Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer (raw, json)
Hash identifier: CTjbrmnLAuHV/yKh+TBr+UPKJV50O5N0ru1ZqkAQ67c=
Subject key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428284018F6B596D9EEC861EC6D9627B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:55:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199752
IP: 45.113.236.0/24
IP: 185.36.132.0/22
IP: 185.187.108.0/22
IP: 185.239.171.0/24
IP: 2a00:ef20::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:40:18:f6:b5:96:d9:ee:c8:61:ec:6d:96:27:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:55:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:47:2e:1e:9f:fc:5e:1a:f3:0b:b6:33:81:
97:8b:99:14:78:20:f7:30:3c:65:1f:fa:33:9a:73:
3b:3d:d2:6c:ad:87:9e:24:13:8d:cf:d9:52:12:7e:
75:e7:1e:0c:c7:89:06:87:70:7d:e0:ad:b1:59:1c:
c7:fe:2d:8e:c2:ca:9c:0d:cc:36:53:28:04:ad:86:
8c:c9:31:1b:5a:f9:66:29:e1:82:07:fa:f3:84:21:
0a:22:ca:4f:c5:04:f1:17:02:77:41:15:15:f1:eb:
c0:01:91:b8:b3:5e:d0:31:5e:59:76:7f:16:13:32:
26:37:32:6f:f9:1e:21:24:d8:a4:1b:d1:26:cd:56:
0c:71:41:f7:80:c0:9f:aa:e3:b5:b2:96:f9:e0:99:
be:fc:93:ba:28:15:9d:c0:e9:ef:18:51:96:4d:99:
7e:82:92:d1:4d:46:3e:f4:0f:21:e0:5d:9b:0f:f9:
75:58:e8:83:1f:0d:12:5b:f4:ae:1f:bc:e7:22:0f:
1e:6d:ba:b2:9a:f7:d0:df:43:a5:71:84:2b:08:bc:
34:be:06:fe:09:b1:30:c4:45:4c:2e:86:bc:d6:47:
fd:42:98:0a:72:b6:e3:45:3a:30:b5:49:07:e9:a3:
72:7b:65:d7:34:ba:dc:2f:00:fc:0e:4c:61:0d:c0:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.236.0/24
185.36.132.0/22
185.187.108.0/22
185.239.171.0/24
IPv6:
2a00:ef20::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199752
Signature Algorithm: sha256WithRSAEncryption
65:c7:de:a9:c8:c4:c7:69:b5:c6:96:05:a0:e3:6e:4f:19:74:
37:d1:9f:c9:93:d5:d9:b4:56:39:91:2d:0b:12:a8:4c:bb:f3:
15:25:c1:7d:c6:8e:4a:6b:72:68:cb:1b:3e:15:6d:c8:e1:cc:
ff:7a:07:1c:b1:9a:93:a5:3e:aa:47:fc:a7:7e:54:89:f7:27:
96:df:ea:16:a2:f9:ea:14:18:f0:8b:9d:47:4d:d7:36:b4:be:
da:43:e4:a6:53:e8:7e:17:99:de:8f:45:cb:0b:8c:38:16:8c:
59:15:d1:7a:05:5c:52:ca:45:61:1f:88:03:9e:86:77:d1:bb:
00:5b:fe:cf:a3:d5:e3:8e:7b:93:75:e4:7a:a0:71:7d:86:9e:
43:a8:d9:4d:de:42:35:44:8e:0b:11:46:3e:93:0d:9e:44:0a:
e4:c2:d6:c0:a5:0e:8f:81:8b:14:aa:67:a0:46:90:04:eb:90:
21:f3:5d:63:e7:0b:94:9b:fd:e3:33:c6:eb:74:bf:c1:69:29:
1e:35:de:e4:c3:eb:64:2c:99:a5:5b:27:19:de:3f:37:4e:2a:
c0:5c:e1:9b:7c:b3:99:31:15:6d:34:52:58:4e:aa:1f:1e:f2:
4c:dd:49:70:e8:a1:ab:73:45:5e:fa:d2:d0:23:e8:51:1c:38:
50:da:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:48 2025 by rpki-client on console.sobornost.net