Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
File: knp_OqYbIkEYI14yAR7ey-P2pkk.cer (raw, json)
Hash identifier: Hqy5RrWBpUoWTnyar3HGFVzeGaxiyI84cAYktVCznnk=
Subject key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01951800FAE465CB47876B97948F3475A63A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 07:41:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12645
IP: 85.119.168.0/21
IP: 194.116.176.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:00:fa:e4:65:cb:47:87:6b:97:94:8f:34:75:a6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 07:41:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:fe:f7:29:7a:cc:0d:3e:eb:f7:35:33:f5:
6d:35:5b:ca:c6:bc:c0:4a:39:41:42:47:e5:f0:47:
dd:84:4a:f4:55:27:e5:35:ca:85:53:34:aa:dd:91:
c9:fd:48:14:5b:71:0a:4b:7f:13:2a:27:4c:94:2f:
f7:3b:e9:9f:ce:b6:b1:8d:0b:18:3a:4e:cc:e6:74:
e2:8f:01:aa:25:60:2d:74:9c:4a:96:9b:57:cc:04:
5f:d0:f5:27:d0:90:ad:32:63:c3:36:5f:9c:3e:99:
f6:b8:a7:6d:77:3e:a5:ac:71:8c:29:61:e9:4e:2c:
89:d8:6f:b9:b3:34:ed:48:ce:bc:6d:87:2e:aa:b6:
4e:ad:6f:c5:55:3c:e7:25:b2:6e:12:e8:a5:59:d9:
bd:b5:80:79:85:df:5c:36:0c:2f:83:6b:23:6a:2a:
ea:c8:9a:43:10:b2:85:3f:d5:92:9f:43:4a:34:c0:
80:af:02:1a:77:a5:a6:28:f4:b6:18:f7:fd:22:48:
e2:9f:2f:84:ab:23:03:f1:ac:9a:0e:77:be:14:10:
7e:0e:18:83:86:13:54:b8:28:0a:e1:93:fe:0e:84:
25:ba:16:f7:bf:21:ca:53:de:c1:3a:ff:06:c6:ce:
b0:81:d8:eb:0d:de:c0:33:45:04:b0:08:ef:ee:04:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.168.0/21
194.116.176.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12645
Signature Algorithm: sha256WithRSAEncryption
b1:d2:d8:e8:b8:60:e9:4b:fb:3d:2b:d5:54:83:ed:de:68:3d:
b4:b4:c3:7c:75:35:29:f3:ad:7e:27:12:09:11:a1:80:48:c5:
02:70:4a:e6:22:cc:a5:06:96:c4:d4:12:66:22:7b:77:ca:c5:
15:33:2b:41:66:f0:f6:e4:28:ae:75:12:03:24:af:a3:18:5e:
4b:81:f1:87:7e:3b:05:fa:29:ff:56:cb:9f:c3:d5:78:23:87:
54:6f:6f:22:ab:01:cf:f7:79:7a:a2:1f:6f:75:c7:4c:cd:97:
4e:2f:d5:8b:3a:0b:45:57:2e:1d:3c:2e:07:33:36:27:df:f5:
cd:d7:66:bb:5a:be:10:9d:76:1a:6b:a5:cf:6a:a3:af:f7:dc:
ed:b0:d3:c1:c3:fc:07:c6:e5:0e:64:97:cc:a2:4e:bc:fd:ce:
9a:4c:b0:88:9e:91:0a:08:bf:c8:bc:d1:ab:b5:50:88:79:c0:
fb:7a:e8:d1:e1:5f:18:3a:66:c6:47:de:f1:7a:0d:0d:55:f6:
ee:a7:0a:44:9f:3e:a2:2c:92:45:00:e2:14:f1:6b:83:5a:48:
fc:d5:73:5a:26:91:61:58:3d:a1:5b:83:29:27:5d:f9:a4:49:
51:a1:7e:67:9b:94:f7:1a:7e:50:ec:da:54:92:3e:9a:29:c9:
c3:6f:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:23 2025 by rpki-client on console.sobornost.net