Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
File: P6LWhQu8RyBVepF03LyXYK7MCxo.cer (raw, json)
Hash identifier: bp3RF1Oh9t7bWiXrEi55FPSPIh9tt2iNkj4Qsw9wujU=
Subject key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6C14AFB7D27E844B12C3E94C2B118
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49275
IP: 91.199.239.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c1:4a:fb:7d:27:e8:44:b1:2c:3e:94:c2:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:28:20:54:2a:f8:bc:d8:99:95:a9:9d:10:
42:85:36:52:64:1a:b5:b6:48:13:e2:65:c8:a7:e1:
21:8d:32:70:e1:eb:ba:b4:9d:9d:56:9d:0e:4b:2a:
6e:ae:0f:df:a8:07:c1:ef:c6:49:75:32:c6:a2:e3:
79:7a:e7:52:47:68:fe:18:fd:2e:f1:54:9a:97:3f:
a4:24:e3:20:e5:2b:76:67:ec:51:9b:5a:74:51:20:
4a:ef:85:48:02:dc:17:d4:6a:a8:39:36:a9:85:c9:
97:24:82:9e:f7:c0:bd:4a:d3:c2:15:3a:90:2a:6e:
38:ce:cd:15:42:06:4c:67:98:57:fb:8c:8b:e3:7a:
73:70:6f:97:0b:08:89:c1:20:91:b5:0a:ab:4e:f6:
bf:d0:8d:4b:3a:89:a5:0d:b3:32:2f:69:fb:bc:1e:
1b:97:4c:a7:cb:78:71:13:30:f6:30:53:5f:87:fa:
57:0f:96:d9:15:c7:33:f9:ea:80:8e:c0:ba:2b:c4:
9d:c3:32:3d:16:95:da:f1:f9:81:b8:aa:6e:93:d8:
bf:11:81:64:42:8f:8f:16:fc:a8:95:57:63:58:4e:
a4:82:a7:84:bd:c6:ef:09:d1:7b:a2:74:13:a8:b0:
d3:b9:ab:5c:db:1f:ec:cd:3a:55:cc:e2:87:7e:be:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.239.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49275
Signature Algorithm: sha256WithRSAEncryption
2f:13:85:8b:e5:52:7e:68:22:13:0d:7c:b7:4b:c6:70:25:03:
c5:b1:1f:d8:c5:84:34:b2:de:cd:d0:38:a3:a4:d5:c5:80:d8:
69:4a:70:3f:29:3b:36:96:2c:cb:5f:6c:14:6e:47:fd:48:e5:
5f:70:7c:32:36:67:55:df:a9:b9:14:c3:6c:f4:6f:93:c4:7a:
6c:3e:96:45:bd:a3:e2:33:af:67:0d:3d:44:e6:98:13:00:74:
cc:5e:f7:77:27:b4:1d:d0:d0:5b:c9:4d:82:39:4d:f9:72:9f:
85:4c:97:82:b4:84:e8:34:85:cc:a4:2a:8a:54:c4:56:58:43:
bf:11:93:ae:8e:cf:4d:f8:85:f4:1d:a3:d6:a6:90:85:54:0a:
d6:2d:29:1d:37:25:82:9f:72:23:54:bd:c9:0b:f1:e9:93:44:
60:8c:4c:fb:a3:fa:b6:0b:77:4d:ef:8d:fc:a2:52:90:f2:c3:
24:5e:d8:85:9f:3f:49:55:a6:3d:d1:3d:34:1d:a8:63:25:81:
8a:8b:14:26:48:e2:11:69:b0:ff:1a:d9:18:bd:0e:50:dd:79:
db:af:35:2d:79:15:e2:04:81:fe:21:06:83:87:89:e4:62:b2:
67:9e:a3:d0:bf:4b:67:8b:c3:ec:4c:09:61:8a:08:a1:8d:63:
e8:59:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:51 2025 by rpki-client on console.sobornost.net