Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
File: YPclN-3x3At_aURTRQvKSu74P2Q.cer (raw, json)
Hash identifier: DYwzF+fD0RSAruXzlbVcZ/T8Ez8zVi7ItuAC3qFcZC4=
Subject key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F5FD63FD514AA0AF51905BB43DA0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213048
IP: 83.136.220.0/24
IP: 176.113.112.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5f:d6:3f:d5:14:aa:0a:f5:19:05:bb:43:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:bb:07:ec:1d:3f:e8:cf:c2:54:5f:13:14:
c0:4a:43:3e:14:eb:34:11:a4:5a:a2:f1:cc:fc:26:
3f:e3:67:9b:ae:9d:c6:b9:a4:10:25:49:3a:f7:a5:
9e:99:66:58:4d:38:7a:bc:25:0d:92:ba:47:5b:1f:
44:f2:d3:62:a9:63:bd:c6:3f:9e:a7:a7:d3:2d:86:
f0:3e:fd:ec:23:cd:91:d5:0c:e9:a3:8b:e6:a9:0b:
87:48:6a:95:d8:e1:b1:a1:6c:ea:7f:27:08:a9:cf:
90:43:2b:58:c5:8c:85:da:19:20:bf:ae:ae:0d:59:
c8:ee:14:05:2f:9d:db:6a:5d:ed:0b:3e:6d:56:74:
ff:29:b1:fc:ee:8c:8d:3a:8c:ca:fe:d6:44:be:bf:
c8:5b:84:2b:8e:9b:13:b1:5d:cc:8b:a4:96:21:02:
be:55:c9:5c:a8:09:9d:e7:c9:32:09:e1:93:e9:8c:
08:86:7b:2f:cc:b5:47:87:2e:d6:79:5b:0a:ae:1a:
71:ef:99:ea:6a:78:83:c2:73:99:a0:b1:17:bf:56:
81:f6:2d:ff:df:3d:45:0b:d3:ff:2d:12:88:b2:a9:
12:32:11:1e:02:f3:5a:23:f6:c0:56:d3:b3:ac:e3:
90:9b:f4:4a:82:d0:4c:38:cc:82:8b:45:ff:56:b0:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.220.0/24
176.113.112.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213048
Signature Algorithm: sha256WithRSAEncryption
ab:9e:50:56:c9:00:9f:11:14:d5:5a:ee:78:f9:fe:aa:18:3f:
db:6b:7e:8b:9e:97:1e:32:fe:e8:86:c7:de:c0:f4:03:e3:4a:
be:1a:69:f8:b4:81:99:89:59:92:e9:ac:6b:ae:0f:c2:fa:0c:
6c:4e:19:67:59:70:d6:4a:b0:31:43:74:8b:2e:4b:84:6b:94:
1f:79:2e:7f:46:71:95:61:6f:37:8a:c0:d2:98:0f:3f:0b:8e:
26:a9:2f:de:55:e9:71:33:f5:27:6d:13:78:ce:46:7f:c5:77:
4f:17:9c:59:16:c6:56:7b:b4:6a:96:6b:a2:46:00:5a:e6:7c:
46:17:d3:06:9a:09:d2:ed:43:7b:c0:c2:3c:78:50:2e:b5:4e:
36:52:ff:07:2d:9f:74:a1:c6:2f:64:37:63:fd:65:01:44:d3:
cd:2f:81:cb:af:64:ff:62:01:33:fc:8e:df:e9:6e:75:83:23:
8e:21:11:d8:cf:1e:87:db:1d:36:6a:be:a5:4d:bb:2c:ec:15:
53:47:20:58:d5:3d:b1:a0:ce:ff:0d:ce:3a:bc:ab:25:d6:23:
ec:1e:c8:a5:ad:7a:f0:b8:c1:b1:6c:3a:3e:b8:30:f3:4f:a6:
2d:0d:bc:8c:51:56:68:2d:10:4c:fc:ac:35:20:d7:01:4c:f4:
9a:1e:27:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:13 2025 by rpki-client on console.sobornost.net