Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
File: _XBhwg1PCXYTrAMTI3pt8rsstdw.cer (raw, json)
Hash identifier: fqJWfrZbK3+xTUQFgNUdpJzyDDfriI+iUFcKIEjEKCE=
Subject key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01953DC43D0C76C64050B73B6CE05BDF4831
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 25 Feb 2025 15:40:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51057
IP: 109.235.232.0/21
IP: 192.145.76.0/22
IP: 2a0c:600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:c4:3d:0c:76:c6:40:50:b7:3b:6c:e0:5b:df:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 25 15:40:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:d6:6d:d6:9a:e8:2a:26:9b:b6:8e:3b:a6:
c6:4c:6b:51:1f:6f:20:ca:95:8f:58:9a:e4:08:c3:
5e:2e:f1:bc:38:7e:92:fa:2a:48:45:e7:32:56:be:
63:d2:8a:89:7e:e9:de:5d:a0:33:33:79:08:e0:85:
0c:e1:a5:a4:ed:33:73:03:3e:52:41:9e:0a:c5:6e:
6a:11:72:1b:b8:c4:0b:ab:3d:71:b6:0e:54:80:96:
f6:a0:1f:0d:7a:d2:4c:20:0a:1d:01:36:df:2f:90:
0e:b1:56:fc:ad:7b:32:2f:4f:b1:e9:6c:d9:4e:64:
38:3e:55:99:bc:f2:48:20:5b:c9:58:0d:e1:76:e8:
56:3e:59:60:df:fa:45:53:08:ef:c3:f3:b1:af:dd:
64:b4:0a:db:ee:f6:d0:bf:ba:93:0f:0a:6d:62:5d:
f9:cc:7e:4a:8b:51:37:d2:8a:f7:cc:00:9f:db:ee:
e3:e7:1d:ea:b9:08:5a:b9:18:21:b5:7a:77:fa:4d:
d7:40:e9:85:ab:8d:5e:8e:93:05:20:77:62:c9:1b:
06:19:78:6d:c6:30:7e:e9:17:c7:90:47:fc:a5:6e:
c8:de:af:1e:48:f8:83:7b:2f:d2:4f:95:03:cd:aa:
27:a0:23:18:f8:9c:c4:58:fe:8a:be:24:8d:2d:63:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.232.0/21
192.145.76.0/22
IPv6:
2a0c:600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51057
Signature Algorithm: sha256WithRSAEncryption
88:c4:db:2d:d5:c0:4d:c3:6f:91:9b:75:50:9d:d7:d3:02:2c:
f5:b2:4c:13:6f:52:40:54:96:57:6f:6c:9d:d9:2f:74:cc:4e:
f6:e0:a1:a3:cf:4e:69:eb:3b:a2:62:72:ca:10:71:31:8b:fb:
de:bf:e5:c9:25:32:25:bc:b3:08:82:c7:ac:f5:67:95:18:45:
44:3e:24:69:f1:0c:f3:6f:8c:b8:8f:a6:f4:1c:a4:22:5c:07:
7f:07:86:2d:00:ef:bb:37:fc:b0:b4:90:cb:0d:7e:d4:e4:f7:
d3:95:88:f0:77:10:0e:45:d8:d5:35:7d:91:ea:ba:d1:c6:1c:
40:4c:34:de:fc:50:c5:80:2f:4e:c3:c6:b0:cb:0e:36:72:39:
ba:38:00:21:f4:cc:f5:5d:e3:f5:bb:14:2a:7f:23:83:02:60:
ba:6e:8e:94:6c:f6:9a:05:fc:cc:31:d3:6e:b0:c3:03:46:54:
35:27:f9:de:50:e0:22:22:27:28:76:bf:5c:de:0c:99:fd:de:
d6:7c:09:e7:5c:57:09:38:ad:d3:dd:b6:e0:fe:6a:22:ec:56:
eb:cf:90:d1:3e:c7:cc:f0:3d:f1:ba:8b:53:91:4c:b3:6a:dd:
2f:ca:09:ec:71:c5:b7:6d:5b:da:1e:a0:e8:08:68:ed:27:b9:
ad:45:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:18 2025 by rpki-client on console.sobornost.net