
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.cer (raw, json)
Hash identifier: ZBmSdka+509YkSApm0wDB3gu/UJb45CXIrpbSex4YRM=
Subject key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB2D621F03C6029AFB8349D67C2842
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216123
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:2d:62:1f:03:c6:02:9a:fb:83:49:d6:7c:28:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:3a:fb:12:7f:b2:0f:46:7f:73:7c:88:45:
b5:93:6f:ed:df:96:ff:82:33:6f:cf:68:6b:7e:08:
59:59:04:72:3b:75:1d:fe:2d:a3:f0:63:0f:57:f4:
9b:9d:f1:a8:e3:49:76:6e:e1:ae:5f:92:f2:ba:cc:
8e:d1:27:54:7c:7b:83:85:aa:7f:35:c7:89:56:e5:
c8:ec:3a:8b:ce:54:10:3a:60:01:75:ba:ad:ca:ad:
7e:5d:cf:ad:75:17:48:c1:9c:d3:52:5b:11:f2:b6:
f4:c0:bc:64:80:1b:3b:3c:40:83:e5:34:82:9b:27:
e9:72:30:ff:12:a4:f8:79:d9:7b:a4:d6:1d:f4:b7:
bf:26:d9:64:db:02:27:02:65:ed:a4:ea:b7:0d:cf:
5e:bd:b2:4c:01:62:59:a0:b8:ad:a1:8c:1e:4a:c7:
0d:49:0d:e1:a7:90:3c:53:6a:a4:4d:25:61:e5:ed:
99:1b:80:8d:d8:11:df:94:15:f8:f0:45:3f:a0:14:
c4:26:77:40:2c:2e:32:ea:ba:41:a2:0f:29:ce:09:
31:b0:40:af:ce:fe:e8:90:f0:ea:7f:1d:2c:50:ba:
40:bf:5b:2b:52:67:50:d3:af:d6:db:c3:96:62:32:
38:4a:f9:83:58:78:0c:ec:cb:54:05:51:8c:94:0f:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216123
Signature Algorithm: sha256WithRSAEncryption
80:71:b2:3c:e4:ca:5c:c9:ae:1f:62:99:a8:00:34:36:58:11:
65:63:e5:c7:7d:9c:b1:b2:d4:3d:cf:a8:aa:17:d2:9a:16:c8:
cb:42:40:bd:1a:7d:a7:a7:be:97:fb:7a:6c:8c:26:9f:17:ec:
5b:52:a7:97:62:0c:1d:88:cc:1b:98:5a:b3:36:8e:2e:9b:c4:
64:ca:2f:c3:23:dd:09:91:88:6d:05:fd:44:5d:73:af:94:20:
63:1d:ef:5a:d5:30:83:cd:09:ea:21:e4:85:24:89:5c:fc:18:
ff:ec:4b:34:34:28:80:cc:51:d3:ec:10:d0:52:35:55:1d:c2:
96:56:1f:29:07:aa:89:ed:f1:9f:95:5e:28:7a:3c:97:be:5f:
56:c4:52:db:9b:09:37:29:55:63:61:72:a5:99:3b:ab:84:3c:
2f:89:cf:85:e1:29:d8:da:78:a8:21:61:bb:2f:cf:5f:f1:47:
2e:ea:ae:5e:ae:b6:50:76:71:06:65:7e:a9:0a:21:0d:86:85:
b2:b0:a9:b9:a2:24:e0:4e:a2:2d:fa:f2:82:b7:96:f2:cf:16:
d5:d8:58:b1:5a:cd:f5:f5:40:c4:a3:d7:73:71:c2:1b:fa:c2:
4b:a2:ad:b1:0e:77:d8:00:e9:0e:58:57:ee:7b:15:5d:f5:a5:
d3:5e:6c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net