Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer (raw, json)
Hash identifier: icoYhmVkjGUd28ptBqWNNV0yNOF4C41dG0VPMSkOIpw=
Subject key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9CBA9636551988A7981CB7BED36E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.213.41.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cb:a9:63:65:51:98:8a:79:81:cb:7b:ed:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:bb:e2:a7:55:09:21:19:3a:f7:49:78:ed:
d1:ee:5b:5a:46:24:5f:f9:6c:38:c4:e7:20:2a:a5:
69:87:af:dd:d6:49:e8:36:ab:98:95:9b:58:ed:78:
e8:a6:87:75:8d:71:3b:27:f3:e2:6c:03:f3:77:ea:
bf:62:04:36:07:66:78:27:6d:51:8c:cb:41:d4:b5:
7e:42:56:a8:7d:ca:92:fc:3b:2b:a5:59:5e:40:ca:
63:51:1d:4f:1a:3a:27:9d:62:86:40:4a:80:f1:2a:
6c:74:fc:c0:09:b2:03:c4:10:00:fa:33:21:83:06:
9c:00:a7:29:62:fc:76:dc:b7:1f:3b:ba:74:4c:4b:
0f:fd:fa:b9:e6:77:72:63:54:95:c6:b3:fb:a4:79:
b4:10:88:36:35:f9:15:00:98:b8:b2:db:38:f0:57:
5b:aa:d6:f5:51:8c:27:1b:56:0b:4a:d9:52:73:d9:
ae:0f:8a:bd:bf:d1:a5:2b:9d:ff:47:12:4a:17:31:
3f:c6:f8:2f:0e:d0:36:6b:89:39:fe:2b:ec:e2:b0:
28:ae:e1:b5:5a:86:50:a6:db:36:f9:25:21:96:9b:
ac:57:9a:97:e0:7a:f5:d6:2d:b5:80:1a:32:f0:7b:
92:30:ce:d3:22:ba:53:e8:c7:72:f5:2d:70:19:66:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.41.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cc:72:8b:ba:8f:1c:97:5f:95:57:23:45:e9:0c:4a:e8:f4:
e0:11:d3:8a:cb:a6:7e:15:3e:5f:70:6f:e7:5b:de:dd:5f:a1:
16:b5:c1:43:5f:23:9a:2d:2b:a0:14:2c:a1:14:20:57:33:28:
f4:26:1a:69:74:69:83:61:96:6b:57:da:49:79:ab:a1:1d:13:
70:48:dc:2e:56:89:b9:52:f6:71:19:ee:5f:e0:2e:ff:f5:d0:
9f:05:61:11:25:68:bb:2a:ac:7c:07:cc:ad:b9:8f:a9:35:22:
33:34:55:d9:2e:a1:ce:38:d7:76:a4:40:5d:bb:32:82:5d:4e:
1f:ab:df:7f:5a:b1:fc:c0:80:bd:fd:36:17:6e:e0:54:28:19:
78:0f:72:76:c3:94:91:96:ab:7a:79:c1:2d:93:99:5b:fa:45:
c3:5a:9b:11:b4:7a:b5:dd:a4:bf:2f:25:14:b7:0e:25:fa:93:
25:b9:4a:e3:b1:91:7d:7b:62:26:a1:34:24:29:59:8b:ab:ab:
b4:81:e0:ee:14:c7:c4:01:9d:45:f5:a4:42:6b:c5:37:49:61:
95:f3:c4:32:f7:e5:91:8b:4d:bc:71:ad:8a:dc:f7:6f:c9:9e:
ab:09:19:6d:dd:e5:10:7a:b7:fe:ca:39:6a:1c:a2:d7:30:df:
bc:14:fe:23
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2cupY2VRmIp5gct77TbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWMzNTIxMThmZDVmNzU0NTRjZmM2MWJlNjFhNDJhYmVmNGRjNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nK74qdVCSEZOvdJeO3R7ltaRiRf
+Ww4xOcgKqVph6/d1knoNquYlZtY7Xjopod1jXE7J/PibAPzd+q/YgQ2B2Z4J21R
jMtB1LV+QlaofcqS/DsrpVleQMpjUR1PGjonnWKGQEqA8SpsdPzACbIDxBAA+jMh
gwacAKcpYvx23LcfO7p0TEsP/fq55ndyY1SVxrP7pHm0EIg2NfkVAJi4sts48Fdb
qtb1UYwnG1YLStlSc9muD4q9v9GlK53/RxJKFzE/xvgvDtA2a4k5/ivs4rAoruG1
WoZQpts2+SUhlpusV5qX4Hr11i21gBoy8HuSMM7TIrpT6Mdy9S1wGWY2RQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAHDUhGP1fdUVM/GG+YaQqvvTcT4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzVlOGEy
YS00NTczLTQzNmItOTAyYS1lZjAxZTFkYzdkYWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNWU4YTJh
LTQ1NzMtNDM2Yi05MDJhLWVmMDFlMWRjN2RhYy8xL0FjTlNFWV9WOTFSVXo4WWI1
aHBDcS05TnhQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9UpMA0GCSqGSIb3DQEBCwUAA4IBAQAZzHKL
uo8cl1+VVyNF6QxK6PTgEdOKy6Z+FT5fcG/nW97dX6EWtcFDXyOaLSugFCyhFCBX
Myj0JhppdGmDYZZrV9pJeauhHRNwSNwuVom5UvZxGe5f4C7/9dCfBWERJWi7Kqx8
B8ytuY+pNSIzNFXZLqHOONd2pEBduzKCXU4fq99/WrH8wIC9/TYXbuBUKBl4D3J2
w5SRlqt6ecEtk5lb+kXDWpsRtHq13aS/LyUUtw4l+pMluUrjsZF9e2ImoTQkKVmL
q6u0geDuFMfEAZ1F9aRCa8U3SWGV88Qy9+WRi028ca2K3PdvyZ6rCRlt3eUQerf+
yjlqHKLXMN+8FP4j
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:58 2025 by rpki-client on console.sobornost.net