Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
File: Y3bCUtsJvoF7hypxepWe3KxEJms.cer (raw, json)
Hash identifier: aZoyeU/oXdT+bc5DevYreKteFGjHrnufVCln3UZQV+M=
Subject key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420680C3078D3032F4F2ACE46DB9D91D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200336
IP: 194.56.192.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0c:30:78:d3:03:2f:4f:2a:ce:46:db:9d:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6376c252db09be817b872a717a959edcac44266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:5b:89:e1:db:26:12:67:68:db:0c:4c:a2:
0a:f6:20:fc:be:cb:82:5a:b4:8b:ed:66:7b:8b:b9:
0f:ed:e4:0f:92:b8:bf:5e:d4:a9:a5:90:94:a6:00:
51:60:4f:48:ce:4f:48:f6:10:6c:6b:bb:1d:ca:c0:
d7:f5:b8:8e:2b:fd:48:b0:be:30:a3:7c:72:c4:76:
2d:26:4d:85:5c:53:80:c1:b3:62:0b:7f:67:46:a4:
69:e4:b6:d5:bc:30:41:0d:05:02:97:29:f0:cf:51:
93:57:83:15:1e:81:9e:34:15:bb:1f:13:50:e3:6a:
43:db:ca:ac:02:f8:84:aa:c5:5f:d3:02:33:4a:1a:
b2:1a:71:6c:02:6a:5c:6d:f2:e1:62:7e:d1:b1:38:
b9:fc:a2:cb:7f:eb:0d:b7:e5:1e:85:64:7f:88:f2:
cc:36:a3:e0:78:07:43:1b:bf:3f:82:d9:f1:90:f9:
92:07:c0:4b:79:12:10:13:7f:5a:20:59:64:59:e9:
50:a0:49:40:d5:cd:90:9e:f8:1e:29:b3:81:e5:28:
80:17:d2:bd:5a:23:4f:86:38:2c:08:54:19:0a:30:
02:01:b1:36:34:6d:21:fa:e8:ae:07:33:cc:78:20:
75:63:af:eb:45:e2:d6:1d:95:d1:60:78:95:e7:89:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.192.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200336
Signature Algorithm: sha256WithRSAEncryption
65:6f:4e:30:5b:57:c8:76:bd:28:52:19:28:37:80:5f:02:4c:
34:78:92:99:64:99:9b:c0:e6:2a:2e:9b:bc:b0:66:3a:0a:3e:
be:81:ea:7b:81:c8:66:68:38:ca:77:d1:38:7e:9b:45:93:ca:
6a:4e:a6:79:7c:c2:15:ed:0f:ed:b8:30:54:f7:df:99:e8:6a:
e8:39:6d:46:34:a7:88:d3:f8:2f:e9:db:ff:1c:aa:52:0d:cb:
79:5b:4a:d9:0c:ee:aa:73:3b:da:99:f8:fd:f3:ea:26:b2:69:
7e:61:00:27:e2:7a:e1:7d:e4:dc:f8:1c:3d:85:a3:a4:25:b6:
73:7c:4b:65:93:71:6e:f4:d6:a9:65:b8:f4:92:64:74:f2:15:
ad:b5:50:69:6c:85:70:96:22:ea:ac:ff:50:ed:e2:80:af:1f:
7a:13:65:0e:f1:13:0c:66:90:f0:39:57:47:70:dc:58:4d:ef:
ad:1e:80:25:ca:9f:6f:4f:2f:fc:71:07:cd:4b:77:4b:fa:59:
73:4b:60:7e:92:ef:e4:1e:6a:c2:f1:dc:9a:a8:81:4d:69:5b:
7d:c9:ed:82:9e:1f:73:13:db:40:d1:5c:8a:3a:54:84:00:54:
4d:77:10:e1:92:95:d9:79:30:d5:5d:1f:36:7b:ba:42:08:fc:
35:f8:8d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:13 2025 by rpki-client on console.sobornost.net