Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
File: R-lMy3tgHaDKCUafYPZTZA_tjBw.cer (raw, json)
Hash identifier: 8FrCzeX4UA+ydR4KuehVMXO5+k3NZuEUvKiIFaCiQL8=
Subject key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDC4368586A38F4F0540F22F50F794
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15829
AS: 29137
AS: 34444
IP: 84.22.64.0/19
IP: 128.140.128.0/20
IP: 185.23.96.0/22
IP: 195.234.248.0/22
IP: 213.180.224.0/19
IP: 2a04:5e0::/29
IP: 2a05:a480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c4:36:85:86:a3:8f:4f:05:40:f2:2f:50:f7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:7f:6d:8b:fa:cf:92:72:55:06:2f:97:f7:
62:32:22:14:65:c0:a6:3f:f6:12:dd:02:87:04:bd:
56:b4:5d:da:a8:ef:37:07:a3:0b:49:50:6a:75:c3:
85:74:d5:ef:18:9c:4b:9e:af:53:ac:49:5b:f8:cd:
b0:2b:43:c0:0a:d2:2d:f3:72:15:4e:e6:9f:98:6f:
56:c1:09:9e:bc:43:3b:06:8d:ba:0e:68:4c:6e:40:
b3:0c:13:40:28:67:2d:5f:d4:68:03:5c:0b:f5:8c:
cb:9d:20:fa:c8:c8:bb:55:ca:f2:3c:00:df:e2:d3:
d0:87:af:08:6e:36:9f:cd:69:20:35:5d:18:69:81:
5f:11:fe:30:d9:82:47:0d:10:dc:79:c6:ef:9e:0b:
c5:34:8f:df:69:64:86:bc:38:d8:c2:0b:04:6f:b4:
80:f0:0b:f9:42:c7:2c:cc:5a:ef:b1:2b:cd:ee:42:
ca:0c:b5:78:9e:f4:70:d6:5f:b5:cc:d7:8f:a0:61:
c3:48:00:63:2c:8f:14:fb:61:e7:73:67:7c:b4:c6:
46:5a:05:10:45:88:2a:82:99:89:ab:9e:b3:9f:37:
b4:7d:6e:82:30:21:68:2d:fa:95:44:17:22:a3:d2:
90:e4:f6:7f:8b:74:ea:30:d8:65:02:76:28:59:02:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
128.140.128.0/20
185.23.96.0/22
195.234.248.0/22
213.180.224.0/19
IPv6:
2a04:5e0::/29
2a05:a480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15829
29137
34444
Signature Algorithm: sha256WithRSAEncryption
05:28:c2:65:cc:b6:67:7e:ed:25:8f:71:73:69:a7:71:79:c3:
28:4f:8d:fa:c5:30:8b:5b:0b:9e:ad:db:07:40:1a:53:65:62:
7b:88:4d:d5:a8:49:d1:9f:3f:63:66:43:c9:f8:c8:65:42:84:
45:94:c1:a4:e0:ac:ed:f2:69:8f:db:80:9b:4f:96:b6:20:29:
6c:d3:74:ba:7c:fb:d9:bf:58:e9:ce:b3:33:75:8c:0a:be:68:
78:09:2a:1d:b3:4f:e0:c3:1e:06:17:54:ab:22:c3:74:c8:63:
de:c7:f7:9b:6e:e3:71:f4:46:06:6b:9c:cd:ec:fc:f1:3a:cf:
ff:a8:44:98:00:46:17:86:db:68:76:ac:7c:8c:de:7d:48:37:
c2:2b:42:e7:88:09:1e:88:af:57:c0:ca:5b:02:f1:9e:6f:f8:
b1:a3:f3:87:d2:a8:1e:0d:51:72:18:70:b0:8f:6a:8a:77:72:
e9:92:68:5c:42:5c:42:a3:c3:bf:9a:15:24:26:f8:93:5d:bc:
33:ae:aa:47:3b:4d:d8:f1:1e:c5:06:99:02:d9:95:c7:97:ea:
56:22:52:4d:dc:3c:8f:31:a0:43:e7:9f:53:ff:2a:5a:bf:77:
1d:65:06:a7:40:c1:2d:c0:da:2a:52:c6:0d:1c:ff:3e:ef:84:
85:97:f3:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:56 2025 by rpki-client on console.sobornost.net