Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.cer (raw, json)
Hash identifier: 6lOhJD7RxzGfT1C3IJWLD57TgRo5WP9UraEGseNKk4c=
Subject key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9B55D67FF52D3A14531DF31F78DC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197287
IP: 78.31.176.0/24
IP: 178.213.104.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b5:5d:67:ff:52:d3:a1:45:31:df:31:f7:8d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:9c:88:23:6d:0c:8b:93:e6:53:1f:6e:6b:
09:f1:35:91:45:51:bb:a4:a2:c5:c7:c9:2f:43:db:
9e:bf:d2:1f:d7:59:cf:d0:8a:ab:26:dd:d7:16:ed:
fc:78:78:92:7a:43:ff:2b:f9:40:dd:79:54:8e:da:
ee:44:cc:e4:4b:d1:61:2e:70:1c:11:83:0c:ff:32:
79:6b:fd:01:42:5c:53:1e:96:6a:21:a0:35:6b:51:
e9:c8:0a:a3:d4:41:84:6f:84:96:c5:a2:9e:07:6b:
bf:fb:b2:75:df:a0:a1:86:6f:f5:f5:c4:1c:6a:f6:
c2:d3:ca:a2:0e:66:71:91:88:f7:59:5c:42:d1:3c:
7f:0e:7d:4e:5b:cc:11:23:85:39:07:42:9d:45:ad:
b5:f7:1a:3d:5a:8e:b8:fb:71:b8:1e:0e:3d:b8:0d:
77:34:cd:a7:ec:ae:ea:a6:46:e5:03:7b:4b:d7:c4:
f5:41:46:db:3f:7e:0f:45:5a:ad:6b:9e:90:2b:0b:
f4:7d:d2:ea:a6:30:7d:ae:47:95:bf:6d:b2:b6:5f:
e4:b6:d2:fa:ee:ab:35:f6:5b:f8:26:22:7e:b4:ca:
ce:a1:7d:57:68:4b:69:2e:f9:e3:cd:b1:06:1a:12:
20:67:ad:db:50:a2:bb:95:28:93:3d:dc:8a:82:01:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.176.0/24
178.213.104.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197287
Signature Algorithm: sha256WithRSAEncryption
8b:ee:9d:d2:42:c7:d5:60:69:93:9d:5b:29:84:b7:44:66:ec:
39:ee:85:97:0b:42:4a:61:52:4e:e8:6e:57:d0:e3:d1:f8:fd:
8a:57:df:ce:b6:3d:ff:21:0e:e4:92:91:b7:cf:bf:73:21:34:
aa:eb:a1:a3:6f:ef:85:9c:3a:66:a1:48:75:78:40:89:70:8a:
af:25:a2:ff:e1:20:ea:01:76:5f:5c:cf:e3:3e:41:b1:80:e4:
7d:90:48:53:d2:0c:2e:52:25:f7:03:15:84:23:ec:b8:96:cc:
7f:5f:cc:e5:a5:2f:bc:23:fe:8b:c3:de:ee:d0:33:dd:22:ec:
d5:3b:ed:28:6b:35:96:2c:82:60:5f:fa:53:68:a0:5f:98:dc:
e5:47:b0:79:e7:d4:31:d3:28:65:9a:68:9e:e2:ca:cc:13:34:
07:4a:50:66:c5:21:36:2e:38:99:60:97:36:e4:bc:bd:59:5f:
a6:ef:4d:8c:99:cc:93:51:47:a6:92:04:e7:b2:79:47:21:70:
16:1b:74:1c:c4:72:0f:2e:08:14:7d:e7:78:f3:29:59:d5:4e:
bc:2f:2e:94:67:b7:2e:f5:87:65:3a:44:15:8b:06:07:a6:49:
46:65:95:1e:70:0a:3f:1a:60:0c:6d:84:58:81:3b:c7:ed:8d:
12:8d:b8:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:16 2025 by rpki-client on console.sobornost.net