Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.cer (raw, json)
Hash identifier: 6IMOSgnhqDfREv0wkl6gdVKsCLSnktsjZYEnnN4nt7c=
Subject key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422203B3F3298BC40A2F62D989DFD7058
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206294
IP: 145.22.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3b:3f:32:98:bc:40:a2:f6:2d:98:9d:fd:70:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:4e:cc:07:6b:87:0a:2d:af:ad:49:ec:7b:
26:a5:c5:00:cc:6b:09:88:93:64:cb:97:78:71:d9:
df:af:db:90:bb:a7:97:b3:72:60:f3:b6:21:0f:f7:
c1:70:90:d6:c1:f0:6e:4c:ba:ee:62:43:c6:14:30:
c2:4e:90:70:f5:ee:d0:a8:5c:8c:e3:de:97:af:50:
7a:b4:43:43:b9:67:73:e7:8f:e4:7c:d4:29:c1:69:
01:e7:e1:f1:87:47:87:1d:49:1f:87:90:19:67:3e:
cb:a3:bb:05:ba:24:14:8f:ad:e1:83:1e:50:cb:16:
ab:f4:b2:f6:2d:aa:d7:81:1e:c9:85:a7:ac:a7:c1:
b6:08:73:17:52:7b:a9:e4:96:c6:5b:ed:9b:3e:09:
a4:c5:48:ae:62:c1:50:c7:df:3b:7f:45:d3:c5:ec:
98:f1:39:1f:78:27:b1:09:20:6d:34:2a:dd:e4:ce:
6b:73:c8:42:3d:44:d2:50:6e:cf:f5:5f:ca:a7:95:
d0:56:62:39:33:e3:cd:b3:f1:18:b1:f6:cf:02:4c:
0b:84:94:05:d0:53:2a:27:e4:c1:6e:1b:00:0b:34:
a2:4e:f6:b1:b9:41:3c:b8:c1:4b:9e:f1:59:18:56:
ea:0b:07:04:bd:f2:a4:36:cf:af:46:4b:6f:d7:9a:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.22.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206294
Signature Algorithm: sha256WithRSAEncryption
54:e6:1a:9a:5a:23:70:2e:c9:2b:ec:85:92:90:d4:61:bc:34:
23:f3:da:be:ec:81:fe:5a:dd:a4:e3:06:15:89:1e:2b:17:43:
81:e9:32:41:cc:4e:5a:dc:24:ea:cf:a9:70:c2:4a:42:bc:3c:
97:a8:f0:2d:24:bf:32:4b:52:6f:65:87:db:4b:1d:e1:2a:97:
49:bb:a1:1e:31:8a:11:d4:c5:79:39:a8:63:b4:18:9a:8e:29:
70:12:19:3a:70:e5:bf:8f:76:f0:c0:e8:89:60:a5:84:c2:04:
b6:7f:86:68:b5:db:38:49:e8:53:b5:3e:98:3a:fb:e5:c3:4f:
39:a2:92:b2:78:cd:3b:3d:c5:d4:72:2d:55:b7:5a:ec:9f:ac:
23:ad:88:51:ec:b7:e4:77:98:24:0b:22:e3:87:d7:4c:73:5b:
21:b3:1b:12:e7:4f:92:03:68:d1:c5:2e:39:c9:d4:3a:ea:fe:
bc:1b:01:71:bf:b2:ea:5a:c7:86:e4:f2:d1:09:fc:3c:1a:76:
0d:47:6d:6a:d6:a2:08:ef:1c:a5:7d:31:4a:03:23:d2:8a:0b:
7f:cf:26:56:b5:36:bd:7b:c5:80:83:f6:44:f2:9a:cc:40:e3:
78:1a:77:e3:a8:bf:6e:e6:ec:91:91:2e:70:13:e1:c2:44:40:
c3:e6:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:20 2025 by rpki-client on console.sobornost.net