Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.cer (raw, json)
Hash identifier: /IYxwP75L0AZewfeJQr1w55Lhi7RHw5TVe9FTVMZm8Q=
Subject key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195CC23EF98F422A96D47C8507AFDAF4CAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 25 Mar 2025 07:11:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213442
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:23:ef:98:f4:22:a9:6d:47:c8:50:7a:fd:af:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 25 07:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:d3:cd:d8:a0:cf:a4:12:b8:5c:27:ae:8e:
7c:b6:c1:bf:93:35:83:87:b8:ee:31:1e:24:7c:66:
62:d7:c6:59:c6:1c:d4:63:38:0f:81:d7:dd:98:eb:
b3:fd:49:d8:82:84:86:1e:5e:0e:87:6f:cc:c0:ed:
b1:48:59:11:8c:6c:48:ea:59:6d:fc:50:b8:14:1e:
ec:ea:6e:1f:ac:5f:f9:19:92:dc:ad:ac:4b:54:3b:
9c:df:0b:11:3c:bb:da:6c:5d:4a:26:c0:92:51:c9:
81:d4:7c:66:34:8c:a0:6a:32:e0:ee:20:ba:7f:65:
0a:82:04:9c:e1:33:4b:a6:17:1f:91:07:17:05:97:
8f:b1:89:a2:60:76:5f:54:ba:0e:6c:18:e8:6f:e0:
09:46:a5:e5:0d:0a:d3:9e:ef:6c:9e:0a:7b:3e:25:
7b:96:3f:d6:39:df:d6:34:c7:03:fa:ff:9f:1b:64:
cf:f2:e8:2b:15:e1:8d:ee:9f:be:e8:16:59:d7:16:
6d:54:c2:e2:5e:65:da:48:96:44:3c:92:b4:75:ed:
7a:f4:15:a7:7d:24:6f:f2:ed:90:25:61:a8:dd:37:
75:73:85:a2:53:01:12:fb:ea:4d:fc:7e:9a:9e:16:
ca:be:45:31:59:bf:96:06:5a:7b:16:2b:de:ed:f9:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213442
Signature Algorithm: sha256WithRSAEncryption
3a:4a:a5:06:d0:c7:dd:fc:42:86:67:66:3c:2e:db:05:49:51:
de:f4:85:e4:60:15:3c:d2:e1:7b:b0:a6:32:ce:5e:16:9e:d2:
bf:49:04:d1:82:91:1f:1f:82:ef:58:9b:ae:ef:c2:1f:cd:c8:
2e:30:2c:fc:e6:88:07:36:8f:d9:fd:30:eb:6c:15:13:3c:71:
6c:7d:8c:5f:90:cb:09:ea:57:e6:bc:3e:1a:3e:f4:e7:e2:25:
87:f7:ae:d9:1a:17:3b:92:0d:9b:93:f6:e6:cc:83:1f:b4:28:
5b:46:dc:2a:0f:ca:3f:66:87:65:cd:d8:90:65:1e:36:dc:37:
f5:6a:66:77:9e:9f:17:0b:d3:58:cf:a3:dd:87:e2:c7:4c:0f:
fc:20:0a:29:fb:33:64:4a:92:00:22:1b:2c:8e:17:c3:9c:5a:
98:1b:3b:d1:fe:64:7a:4a:01:9b:7c:b4:69:05:88:33:44:02:
1a:c5:d6:7d:ba:4a:24:ac:57:c7:5b:2d:47:f0:e9:f5:39:5b:
b8:25:a2:d9:24:d1:98:3c:ff:60:b4:ec:dc:94:bb:54:65:a6:
b7:e4:e3:d3:91:3b:ff:40:0a:83:ba:ba:49:10:e1:78:11:3d:
b9:cd:f1:5e:6d:ef:e0:c4:75:52:79:a1:c3:7e:f4:7a:95:e0:
b0:77:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net