Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
File: T7EQS7paPx3dLe67o0gZGfT5YaQ.cer (raw, json)
Hash identifier: 9gIqUCdm8BHBKAKL2bKwxCH8QkKRJZgMMA48S/NmXSo=
Subject key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424454D26C4C9D701BBF003EFB2B2BB0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35343
IP: 193.47.136.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4d:26:c4:c9:d7:01:bb:f0:03:ef:b2:b2:bb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:0d:27:0b:a3:66:2b:96:c1:f1:da:1e:ee:
da:78:20:6b:a6:6b:7a:fc:47:b0:f3:d1:13:89:2a:
21:f8:87:65:d8:fe:a8:a5:4e:51:81:1d:4c:9f:cc:
b7:3a:dc:07:e3:21:ff:5c:10:be:44:3a:ff:f4:ff:
94:5d:ee:00:44:b1:7d:77:9e:63:ba:4f:b7:a8:4b:
d6:23:4f:11:57:55:b9:fd:a0:69:2f:ba:b1:dd:75:
23:5d:6c:90:95:3c:68:2d:ee:b9:21:e5:f6:fc:37:
c1:1d:b1:cf:1a:c3:e0:a6:8d:82:61:da:65:47:be:
be:3d:38:5c:0f:16:a3:3e:31:f2:aa:11:6b:9a:6b:
8c:64:dc:8e:15:84:1a:e8:37:a2:43:13:7f:73:e2:
64:50:fa:f4:9e:91:70:52:a1:9a:75:22:db:44:69:
10:b0:c1:30:6d:49:39:07:d2:31:c7:9e:68:fc:6b:
8f:ca:d9:8f:85:ac:16:17:a3:6c:9c:8c:90:fa:e2:
d3:c7:60:b3:fa:53:99:ff:32:5d:fc:e1:27:54:4e:
25:69:4e:a2:82:22:a1:23:3b:a3:aa:8a:71:9e:c8:
66:2c:21:41:f9:57:71:ae:63:e6:c8:f1:ba:02:b2:
ba:2f:74:5c:72:13:b8:7b:64:9d:bc:93:ae:aa:0a:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.136.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35343
Signature Algorithm: sha256WithRSAEncryption
12:66:4a:f6:c4:39:3e:98:e8:fa:e0:7e:be:5c:62:61:11:5f:
97:87:79:fd:3d:82:de:7b:8f:0a:f6:7f:7e:df:5c:05:d3:b5:
65:7e:58:0b:74:a5:20:6f:39:dd:90:f8:25:64:9f:16:9b:49:
22:36:5d:c8:68:f8:eb:5d:68:fc:67:ce:03:2f:d1:d6:4f:88:
f0:1f:c7:7e:22:a3:01:a0:2b:c2:da:bc:d9:76:fa:2c:54:ef:
be:f8:7e:ff:65:ea:ba:12:a9:0b:0f:c0:ee:87:31:4b:13:9b:
fd:32:f5:72:91:b0:ec:20:1c:f2:1d:25:c3:43:64:f2:5d:63:
6e:09:3c:15:47:e7:33:f0:74:1a:c1:1d:6b:91:8b:fb:22:80:
4c:70:21:92:32:12:78:78:28:42:8d:c6:4b:7e:28:03:e1:16:
bc:80:ef:55:43:b8:4f:0f:45:84:61:cb:d9:5c:23:12:93:ec:
fd:55:88:f0:79:0f:e7:23:64:6f:d5:5f:bc:4e:bf:41:3c:51:
b4:c2:da:dd:a4:d2:67:df:5d:d5:48:7f:a7:d8:37:b8:93:2d:
f8:e0:34:be:5b:15:1b:ed:18:30:8c:e3:42:1a:86:44:ee:fb:
3d:31:78:3d:38:d0:b8:c6:00:9f:8a:c6:0a:b1:99:79:5e:8b:
3c:27:72:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:01 2025 by rpki-client on console.sobornost.net