Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
File: RmSgU4XAYmgVApGX6xUGSF09bRw.cer (raw, json)
Hash identifier: N+cdJNuLSTEXNbsyWhnl0GoZMvTDWuO1Yn1//+qGQtY=
Subject key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424459E9886C29D1CAA04DF96A09B1338
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.234.214.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9e:98:86:c2:9d:1c:aa:04:df:96:a0:9b:13:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4664a05385c0626815029197eb1506485d3d6d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:d0:6f:bd:76:16:77:5c:f6:0a:cd:64:cd:
fa:fa:95:c8:36:b5:e1:9d:d3:ce:74:72:ca:34:a1:
07:6a:83:86:bd:3d:a6:79:2b:88:33:be:82:6b:95:
9a:6f:39:9d:a1:0c:06:8b:dd:40:2f:c5:78:08:b9:
70:b8:03:38:db:fe:35:3a:ac:4c:a9:e1:e7:3f:ca:
3a:97:70:0c:78:c8:a7:2c:8e:cf:a5:0b:db:78:47:
84:cc:f5:d2:3c:10:76:df:99:7d:b6:1f:a6:55:be:
e4:f6:ec:ad:df:88:e6:3d:d4:31:6d:0b:5d:96:2e:
68:7b:22:c9:3b:53:c9:2d:45:ad:11:55:9e:84:98:
88:43:80:0d:26:84:b3:4b:aa:43:76:64:ea:e2:a5:
a3:bc:57:59:57:25:b8:33:b5:ee:df:1c:2f:79:15:
46:9b:c3:e5:9a:9a:c6:cf:e0:60:1a:74:07:db:f5:
08:ed:83:62:68:ff:96:bc:9d:93:88:28:95:72:77:
5d:77:e7:d0:a0:59:e9:b0:bf:cc:8b:9b:30:a7:31:
12:f9:53:7a:f4:11:00:dd:08:81:41:92:44:1c:61:
93:0e:4d:a4:48:43:d5:6d:1e:2a:e5:f7:86:9a:70:
81:fe:52:d1:db:82:cb:71:77:4d:92:05:d3:7b:13:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fc:c8:45:13:73:e6:ac:b6:b6:75:01:95:1c:4f:a5:63:db:
a4:f6:3f:bb:7b:93:a7:e0:19:99:37:33:6c:5b:1f:6d:82:36:
5f:ab:09:a4:31:3e:f6:99:38:ac:8e:6f:a4:f0:82:a4:6e:33:
a6:6a:ca:80:ac:1c:92:28:3e:ca:8c:f1:9e:e0:bb:11:ca:c3:
6b:3c:d5:38:33:f7:33:42:44:7b:92:92:03:db:d0:b8:f5:08:
16:32:b1:ac:4b:d6:b6:da:bf:af:c1:4b:df:d7:34:f9:58:2a:
20:d5:7f:66:9e:07:ac:62:9f:3d:37:60:ce:7b:5f:31:79:24:
39:0f:39:7d:0d:48:54:ff:76:95:18:f0:70:36:71:dc:1a:93:
60:64:c9:77:22:60:f8:e0:2c:f9:e0:13:ea:e2:71:8a:32:a6:
29:5b:1d:fd:89:4b:78:2d:3f:46:87:37:6e:4d:8d:f6:04:15:
2d:22:35:a3:d0:f2:c2:12:ad:10:71:38:75:e4:69:29:44:51:
f1:24:49:8b:d8:39:dc:08:6c:77:dd:81:42:9b:f2:3c:b9:15:
e7:bd:2d:3c:b3:40:7c:2c:f7:c2:d0:04:be:59:51:7d:43:1b:
e6:ee:be:02:38:f1:52:3a:c2:92:ae:43:e2:36:96:57:68:a8:
1b:59:0b:7a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQkRZ6YhsKdHKoE35agmxM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjY0YTA1Mzg1YzA2MjY4MTUwMjkxOTdlYjE1MDY0ODVkM2Q2ZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr3Qb712Fndc9grNZM36+pXINrXh
ndPOdHLKNKEHaoOGvT2meSuIM76Ca5WabzmdoQwGi91AL8V4CLlwuAM42/41OqxM
qeHnP8o6l3AMeMinLI7PpQvbeEeEzPXSPBB235l9th+mVb7k9uyt34jmPdQxbQtd
li5oeyLJO1PJLUWtEVWehJiIQ4ANJoSzS6pDdmTq4qWjvFdZVyW4M7Xu3xwveRVG
m8PlmprGz+BgGnQH2/UI7YNiaP+WvJ2TiCiVcnddd+fQoFnpsL/Mi5swpzES+VN6
9BEA3QiBQZJEHGGTDk2kSEPVbR4q5feGmnCB/lLR24LLcXdNkgXTexN3iwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEZkoFOFwGJoFQKRl+sVBkhdPW0cMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2JkNzY0
Ni1hZGQ5LTQ4NTktOWRlOS05Yzg0ODU0ODNkNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYmQ3NjQ2
LWFkZDktNDg1OS05ZGU5LTljODQ4NTQ4M2Q1OS8xL1JtU2dVNFhBWW1nVkFwR1g2
eFVHU0YwOWJSdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+rWMA0GCSqGSIb3DQEBCwUAA4IBAQAV/MhF
E3PmrLa2dQGVHE+lY9uk9j+7e5On4BmZNzNsWx9tgjZfqwmkMT72mTisjm+k8IKk
bjOmasqArBySKD7KjPGe4LsRysNrPNU4M/czQkR7kpID29C49QgWMrGsS9a22r+v
wUvf1zT5WCog1X9mngesYp89N2DOe18xeSQ5Dzl9DUhU/3aVGPBwNnHcGpNgZMl3
ImD44Cz54BPq4nGKMqYpWx39iUt4LT9GhzduTY32BBUtIjWj0PLCEq0QcTh15Gkp
RFHxJEmL2DncCGx33YFCm/I8uRXnvS08s0B8LPfC0AS+WVF9Qxvm7r4COPFSOsKS
rkPiNpZXaKgbWQt6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:57 2025 by rpki-client on console.sobornost.net