Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
File: PflufaVJi3Djuxe24YoxE3EtMrY.cer (raw, json)
Hash identifier: Fkwqyb2NN/vuQs8p4hZWr9Wkq24opbMhy6prm6UyCv4=
Subject key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F5DA98F42CB8B9D02D0225D6AD9AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57474
IP: 91.240.60.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5d:a9:8f:42:cb:8b:9d:02:d0:22:5d:6a:d9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:58:6a:67:e3:fd:3f:50:d8:89:91:3f:1f:
29:25:8e:bd:8a:8f:92:20:ef:24:80:98:c5:02:0d:
a4:ac:2f:20:0e:0e:d0:d3:6f:53:a9:a7:56:2d:7b:
ec:95:a3:b6:1a:d8:b2:6a:c9:06:e9:11:fd:09:4b:
ee:7f:f3:16:59:61:bd:8c:22:31:2e:40:92:cd:94:
0c:68:6c:48:2b:ca:45:8a:fc:7e:5d:7f:d4:8b:d1:
b3:06:72:85:ab:5e:4b:ed:db:3c:52:96:2f:2b:e3:
d6:3d:85:23:9a:2d:6f:97:da:1b:91:83:7a:11:c9:
d2:2b:3a:79:a7:4a:7c:ef:1e:63:57:06:18:7a:dc:
9e:9b:20:52:fe:01:c5:84:8a:e1:22:b5:f4:70:31:
9a:eb:30:4f:58:51:1d:8f:11:73:6e:a4:bb:33:dc:
1c:29:a3:bf:36:95:ff:c2:62:44:cd:79:c6:f5:34:
41:83:0b:22:8b:e4:e6:c0:58:a7:78:e4:9f:7e:aa:
8c:da:1e:e8:ae:84:2c:4b:90:bf:55:84:5b:f3:12:
38:3d:1a:b3:9b:42:92:9d:1a:24:76:7d:f3:45:a4:
33:d4:22:8e:bc:e0:11:95:a5:1a:a5:ee:31:0d:40:
82:2a:e7:a3:e8:d3:73:32:7f:ff:8a:6a:b3:ac:05:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.60.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57474
Signature Algorithm: sha256WithRSAEncryption
9d:36:52:d4:a2:97:a0:ec:d8:48:53:86:8b:af:98:13:58:75:
e9:fc:09:69:bd:7c:90:1b:38:80:fc:6f:ae:72:de:86:a5:b6:
02:b7:af:35:a7:79:09:1c:a7:7d:9f:a4:d3:37:2d:bc:31:6b:
4b:1d:4a:7f:7c:33:c7:d4:73:b4:85:f8:90:8f:c9:46:31:4c:
59:ff:d4:62:d1:b3:71:26:0c:c6:c9:24:b6:62:34:29:a5:eb:
21:90:7a:49:a9:76:9e:c7:d4:73:ef:67:c5:fe:0a:64:55:4e:
de:68:df:25:2b:89:d6:dc:5f:1f:7a:c9:11:59:0a:8e:35:97:
a3:c8:7d:87:db:67:73:97:5d:37:a7:73:fa:a5:35:d6:8b:0e:
91:93:08:03:9e:f1:e2:9e:23:c0:ec:eb:f8:a1:e4:af:42:bd:
17:25:91:f4:9a:05:f6:30:6c:92:9a:c4:23:df:e6:30:f7:ef:
c7:18:9b:f7:3c:30:76:9f:e5:41:4e:d6:d0:a9:4e:d1:84:a9:
05:f0:a2:20:1c:b8:f4:17:d3:76:f7:66:8b:62:ee:c3:34:01:
f6:7a:ac:5e:1c:a3:b5:54:48:49:57:1a:3c:c3:99:dc:be:22:
e4:1a:f9:dd:60:52:f3:39:4c:8f:2c:53:6e:c6:06:c8:18:5f:
a8:ad:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:52 2025 by rpki-client on console.sobornost.net