Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.cer (raw, json)
Hash identifier: mHU+xcabfaH7l19Kh1xOdRjGPVBmtTF6mTOdTTV+lDs=
Subject key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B17EC9293BFAEB56D0BFF5F5E261F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207607
AS: 209097
IP: 5.182.144.0/22
IP: 45.149.56.0/22
IP: 185.115.204.0/24
IP: 2a0e:5c00::/29
IP: 2a12:f280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:7e:c9:29:3b:fa:eb:56:d0:bf:f5:f5:e2:61:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:10:92:54:9e:9c:41:b3:d1:cf:6a:86:e2:
13:fa:ba:16:a7:d5:07:78:55:cf:7f:9f:c3:83:8c:
eb:2d:e0:b4:c5:fd:a7:0f:2c:9c:27:66:85:13:4b:
dc:5a:3a:7e:40:e4:f0:71:87:d4:81:a6:db:2b:b1:
c8:63:51:e6:e8:79:4d:d7:1d:0b:a3:a4:e4:ba:50:
15:bc:3b:68:59:fb:7b:e3:f8:85:b5:82:a1:4a:48:
5f:a6:0f:ef:c7:33:b8:44:e6:51:42:ce:18:22:1f:
96:02:5e:e5:cb:f0:94:c5:5a:58:35:e3:d6:dd:86:
d5:9f:1c:ce:41:59:f3:93:bf:75:a4:d4:ad:5d:3d:
62:ca:c1:86:00:45:68:87:0c:fc:d0:ae:11:5c:ef:
33:b9:3e:a2:e3:30:e6:d4:81:2b:e0:b3:43:02:0e:
eb:ed:9d:61:81:b6:b5:0a:79:b4:66:f7:70:6c:e8:
1c:d6:96:2d:16:d7:b8:2c:7c:92:83:23:c7:4c:1c:
6b:05:1c:78:78:29:51:7c:db:25:f9:67:41:ad:a7:
84:57:19:ec:56:cb:f3:e8:86:b5:04:c8:23:c3:6d:
7d:9b:58:0e:32:ac:a6:bf:af:ae:00:c8:4e:e5:cd:
7f:53:63:d0:9d:59:36:40:16:a0:a1:37:f6:9a:55:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.144.0/22
45.149.56.0/22
185.115.204.0/24
IPv6:
2a0e:5c00::/29
2a12:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207607
209097
Signature Algorithm: sha256WithRSAEncryption
15:59:94:8b:54:b6:34:46:21:1a:df:cc:9a:9d:5d:b6:9c:a4:
35:43:b2:3d:46:0f:00:b0:60:31:2d:ee:c1:87:31:95:9e:f0:
4a:08:7e:3e:19:2a:c3:2a:84:e8:b9:e5:8b:24:0a:29:b7:49:
c3:47:59:b0:72:e3:80:34:68:5a:90:ff:09:0b:45:44:b6:d1:
56:c5:6d:8a:64:c8:34:53:23:e3:82:f3:cf:48:6c:ba:03:1f:
92:a5:74:3e:45:3c:93:ee:c9:d8:71:7e:8d:ab:d9:fd:88:51:
57:b1:82:00:ea:f9:18:18:8c:1c:d3:f5:4a:57:3a:9e:a9:c8:
3a:31:ff:40:fb:d0:47:dd:30:3d:29:14:12:c7:63:6a:e4:e2:
b3:d4:4f:93:95:08:41:3d:f8:aa:07:f0:00:78:b4:19:d1:a0:
45:c5:ca:01:46:b0:6e:17:25:91:0b:2a:a4:a1:7b:dd:12:6f:
26:c8:af:75:8f:38:83:2d:b1:d1:2a:cf:a3:f7:05:e9:91:72:
6c:87:5b:f7:4c:13:dc:2e:9f:42:76:d6:d0:cc:19:c7:e3:da:
a4:5e:5e:04:45:06:8c:85:62:91:b7:08:08:aa:04:9d:1d:35:
7c:07:47:48:4c:6f:06:d7:57:3d:16:b9:50:54:96:0f:25:d1:
70:b3:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:52 2025 by rpki-client on console.sobornost.net