Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
File: Mm9RyiOYIQP_40-YkNC3To-nga8.cer (raw, json)
Hash identifier: y3d+k/7/+tC9Y0QY9meqzMsXrQWvoV1FMXa0Q/BWUNs=
Subject key identifier: 32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC499F22258CF7D02E14E9A460885E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57689
IP: 91.213.18.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:49:9f:22:25:8c:f7:d0:2e:14:e9:a4:60:88:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:23:0d:58:09:50:68:89:f7:98:0e:dd:f4:
5c:39:7a:8f:29:d1:f9:76:a7:a4:9b:48:ce:db:bc:
0b:d0:f2:56:b9:6d:37:e4:57:72:5f:8d:a8:c9:c4:
ed:16:a2:74:fe:b2:d3:f3:83:ac:59:5f:1a:17:f4:
86:89:61:37:01:a7:73:b3:a4:4a:db:07:73:bb:fc:
55:9e:e6:6e:d3:bc:c6:f4:1d:ca:cf:50:90:30:d8:
64:b2:0c:f2:75:b5:4e:21:20:92:92:fd:1b:ed:cc:
74:3e:6c:1d:e4:36:c2:db:78:17:cf:69:39:77:04:
49:a0:bb:4c:58:15:0f:ca:40:c5:5b:5e:93:51:88:
2c:43:36:c7:21:22:62:b1:a7:58:55:24:86:83:d0:
01:80:21:3e:cf:dc:f0:8e:fb:31:b0:dc:b0:02:3b:
fb:91:7a:7d:c6:87:96:4e:a3:0f:8e:f1:b8:25:80:
29:b8:79:b2:28:72:6d:c0:12:82:95:7f:99:9e:5c:
ef:fd:5e:fc:fb:02:3f:ba:20:73:01:5f:18:8f:72:
a1:c1:ab:41:61:33:b3:71:03:8a:9b:36:ec:00:3c:
d0:2b:21:70:83:9a:72:21:a8:78:d8:c7:72:cb:0d:
27:f4:23:50:6c:75:6d:00:ae:a1:64:fc:1d:49:fe:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.18.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57689
Signature Algorithm: sha256WithRSAEncryption
7c:91:bc:4a:81:32:9a:42:11:55:9e:1e:08:9a:98:55:0e:c2:
24:ff:64:fb:21:cf:a3:f2:24:8b:7f:ea:93:90:cf:d7:88:c8:
b5:42:f2:ab:ec:59:93:df:1d:bf:02:95:cb:47:78:fb:69:12:
8c:07:b4:1c:b0:57:5a:f4:94:42:a7:ee:de:41:7c:8a:bf:05:
e4:aa:cd:ed:c9:53:db:5a:b4:cc:08:0e:e4:a4:b3:00:cd:97:
2f:b4:25:77:80:c7:6f:fa:9f:ee:f8:8a:89:c5:46:b7:0c:8f:
c8:91:b1:a8:92:da:65:42:4c:d3:2c:5c:a3:31:a3:fb:d1:58:
e8:cc:4a:94:02:57:af:e2:52:05:6a:e5:1f:c4:41:11:3e:bd:
2f:bc:89:2c:82:79:2e:c8:85:7e:52:f5:44:45:f1:d8:68:1a:
c0:49:96:f6:03:b1:36:c5:ef:e5:4b:51:fc:8e:b4:f4:f0:d4:
81:5b:37:1d:17:d9:70:21:fe:fc:7f:8f:6f:00:2a:cc:7a:eb:
5d:ed:d3:a3:43:3d:67:53:12:15:30:23:34:30:68:55:1a:8d:
57:89:ac:ae:96:6f:77:26:db:ed:b6:78:3d:fa:28:ab:b5:23:
bd:f8:0a:a4:6c:f5:6c:91:5a:73:da:f3:6c:5c:e7:10:69:90:
be:cf:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:24 2025 by rpki-client on console.sobornost.net