
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
File: K328XveedAIoXs2gg3ukvyGHYdw.cer (raw, json)
Hash identifier: rC6PISwCHfVR5bX6dUijKFCJslnZ+nByo/BTpOrkcVE=
Subject key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA4BB19BFBE42F373A8FF3464252FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209862
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4b:b1:9b:fb:e4:2f:37:3a:8f:f3:46:42:52:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4a:ce:ff:d1:07:a8:8c:be:0b:0d:ea:16:7e:
ef:ff:fd:42:24:92:16:16:8a:02:7a:a7:1e:76:47:
f4:52:5b:6f:e8:ac:ea:51:6c:b5:f5:13:a0:d8:36:
2a:d9:ab:1c:a1:c5:85:db:94:da:fb:68:36:00:97:
96:24:6d:bf:e4:d7:90:a5:cc:d4:21:29:1a:3b:7c:
cc:0d:98:83:3a:58:b9:dc:b5:90:42:53:61:7d:f9:
6f:62:93:14:c3:7d:96:a9:7b:51:90:2d:90:13:b5:
29:42:1e:74:68:e2:58:a7:95:8d:1c:8e:d1:c5:2a:
58:bd:f1:98:c3:e6:fa:ce:51:f3:97:46:c5:89:e5:
0e:71:6b:64:c0:ec:44:29:9c:e0:29:a8:e4:54:48:
37:d6:e4:60:32:52:c4:56:60:51:03:b0:79:97:92:
92:b5:3b:a4:5e:1e:62:61:92:67:a0:cb:17:9f:d7:
1c:68:1f:7e:50:42:11:f2:42:11:02:dc:b5:f0:fd:
84:e7:af:48:57:8b:b2:0c:f4:b4:b7:0e:67:f9:63:
76:2a:e6:86:20:f6:94:11:02:17:a9:ae:f8:0a:35:
eb:7f:cc:45:cb:74:3c:04:cb:35:ad:45:34:7e:90:
86:70:71:a1:b7:e1:45:83:7a:50:84:30:05:e5:5e:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209862
Signature Algorithm: sha256WithRSAEncryption
28:30:21:fd:d5:6e:76:f1:8b:8a:bf:c4:99:51:9e:91:a2:00:
3d:bc:38:f4:02:a6:23:c8:57:dc:8a:9d:cf:5c:12:aa:0f:17:
de:01:f0:2e:3d:92:61:c5:ef:68:0c:e1:54:df:ad:ff:78:8d:
ea:34:d9:5d:ea:5a:14:8d:7a:a9:09:c3:c7:44:4c:67:fb:ee:
da:e5:b2:25:a9:ce:0c:57:e6:70:3b:a4:0b:f7:f2:18:0c:6d:
87:c9:29:1a:00:e7:2c:cf:8f:ad:07:57:e5:42:c9:13:9d:52:
94:18:98:ca:3d:24:4b:ff:cc:fd:e0:13:1d:34:51:e0:e9:3f:
40:f2:fd:45:4f:a2:28:a2:ba:95:73:d5:9f:cf:cd:93:f9:f5:
9b:4b:d9:56:df:6f:99:77:ba:bf:52:7e:9d:d5:c9:dd:d6:9c:
8a:e8:17:f5:69:94:c6:38:82:5b:c4:98:65:16:a1:d8:87:fe:
b6:5e:99:98:c8:37:c2:26:3c:6a:54:9b:16:b0:37:ef:9e:81:
47:7b:20:77:93:57:20:45:cb:f9:2d:59:23:c9:4c:2d:57:f3:
f0:f4:0f:6a:e4:6b:99:ef:4e:4d:68:91:99:50:d2:7e:2d:a8:
1c:9c:33:a0:f8:c4:c4:92:72:1f:ab:ce:50:c0:28:b6:e9:c6:
bd:68:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:18 2025 by rpki-client on console.sobornost.net