Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
File: 58OrlrdMKsTwSuYqt-gs3xmI7UA.cer (raw, json)
Hash identifier: Cpf1tgXq84Cnv1TlBT1fPc0T2JJ7gvacYkipgwNKqKI=
Subject key identifier: E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BACFD19DDB4F39B418821FB23AD0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.228.186.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ac:fd:19:dd:b4:f3:9b:41:88:21:fb:23:ad:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:7e:ab:0d:12:d2:ac:2b:cb:b4:fd:53:a2:
68:71:98:07:c6:f3:42:d1:5d:b5:cd:6c:b8:88:73:
61:db:5c:cd:12:24:0c:ee:2f:ef:5c:fc:1f:51:34:
3b:97:f1:b3:ce:b3:a6:2d:fa:05:90:20:38:e1:0e:
b0:48:43:e8:51:c0:4d:68:e4:ea:e3:8a:cb:d1:81:
c2:99:f1:2b:8c:81:fa:00:e9:9f:89:a1:0f:7b:d9:
41:7b:4c:0c:88:69:b0:d7:fa:af:08:d2:76:e3:59:
86:bb:1f:af:d3:5a:dd:48:6b:93:8c:06:01:7b:7f:
14:0e:7f:21:f3:82:b5:f7:ec:e0:6c:ee:6e:1b:31:
7e:db:fa:fc:4d:aa:f0:0b:83:2d:08:89:47:1f:73:
21:05:de:6c:49:b4:bd:a9:35:dc:ee:65:0f:55:c6:
c8:6e:4b:1f:1b:64:3d:09:23:96:52:f9:78:70:ad:
54:db:a4:83:ac:ef:b1:ad:50:47:68:1f:c4:07:d1:
cb:da:76:17:13:04:1c:67:1a:f4:43:81:b5:07:aa:
83:ea:fc:bf:1a:15:92:32:d4:01:7a:8e:61:7d:5f:
8a:9e:4e:4c:ad:a3:07:23:a8:1a:0e:03:03:5f:79:
4c:81:d2:53:ee:8c:ec:0c:7a:3b:23:41:e7:49:42:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.186.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1a:08:fc:24:c3:00:66:3c:5e:18:6a:a1:ee:30:09:4a:d5:
f0:bc:d7:57:ca:1a:9e:85:cc:2d:e8:11:2f:7d:bb:09:44:a8:
65:b5:81:e7:bc:5b:c2:46:8e:6c:32:dc:ed:a8:11:13:aa:c3:
fc:ca:12:36:a1:56:a3:5a:1b:f7:3f:9e:e3:be:eb:cb:2e:81:
cb:01:f2:07:d3:01:bf:e3:1c:5a:64:a7:be:a2:a6:7e:45:62:
c2:f0:ab:ff:96:f6:e8:17:d1:84:0c:2d:c4:dd:10:6e:f5:81:
69:6e:fe:f9:02:14:a3:51:ac:24:56:f9:2d:07:37:b5:d6:51:
60:76:ec:1c:95:1f:09:4c:70:96:3c:3d:a3:3d:8a:04:8e:4b:
35:85:83:9b:31:02:9c:3c:ce:5a:a3:9e:ad:e9:8f:6f:62:90:
a4:e0:77:d7:08:b4:3f:b8:c9:0e:fc:2f:fb:0e:00:da:23:08:
ae:21:38:bd:fc:77:ab:26:0f:2e:55:a4:3e:06:96:e0:81:fa:
09:34:18:e4:07:0e:6b:73:de:1a:d6:8b:5e:b4:8e:a0:7f:7c:
b6:fd:c3:0b:7f:89:89:ec:73:13:54:8e:34:56:57:6a:28:41:
de:66:e6:eb:03:bf:4a:8d:c9:b5:17:46:5e:b3:49:45:4d:cd:
78:1a:91:3c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQma6z9Gd2085tBiCH7I60PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2MzYWI5NmI3NGMyYWM0ZjA0YWU2MmFiN2U4MmNkZjE5ODhlZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFR+qw0S0qwry7T9U6JocZgHxvNC
0V21zWy4iHNh21zNEiQM7i/vXPwfUTQ7l/GzzrOmLfoFkCA44Q6wSEPoUcBNaOTq
44rL0YHCmfErjIH6AOmfiaEPe9lBe0wMiGmw1/qvCNJ241mGux+v01rdSGuTjAYB
e38UDn8h84K19+zgbO5uGzF+2/r8TarwC4MtCIlHH3MhBd5sSbS9qTXc7mUPVcbI
bksfG2Q9CSOWUvl4cK1U26SDrO+xrVBHaB/EB9HL2nYXEwQcZxr0Q4G1B6qD6vy/
GhWSMtQBeo5hfV+Knk5MraMHI6gaDgMDX3lMgdJT7ozsDHo7I0HnSUL4fwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOfDq5a3TCrE8ErmKrfoLN8ZiO1AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2U3ZDk3
NC1lMjU4LTQxZmUtODgwYS00ZWMyZDk0ZTJlZGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvZTdkOTc0
LWUyNTgtNDFmZS04ODBhLTRlYzJkOTRlMmVkZS8xLzU4T3JscmRNS3NUd1N1WXF0
LWdzM3htSTdVQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+S6MA0GCSqGSIb3DQEBCwUAA4IBAQAhGgj8
JMMAZjxeGGqh7jAJStXwvNdXyhqehcwt6BEvfbsJRKhltYHnvFvCRo5sMtztqBET
qsP8yhI2oVajWhv3P57jvuvLLoHLAfIH0wG/4xxaZKe+oqZ+RWLC8Kv/lvboF9GE
DC3E3RBu9YFpbv75AhSjUawkVvktBze11lFgduwclR8JTHCWPD2jPYoEjks1hYOb
MQKcPM5ao56t6Y9vYpCk4HfXCLQ/uMkO/C/7DgDaIwiuITi9/HerJg8uVaQ+Bpbg
gfoJNBjkBw5rc94a1otetI6gf3y2/cMLf4mJ7HMTVI40VldqKEHeZubrA79Kjcm1
F0Zes0lFTc14GpE8
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net