
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer (raw, json)
Hash identifier: sUWKAc585buqS8bLGJ7pyRopoxeXQYC3FHMEy4mbXlE=
Subject key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAA398D734A834ED5903C76E4C3B6F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207086
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a3:98:d7:34:a8:34:ed:59:03:c7:6e:4c:3b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:7c:7d:64:32:98:01:0a:61:7b:58:73:a8:
d7:56:3d:a0:94:02:50:1d:6b:b5:1c:b8:ee:57:f6:
70:a8:79:53:b0:43:1c:4d:10:a7:16:3d:21:71:63:
86:78:74:ff:ee:ae:c0:df:f9:62:d3:12:16:91:fd:
5c:94:10:e2:1b:f7:2a:a3:92:d6:79:db:2c:14:2c:
e9:1a:db:51:87:8d:55:28:3a:b8:3b:42:97:3b:e9:
15:d4:6c:98:dd:14:1e:1b:07:cd:5f:20:ae:f0:c9:
8d:0e:d9:66:65:16:4a:8e:3b:bf:c3:ce:a7:a7:d3:
9a:4c:52:a0:00:a2:7c:2e:a9:0f:ab:a6:52:03:4c:
2c:88:2e:52:99:a2:2f:67:10:80:60:65:d5:79:16:
ee:1f:fe:10:8a:93:fc:e6:ff:f7:76:97:ca:11:82:
53:3c:31:4d:59:70:2e:a9:1e:2e:5f:e5:ef:09:86:
62:dc:23:8f:51:22:b8:46:5f:e3:3a:45:c6:fa:27:
78:2d:54:63:dd:d7:76:f9:e2:9a:4b:1f:aa:ad:67:
12:37:e3:7f:22:13:01:dc:55:0a:9b:27:f3:88:58:
50:7d:74:3f:63:cc:ed:d6:c7:eb:45:13:4f:15:c7:
3c:10:8c:3a:0d:b8:a4:85:99:33:80:c4:84:21:27:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207086
Signature Algorithm: sha256WithRSAEncryption
1a:f6:c2:39:99:c7:e8:9c:53:b5:9e:fb:fe:db:60:53:cb:8f:
80:f8:9f:df:a3:70:03:09:3a:85:d7:f4:a4:2e:58:e2:0a:b7:
c2:57:01:ca:da:3b:34:6d:b9:2d:bc:38:00:ca:21:03:53:39:
c4:f2:b3:bf:56:c3:64:9e:cc:b5:72:e3:26:1e:e2:31:b1:4c:
5b:7c:a6:a8:5d:20:a8:39:fa:c8:69:69:c7:ea:1a:17:18:ba:
f5:a2:de:0d:2f:a4:1e:dd:f4:dc:f3:9e:1a:58:c3:26:aa:e1:
98:a1:79:a1:57:7b:eb:37:39:83:da:99:4a:e9:7e:5b:c2:a9:
60:99:2a:62:b9:5b:05:98:00:73:8a:29:ec:e9:1a:16:e8:4f:
36:e9:30:e1:24:01:08:c8:f4:f7:31:27:4d:db:01:24:a8:9c:
6f:b0:70:da:8d:87:d4:21:ec:4f:7b:dc:04:0f:ea:e6:33:3c:
36:55:53:9d:8e:eb:8d:ec:b5:14:a0:5d:9c:28:2a:1d:a1:ef:
a3:ed:0a:57:70:67:87:e7:09:98:36:6e:a8:46:02:41:c7:30:
1a:c2:10:d5:4f:95:ed:25:e9:ae:07:34:26:9c:63:a6:3c:46:
6a:d6:4a:24:b2:c1:bd:69:c5:52:71:53:16:dd:af:c2:45:78:
19:47:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net