:6d:c8:06:da:65:e7:
82:57:ee:e3:0d:7c:1a:cd:e1:2c:e9:31:97:3c:19:b3:f9:af:
7d:db:18:49:93:6b:27:59:c7:49:8f:bb:24:ee:bd:7b:45:e2:
85:b4:98:6a:ad:ed:8b:72:b8:57:7c:19:4e:f6:70:77:e4:5d:
9c:d8:a4:4e:18:b5:c0:87:24:90:e1:4f:76:47:98:6b:4f:d8:
e4:44:7d:67:0f:f1:1b:fb:2d:68:88:27:ea:b3:81:81:44:31:
d4:b6:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net