Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer (raw, json)
Hash identifier: VMB27paWf+hB24HyftrYruXzyiUYJq020cEzpMr4+m4=
Subject key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA32BAB34C5D57EB8E0628997DF7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21376
AS: 42723
IP: 91.193.80.0/22
IP: 176.104.248.0/21
IP: 194.28.64.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a3:2b:ab:34:c5:d5:7e:b8:e0:62:89:97:df:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:0a:d5:2c:5a:2f:b9:05:7e:84:b9:3d:79:
96:4b:fc:d6:0e:8f:bf:06:87:c9:60:48:ba:f7:ca:
0c:52:e0:eb:e2:36:85:c1:df:4d:ab:52:8b:58:c9:
2f:f2:15:fb:54:36:ec:ef:5f:d6:b1:34:a6:82:8b:
f8:0d:1d:24:2f:0a:3c:ed:80:b6:ae:77:d9:bc:a6:
42:bf:6a:eb:53:6b:09:c5:e9:89:88:a2:6b:e2:71:
34:ed:4b:b9:be:16:19:4f:08:e9:63:97:50:06:21:
ce:09:b0:71:8f:53:c5:9e:bb:4f:87:31:6c:94:10:
69:74:3a:80:42:83:ba:c0:c2:08:a6:1d:2d:45:04:
0f:55:fd:16:81:4e:2c:4b:ba:71:ca:41:29:48:3b:
9b:bd:d3:8a:d0:e9:cf:1b:2a:52:1d:96:78:e3:13:
f4:d1:3d:47:b0:85:7e:f3:c3:1c:1f:00:f7:cf:21:
29:06:5c:74:76:41:49:0a:7b:24:11:2a:fc:36:fd:
0e:36:fe:14:41:62:4e:8f:b2:72:ab:87:d5:9f:d1:
79:46:c7:a7:89:c7:23:6f:49:cc:d7:02:03:48:9f:
75:c2:28:60:f9:79:08:33:19:18:98:54:89:71:e0:
ed:d0:94:25:0f:79:8c:93:3a:fb:45:6f:4a:0c:1a:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.80.0/22
176.104.248.0/21
194.28.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21376
42723
Signature Algorithm: sha256WithRSAEncryption
a9:8f:b9:1b:1e:6e:27:4f:ae:d0:e6:23:28:57:8e:64:95:63:
23:64:d3:1e:16:53:9d:21:eb:34:4f:f6:5e:9e:4a:7c:83:c8:
71:63:df:77:76:33:f2:6b:b5:59:98:2f:ea:71:42:fd:b8:4f:
7e:82:56:0f:d3:f4:61:6c:28:e1:9c:54:84:e4:7d:f5:4c:e9:
e2:42:4e:e1:00:0e:f1:f5:d7:6d:62:cc:c6:46:84:80:a5:b2:
a8:1f:d3:16:1d:0e:bc:3c:1e:00:8d:54:0d:8a:3b:0b:07:9b:
2f:90:7d:c9:08:81:b0:c4:03:3a:80:91:e9:0a:a7:42:89:b3:
2b:aa:b7:a4:a5:34:a3:1c:25:43:42:7d:a0:27:69:10:89:5b:
35:1e:6d:51:5e:e8:14:99:f1:ba:c4:a3:ff:82:db:3c:2a:95:
ff:43:71:c6:8c:43:e8:bc:96:15:c7:09:e2:aa:40:4d:ce:8f:
cd:01:33:c5:ac:4d:b2:04:6d:ff:53:17:74:0a:2d:1d:65:c3:
d2:ef:d4:41:9b:5e:b1:12:b4:63:9f:3c:18:32:86:f8:a3:bf:
4e:d5:e0:f0:bf:37:24:67:a8:3e:93:3a:c3:d6:b8:ce:48:81:
51:19:3a:6c:8c:1b:ef:19:6c:8e:f7:a7:f7:5a:0e:36:cd:48:
23:17:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net