
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2Pkf8hQrMj_2gbj2iOkpETC1vw.cer
File: d2Pkf8hQrMj_2gbj2iOkpETC1vw.cer (raw, json)
Hash identifier: tldWk0sjykyrsmreH0s57AwrQYs81vmyjQlqK2rDkAI=
Subject key identifier: 77:63:E4:7F:C8:50:AC:C8:FF:DA:06:E3:DA:23:A4:A4:44:C2:D6:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C3F8D9D70B571C972CC9C4DBFB826
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210836
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3f:8d:9d:70:b5:71:c9:72:cc:9c:4d:bf:b8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7763e47fc850acc8ffda06e3da23a4a444c2d6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:5f:f4:6b:b1:98:b1:ff:58:cc:60:2e:65:
41:35:d7:f1:a2:0a:f9:83:0d:b7:18:a6:de:0d:60:
ce:7f:64:28:fc:17:46:29:cf:a7:a3:c1:8a:a2:00:
6e:df:ab:3b:eb:cf:b2:ee:97:34:33:89:0b:73:fa:
08:cf:94:8f:22:85:c1:d9:5c:44:4d:5d:a9:b5:58:
42:80:5f:46:b7:c0:4d:b0:9c:27:35:e4:ce:bf:be:
87:a7:a5:80:5c:c1:00:ab:b2:58:d3:c0:ff:a2:bb:
55:10:ec:32:95:6c:5f:60:11:e0:34:ee:de:79:d0:
52:83:19:08:2a:de:80:c0:9e:0c:09:48:21:d4:6a:
0d:56:eb:1f:e1:c2:9c:8f:31:36:2b:41:8c:a1:69:
5c:3a:f8:f0:7c:1c:3e:c5:ec:61:b9:63:fd:2b:d2:
d6:42:70:77:49:6d:69:b9:35:6d:d9:a4:cb:26:bb:
3c:01:49:11:a4:4a:52:c8:00:5c:5e:95:3b:0a:b8:
d9:c3:de:78:c9:c4:72:08:5f:9c:3b:70:8f:14:c5:
0b:31:c7:11:79:87:5c:20:02:7e:13:e8:29:43:a4:
3f:c1:3f:aa:c4:7c:f5:ac:60:b8:df:fb:d0:4b:68:
dc:14:cf:8c:44:f2:7c:b2:fd:c9:3e:6e:9e:82:70:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:E4:7F:C8:50:AC:C8:FF:DA:06:E3:DA:23:A4:A4:44:C2:D6:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/aabb5f-72f2-4928-92a9-2ff9d42ee213/1/d2Pkf8hQrMj_2gbj2iOkpETC1vw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210836
Signature Algorithm: sha256WithRSAEncryption
48:a2:9a:ad:58:46:e0:09:d9:81:41:d3:f6:b4:18:bf:76:b8:
e8:d2:25:96:c2:b8:69:36:0d:bc:82:57:9f:87:3d:8c:46:50:
2b:c9:c9:18:8e:29:dc:96:bc:6b:57:b3:e7:f1:fb:e7:84:19:
89:54:7f:98:11:4b:b4:26:95:18:7a:f6:bd:18:f6:52:e3:ea:
53:63:d5:d9:50:b8:9f:7c:fc:1a:8d:b9:35:d1:64:91:69:ac:
31:3b:08:41:e4:b6:14:d4:96:b5:c2:14:66:6f:fe:83:d5:4d:
9f:1c:6d:77:59:6c:b1:b7:1b:88:3a:32:ad:5a:65:5f:81:f8:
a2:2c:1e:12:e4:4d:81:ec:c2:69:6e:4f:2e:c7:58:26:b7:73:
c4:2c:6d:60:06:b4:02:3a:51:d7:ca:f5:1f:bf:f6:a5:41:30:
fb:a3:27:91:cb:7c:54:5e:cd:97:e0:9f:5c:16:a0:3f:8b:82:
84:79:c1:c4:a7:6c:d2:b5:ac:5d:a3:30:ee:fd:a1:29:54:ab:
83:43:5a:bf:13:b6:0c:12:8c:23:aa:df:85:28:08:b6:f5:07:
e7:f6:be:8d:ae:8f:61:cd:c4:77:24:9c:6f:aa:5e:6b:b1:74:
6d:29:15:f2:31:57:41:dc:28:d0:40:a1:4d:bc:60:29:45:b9:
b9:45:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net