Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YmFlv7I92h-YcLJBf0lkhebAinQ.cer
File: YmFlv7I92h-YcLJBf0lkhebAinQ.cer (raw, json)
Hash identifier: zszKb/cZN5YGcQswzZCp9zDbBGazGCWnhyJJinfkJGw=
Subject key identifier: 62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6F03910AD282E183CBBC6EE000492
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202132
IP: 80.241.136.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f0:39:10:ad:28:2e:18:3c:bb:c6:ee:00:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=626165bfb23dda1f9870b2417f496485e6c08a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:6a:e1:32:e5:f3:31:2b:5f:66:60:61:87:
01:80:56:f1:2f:ac:d4:77:69:ec:36:87:39:2b:22:
5c:bf:26:a4:70:66:42:c3:e3:c1:2e:f9:33:60:c6:
f0:bb:17:d7:ff:e4:4d:85:40:80:7f:eb:d4:30:a2:
49:9f:05:a5:be:af:23:b8:b9:30:3e:62:e9:c5:ed:
4c:0e:69:2d:fa:89:68:50:ff:63:f7:21:dd:31:00:
1b:e5:8b:93:70:43:95:d1:39:03:ce:e8:3e:5b:df:
88:ed:42:1b:36:6e:c3:ac:f2:9e:7e:0b:2b:b0:79:
fc:ba:c5:9e:80:d5:a1:2f:52:d9:8d:c6:a6:6c:a2:
44:a0:3b:91:1b:f2:2e:f4:a0:25:57:1e:c7:7e:d2:
99:c3:16:67:ea:82:8d:18:2d:47:d8:de:53:6b:10:
de:e6:7a:e9:8b:16:c7:ec:95:f1:4c:5f:5f:5a:d1:
21:d1:84:4d:c0:38:2e:6a:db:80:a1:49:fc:20:d4:
04:02:59:3f:00:c1:8a:7e:a6:99:6b:5a:66:66:56:
db:51:6c:82:ba:2b:eb:91:19:f2:a3:20:9e:b2:f8:
50:c1:85:bd:25:4f:4b:01:c5:48:40:74:6b:d2:ea:
7b:87:93:91:bf:04:aa:55:7e:9d:86:25:de:e3:f4:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:61:65:BF:B2:3D:DA:1F:98:70:B2:41:7F:49:64:85:E6:C0:8A:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/72135d-e497-44a6-b4d0-460fb4bac2db/1/YmFlv7I92h-YcLJBf0lkhebAinQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202132
Signature Algorithm: sha256WithRSAEncryption
5d:17:a2:15:8a:07:62:eb:4f:47:2c:b5:3f:c8:39:89:61:b9:
f6:cf:c0:af:94:e5:01:aa:c1:25:1f:45:dc:35:46:1e:58:06:
58:a0:db:b0:9e:c8:b9:91:d3:b3:18:9a:ad:36:96:9c:84:73:
00:eb:6a:73:3b:d8:8d:f2:05:1f:0d:92:6c:12:e5:9e:2a:ee:
10:36:65:38:69:c7:0d:1e:85:4c:ef:62:d4:55:2d:9b:61:92:
47:65:02:db:20:f7:f4:00:3d:3e:37:68:31:04:79:df:a0:ed:
38:f0:a5:6f:ef:45:30:ae:1f:f6:b1:45:ee:b7:d7:0a:13:3c:
5b:1d:cc:d0:ac:13:1a:e3:b2:ae:4d:c3:76:1d:5b:e7:3d:19:
17:af:15:b7:68:97:7c:ff:9e:2a:0d:74:26:5e:56:4d:a0:bd:
97:fc:a2:e0:fb:e1:7f:77:2c:9a:48:d3:4a:53:d7:c3:7e:da:
83:5b:63:b6:93:a1:80:0d:84:ff:bb:5e:12:f1:31:5f:a4:fb:
e3:02:3b:a1:dd:51:86:c6:49:b7:ce:57:c8:a5:5f:2a:42:7e:
1f:73:09:6a:07:c2:ef:75:44:28:d5:df:83:4a:2d:db:36:c9:
20:a9:cb:18:29:ce:cb:44:7e:1b:53:0d:11:db:f1:f3:28:3b:
ae:f1:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:14 2025 by rpki-client on console.sobornost.net