Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.cer (raw, json)
Hash identifier: UuiDL5V43EtetW2sy7PqYvu9kM5kTl+564MivcjwQsU=
Subject key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A52DB0E3EFD33DB24AEC22014507A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50557
IP: 193.105.110.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:52:db:0e:3e:fd:33:db:24:ae:c2:20:14:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:49:74:2d:a3:57:e7:eb:7d:ca:48:61:b9:
d3:b8:89:9d:62:5c:af:ba:9f:51:1d:91:a6:e7:ca:
f8:54:53:ff:33:85:7d:33:c6:80:bc:86:f1:23:07:
f2:29:26:9a:89:3e:e5:73:8d:40:d8:9c:36:91:26:
0e:39:f7:09:c2:3b:ea:31:b2:1d:de:3a:fe:f6:ca:
83:e7:e0:99:95:ee:23:f9:be:a9:e1:f4:85:27:d3:
01:e0:d1:f3:01:fd:e6:ad:56:97:b6:76:51:b7:fd:
b1:72:2f:d1:fc:83:a0:91:e1:b6:f9:c4:5e:85:de:
d5:61:f3:e0:b1:9e:95:b9:69:b2:dc:28:9e:c0:ef:
81:95:97:c1:20:6d:b7:6c:d7:7a:c2:35:84:8f:51:
5b:5c:16:10:c9:31:23:c1:0a:c3:b5:7e:ab:b8:6e:
8e:b5:2a:06:c6:08:2e:4f:31:ac:97:1e:7d:8c:4d:
29:22:a9:3c:a5:71:5e:75:c1:51:b9:6b:a5:2c:8b:
00:cd:b9:91:cd:ad:77:73:5f:3d:99:b3:51:13:1d:
40:0b:71:2b:9b:4d:29:c6:dc:ec:13:c8:7f:0a:34:
f0:c2:88:b1:b3:63:2c:9a:07:d1:63:0d:8c:e8:28:
0f:21:11:dc:b9:45:3d:af:b6:4a:32:58:fe:af:71:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.110.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50557
Signature Algorithm: sha256WithRSAEncryption
3b:c6:30:86:05:3c:79:03:57:6f:6a:9a:b9:29:3e:f5:89:c6:
95:52:9d:10:6c:2e:24:a6:ff:37:c7:b8:e9:d8:a9:b2:cc:64:
06:a3:3c:cc:07:fe:2d:cf:68:bc:cc:e1:99:cd:ae:eb:9a:37:
41:54:6c:a3:55:1a:d1:3e:ee:28:24:d4:7c:18:82:36:4e:a4:
3e:0f:0b:63:8e:5d:4d:39:cf:42:b9:15:0f:08:8d:1f:f7:d1:
b6:2b:5d:c0:be:93:1f:33:e6:31:ad:3b:e7:d5:16:9a:e7:9b:
15:b1:00:88:40:f8:b7:49:bf:9a:b6:9f:5a:35:32:9d:e9:79:
d0:a2:b7:49:27:82:fd:f4:d3:cc:5a:f6:5d:09:dc:db:71:77:
64:2f:5d:89:2f:8d:d4:24:7d:02:1a:e3:36:e4:f7:fa:da:b9:
59:11:99:94:9c:22:ab:6e:04:60:5e:2d:5f:20:a3:dc:0a:73:
df:1b:cc:6c:f4:c5:fc:da:93:53:23:8f:7f:34:6a:81:86:27:
aa:d7:9e:4d:a3:ee:6d:c7:4f:b0:62:f5:5e:04:a7:49:34:52:
07:4a:d9:33:48:a2:fc:5f:a0:f8:92:14:09:cb:ee:6b:e3:75:
1e:d1:67:a5:12:06:5f:39:93:4f:a1:de:92:30:0e:7b:73:d4:
1a:ec:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:21 2025 by rpki-client on console.sobornost.net