Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
File: c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer (raw, json)
Hash identifier: 3O6zfZm2H7qqaeZUkvbe0uhFN6Bl4W8U1cseGDTqXqM=
Subject key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9E70EC795E0B7717B39493A47B2D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216364
IP: 116.214.120.0 -- 116.214.122.255
IP: 116.214.124.0/24
IP: 2001:3300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e7:0e:c7:95:e0:b7:71:7b:39:49:3a:47:b2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:a9:78:4f:aa:96:f7:17:ff:e2:d4:30:de:
1f:90:72:4d:42:1e:92:25:77:6e:a7:3b:b8:21:47:
45:a6:aa:9c:e6:63:86:2e:4b:56:98:40:13:06:81:
dc:01:07:e7:d1:78:66:39:cf:96:11:d2:ac:25:8c:
6e:c4:dc:62:eb:f8:2f:e0:fb:96:48:09:c6:32:d5:
55:a1:7d:7e:58:44:48:6e:38:e3:8b:7c:8d:3c:20:
2e:21:02:6f:ab:91:08:84:27:90:37:1f:12:1c:a1:
82:da:38:f1:41:aa:91:ce:f7:12:98:29:c8:c7:4f:
8a:00:e9:95:78:71:1d:60:22:60:5e:af:d7:20:75:
4b:aa:14:2b:75:a9:66:36:59:05:f9:0f:58:61:34:
45:26:26:9a:b2:69:f8:14:6b:81:da:5f:ac:ac:56:
3c:1f:b7:23:e3:fe:01:37:27:4f:6a:69:ff:b4:dc:
37:0d:b8:de:1d:e6:e1:70:e4:f8:f2:80:40:6e:d6:
18:5f:73:fe:91:dc:eb:96:f2:c9:9e:b9:9d:b3:f6:
3e:25:62:f5:db:ab:4a:ab:07:37:47:10:bd:14:96:
4f:a2:68:74:84:06:fd:e5:11:0f:0c:e7:b1:f3:bd:
98:9d:72:ad:93:eb:7a:a6:c4:4e:6b:e8:1a:c3:76:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.214.120.0-116.214.122.255
116.214.124.0/24
IPv6:
2001:3300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216364
Signature Algorithm: sha256WithRSAEncryption
51:88:4b:08:0d:cb:f8:eb:16:89:9b:64:1d:a3:04:cb:7b:05:
4e:dd:d4:cf:d1:e4:aa:bc:9a:0d:dd:ed:8d:82:8e:9b:8c:48:
f6:bf:c4:d9:9d:2c:5f:01:07:97:21:a1:be:87:8a:03:a3:62:
22:70:71:19:3b:bc:fa:39:b0:1c:9f:2c:fc:05:e9:1d:3c:63:
59:73:df:80:ee:f9:f9:da:76:62:ff:e0:9a:d6:20:55:5c:1d:
6a:83:59:e3:b8:a3:f7:cd:07:4d:d4:69:d6:59:0d:e5:c2:37:
29:d6:8f:e1:83:2e:0e:92:15:3d:e5:6e:cc:a3:ba:97:fa:85:
36:51:61:01:a4:9c:07:9f:0d:c4:4b:7c:21:79:c0:0b:24:d5:
86:7c:d8:0a:b2:6b:b3:d1:ee:d5:f7:d1:7d:e7:2b:e9:53:39:
31:31:f8:8f:72:dc:aa:2b:62:95:4e:95:15:04:71:da:8d:b2:
e0:53:0d:ba:1b:3b:6c:44:9e:d5:7e:8a:00:12:1c:03:d7:6d:
6c:f4:75:44:f3:9c:97:56:e7:59:d8:b8:b5:ca:89:44:26:da:
15:da:a4:90:a3:b5:bd:9d:01:bd:60:7a:94:82:15:be:e3:9f:
ab:67:cd:ac:02:46:5c:d1:f7:05:66:fa:55:79:7a:62:03:e6:
dd:95:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net