Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer (raw, json)
Hash identifier: mm6clvhkdvdE8h8zVssUUvC9vJd4PlD4qP/0hHMr3pM=
Subject key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA3FB7E24EFF8AAD123ED6D2476382
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8476
IP: 193.194.158.0/24
IP: 195.234.162.0/24
IP: 204.13.56.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3f:b7:e2:4e:ff:8a:ad:12:3e:d6:d2:47:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:34:e7:54:c5:e2:24:48:84:db:04:96:3b:
62:e3:87:66:f2:b8:02:c7:05:a1:d3:df:de:82:db:
4b:3c:a5:08:30:b3:6b:ec:cd:70:cb:be:7f:8c:70:
1c:13:09:a5:a9:70:6e:86:2c:55:40:6b:ad:ff:9c:
32:ae:3c:7a:57:6e:db:f5:8f:28:3d:c7:fa:d0:8d:
3d:7d:d7:b8:00:9f:c0:0a:34:ce:f2:9d:4b:6e:d4:
37:5f:7b:36:0c:ac:f1:ba:5b:b0:1f:1e:69:43:3d:
2b:f5:c2:be:c3:3c:d1:82:f2:02:aa:2a:4e:1b:1c:
65:90:73:f4:1b:7b:06:13:7c:21:0b:96:1d:21:20:
f8:f4:85:ab:2c:fc:2b:d5:1d:2b:c2:26:91:a4:27:
b6:22:15:07:64:be:da:da:c6:27:c8:a4:bb:d8:2e:
7c:bf:96:22:0b:23:83:d4:12:ac:82:5f:25:b4:71:
7f:8f:e5:1b:e5:0a:35:95:02:c4:e3:83:d0:2e:61:
ec:26:fa:83:e6:86:ae:56:4c:ae:3a:61:4d:8d:a5:
81:f9:71:c8:18:ed:59:66:9a:c3:28:82:28:70:2d:
e1:b9:b5:52:8e:4f:b0:36:2d:b6:e6:29:fc:e2:7c:
06:b4:af:51:bc:11:5f:6c:f3:ba:56:f4:fd:82:ff:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.158.0/24
195.234.162.0/24
204.13.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8476
Signature Algorithm: sha256WithRSAEncryption
80:50:e9:a4:ce:76:50:1a:a1:44:d0:9b:4e:e7:12:16:74:46:
9e:c7:1c:f3:c0:17:2c:da:16:ac:e8:4b:f1:3c:59:25:d2:0b:
24:6d:f7:79:f7:42:7e:38:d6:75:85:91:46:76:cb:a4:d0:aa:
40:40:5c:8a:6f:59:bd:e1:f5:9a:55:f3:50:01:00:82:27:02:
cf:6c:da:69:c7:a0:12:5a:da:14:eb:d7:25:c7:8a:c5:c8:af:
85:22:49:45:ff:99:e3:18:92:a6:32:7c:ad:fb:17:30:f7:e9:
f0:cc:a6:73:ed:d5:3e:b0:74:65:cc:f9:0c:f9:00:7a:fa:cc:
a0:fc:c6:35:7b:15:1e:05:72:c9:55:c1:4e:ee:40:1b:b6:38:
09:6c:d0:70:49:fc:2e:8a:30:26:3e:f1:65:1e:a9:73:02:e3:
b9:8e:38:7d:89:ea:e3:1c:73:d0:39:35:88:f2:75:ca:05:8f:
08:c7:9b:f4:68:0d:6a:12:49:80:90:dd:62:00:e4:fe:bb:78:
ce:ac:96:35:19:04:b0:5b:0e:6f:90:23:65:b2:91:ae:9e:73:
59:f8:14:63:e5:c8:15:d3:d0:19:6f:84:52:ec:92:74:5c:0c:
07:f6:46:c3:b2:07:bd:de:3b:61:4f:21:ff:e6:52:27:40:f8:
e1:50:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:59 2025 by rpki-client on console.sobornost.net