Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
File: FmqYZpgAXVfnuS96ONIZu7gP4f8.cer (raw, json)
Hash identifier: qkleoA3T99kuUNNHCW9gVXxPqmpaopCiv8vThhrUQ6k=
Subject key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4DD4A5893DABE3FC7AD6647ACA66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35574
IP: 194.187.172.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4d:d4:a5:89:3d:ab:e3:fc:7a:d6:64:7a:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:1a:4a:fb:b7:54:8a:ed:23:17:4c:4d:7c:
0c:48:26:18:26:ca:ec:d5:a9:e7:e7:22:41:0c:29:
2e:d7:a5:d5:f8:cc:e6:a3:5d:02:6d:80:9f:95:20:
24:ae:60:c0:f0:7f:c2:06:ad:ea:53:42:72:13:19:
be:fd:54:fa:cc:fd:31:43:87:03:29:54:3f:17:23:
c4:01:6d:9f:48:5e:5a:74:d7:73:d7:a0:c5:fe:69:
82:36:c7:05:48:32:51:de:a2:0c:df:f4:68:12:56:
ed:8a:49:eb:53:1b:5d:fc:7b:22:5b:e2:73:2b:5e:
0a:8c:e0:b4:53:01:da:9f:c9:05:da:f5:a6:37:0a:
3c:e0:f5:8e:d1:cf:b0:ee:6b:cd:dd:44:f1:7c:4f:
fb:65:b1:f3:e0:f0:f5:5f:85:b2:5f:95:25:1a:03:
35:c2:dc:de:51:a4:f7:fc:5d:95:38:26:89:ed:82:
04:07:92:99:bd:2b:06:c7:e2:fd:02:8a:74:a0:1a:
12:dd:e6:fe:34:c6:7f:bf:33:4e:11:1f:93:d8:10:
f0:c5:04:64:8b:98:67:18:dd:c4:45:17:4d:39:b0:
f1:a1:6f:9a:68:05:ff:8c:fc:f7:61:02:9e:e0:48:
35:80:81:6b:79:e4:7d:ab:d4:3e:0b:ea:69:9f:37:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.172.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35574
Signature Algorithm: sha256WithRSAEncryption
7e:57:f8:bb:47:f9:46:87:72:0e:8d:ee:6e:dd:61:90:db:de:
84:66:87:e8:2b:a3:df:0e:fe:0d:5c:5f:ad:df:4b:e3:a6:0f:
84:2e:db:4c:3f:81:71:2a:f1:d0:1c:b2:ce:7b:40:59:21:37:
62:20:74:7c:fe:33:28:06:5c:9c:55:91:6c:22:ad:3c:c5:86:
44:21:40:2f:92:60:1c:08:69:91:1d:41:57:20:0d:11:9c:8c:
75:f0:18:7e:de:50:81:d5:c5:24:e3:2b:91:56:2f:02:ab:6f:
d3:c0:ab:c6:d3:d9:1f:0d:8e:e0:c9:e5:a8:83:00:42:9a:a7:
24:14:4d:1f:57:a2:11:3e:4d:da:bb:29:e0:58:83:6d:f2:53:
7f:85:98:ca:f1:72:9f:93:f8:48:dd:cf:13:c6:47:4d:f6:40:
a6:e9:44:ea:8a:7b:04:76:08:4b:1c:18:f9:60:55:b4:88:b0:
17:bb:ae:fa:ca:02:c0:c2:20:bf:66:13:9a:5c:7d:54:7f:6a:
72:80:47:9b:28:45:77:0d:61:44:50:d2:8d:05:55:44:36:e7:
c6:70:0d:7f:63:b2:5c:4c:fe:9b:e7:58:2d:29:87:34:72:61:
eb:ac:dc:4b:a2:73:6b:fe:32:02:c6:fd:c1:e3:4a:32:91:5b:
bb:9c:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:09 2025 by rpki-client on console.sobornost.net