Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
File: d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer (raw, json)
Hash identifier: ynfbO8IsBauZoC6fU8zbmRfL9I1dPwUyBZtt/C7wVWA=
Subject key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D63B9338BAC09586CB16056C8B9FCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213141
IP: 193.254.64.0/18
IP: 212.0.0.0/18
IP: 2a02:adc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3b:93:38:ba:c0:95:86:cb:16:05:6c:8b:9f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:b0:4d:1a:27:49:12:d1:74:de:34:b0:9c:
4e:de:58:71:f7:02:a5:94:69:70:b5:f5:5d:5f:4f:
af:15:b7:f2:ab:ee:dc:07:38:df:67:29:e4:de:f9:
d9:63:a7:e4:2b:7f:44:73:1d:2f:26:11:62:ba:91:
cb:0d:9e:c7:a8:00:da:48:04:6d:79:a3:78:c9:05:
3e:59:75:ae:58:27:a9:73:c7:ab:88:2a:1e:8a:e7:
20:a1:e4:e4:9b:9d:ef:cd:82:34:b0:8e:82:fa:e1:
9f:62:61:21:5c:89:b8:2a:0c:23:00:e2:8a:60:40:
a1:ea:16:2c:c4:42:67:59:5e:c4:a8:51:ab:44:44:
aa:97:cb:38:13:6a:6c:9f:a5:7c:c4:1c:e4:18:ff:
0b:38:6a:2c:40:91:1a:7e:28:3d:39:8c:68:3f:65:
fc:87:90:51:b0:dc:23:6e:9a:2d:76:65:89:e2:bd:
41:22:6f:b5:5f:9b:1a:61:fc:80:6e:44:77:c5:27:
dc:42:8a:dd:48:03:76:b5:e5:c3:16:48:14:30:ce:
5e:94:c0:81:32:04:4f:91:fd:de:d9:25:84:52:eb:
27:e0:ab:17:19:cb:ef:08:7d:7d:9b:c5:93:14:02:
9f:96:50:73:b2:2f:a9:19:0b:6c:5b:b1:ea:30:f2:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.64.0/18
212.0.0.0/18
IPv6:
2a02:adc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213141
Signature Algorithm: sha256WithRSAEncryption
5f:99:65:05:be:91:7e:e3:bb:7a:78:72:b4:22:be:06:8e:77:
b6:cf:d7:b9:8a:15:7f:58:51:4b:c5:25:69:9e:d3:bd:5b:f3:
46:50:fc:c5:ff:6e:a6:5f:d5:72:e7:21:37:4d:6d:3c:f8:a6:
b4:96:64:a4:5a:59:7d:6d:9a:55:60:8a:e0:5e:39:29:c6:b4:
ee:d4:e6:46:64:98:23:2f:79:35:69:ec:fe:ca:76:02:4f:f3:
e5:96:20:a9:33:5c:31:38:5d:7b:7e:c1:48:2f:58:8d:1f:5b:
01:97:ff:7c:64:03:0d:bb:81:63:38:17:a6:49:4d:52:3d:f1:
e9:e1:b3:58:fd:5c:aa:f8:b2:bf:8b:6a:40:0a:99:c3:65:e6:
b0:8c:68:05:5a:e7:da:e0:38:22:2e:e4:6a:57:c1:58:6a:61:
51:f4:f3:29:fd:01:25:1e:22:f4:49:3c:c7:df:e0:4e:78:04:
0e:fb:4f:65:f4:85:08:ed:60:35:4c:69:67:89:66:3b:2f:45:
f4:f7:48:33:df:7a:d3:56:d7:5b:23:34:55:09:73:47:34:22:
9a:b4:7b:b3:a2:c6:b0:a5:4c:b1:27:c8:7b:3c:85:97:d8:57:
89:05:42:b9:b2:7b:bd:a2:bf:5f:11:69:99:57:23:ae:8c:f2:
6e:3e:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:20 2025 by rpki-client on console.sobornost.net