Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.cer (raw, json)
Hash identifier: ysMJcsRFUPVMfecgcnOV13Ew2CerBAvMiw2UUMhpeq8=
Subject key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D96FC364FA8531257AF9FC278A312
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31416
AS: 41132
IP: 85.237.128.0/19
IP: 212.33.160.0/19
IP: 217.145.240.0/20
IP: 2a00:18f8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:96:fc:36:4f:a8:53:12:57:af:9f:c2:78:a3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5164534979e60a564701232b2e5200889542606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:3d:10:1a:36:26:34:aa:a6:59:39:b2:b5:
75:6e:cc:42:d9:7b:8a:8e:bc:57:3c:39:09:49:f9:
db:52:94:13:2b:16:00:d4:0e:88:99:24:8e:ed:35:
d6:2b:76:0d:f0:25:c4:69:42:17:88:e6:26:c5:09:
ef:6c:bf:1f:67:b1:82:e7:9a:f0:ee:87:7a:54:19:
0b:6a:39:4a:d2:13:16:b8:fc:50:0e:6d:42:47:55:
10:05:7c:16:ef:4d:32:ac:09:95:4a:f4:da:d9:75:
a2:d6:1e:39:c5:27:34:7d:db:02:49:65:8f:42:1c:
2a:95:6a:0d:db:46:c5:44:89:96:69:97:9e:e8:89:
3a:8a:60:26:e2:41:32:45:38:ff:89:aa:13:1f:00:
f8:64:ca:d0:10:67:c2:f0:dc:34:d9:d2:9d:b7:e0:
b8:bd:93:38:db:90:ff:04:b7:c7:b8:1b:bf:0e:1e:
7f:c3:fc:fe:6c:d5:c2:87:9a:34:b7:70:7f:96:18:
22:4a:00:64:85:47:23:d9:83:5f:19:23:cb:8f:71:
a8:9d:33:4e:38:28:9a:c2:cc:78:c5:38:d8:48:9a:
8a:73:f4:48:a7:12:1e:dd:98:af:a3:39:d1:2f:b8:
4d:47:7a:db:9e:cc:e3:db:53:2b:b4:8c:4a:22:f1:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.128.0/19
212.33.160.0/19
217.145.240.0/20
IPv6:
2a00:18f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31416
41132
Signature Algorithm: sha256WithRSAEncryption
81:d7:d8:ce:07:06:c8:81:e2:4c:20:95:25:de:d1:03:4d:3c:
1e:60:22:61:74:56:ee:ba:fe:35:c6:3f:fa:8e:b7:49:9d:a7:
8f:dd:bd:a4:5d:37:b7:30:50:08:52:1b:fd:b1:d6:27:73:6b:
8c:06:e0:81:b3:d7:be:cb:e0:52:23:bf:98:31:14:7a:bd:ce:
4c:85:ea:28:76:a7:40:98:40:6e:53:69:74:00:59:7e:6f:89:
34:77:91:58:5f:a8:1d:ce:42:e7:a3:b9:a3:59:53:82:35:0c:
21:0b:3f:6e:66:74:46:ca:91:10:b4:9b:5d:e9:79:87:dd:97:
cd:d2:ea:d3:25:21:93:b9:a8:ad:52:1c:71:18:7b:bc:6d:41:
0a:4f:56:c4:ab:44:ad:5c:d1:47:0f:0f:bc:43:67:cc:35:07:
c9:44:56:0f:65:c3:d0:96:04:36:47:cd:a0:c0:8b:48:3d:9f:
48:bf:bc:64:eb:45:99:8e:8c:9c:a8:34:1c:fc:99:b3:88:10:
76:09:ee:5b:c7:80:3b:47:43:3a:09:ca:16:fa:33:c0:a9:09:
39:56:a5:e7:0c:c0:fc:37:b5:c4:09:db:20:2e:1e:2d:40:cd:
02:98:e0:bf:d7:4f:5e:74:9a:93:f9:c1:f0:bb:a2:80:76:00:
7e:02:3d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net