Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.cer (raw, json)
Hash identifier: UtpwwppvKOIyXUy7RSBvJC7p6BNanuOwUbSGJPnQOXo=
Subject key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7880F8AA5C1162898E75F5C81EF6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198009
IP: 185.184.144.0/22
IP: 193.201.32.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:88:0f:8a:a5:c1:16:28:98:e7:5f:5c:81:ef:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97eac753379fd22ff6515033f513dc282463ad2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:1e:85:b0:79:d1:f8:ca:f2:59:b9:71:05:
9d:aa:61:5b:27:a0:73:93:5e:e4:3e:ab:66:3a:8a:
84:1d:b4:08:c0:e3:21:40:27:f8:f3:d4:85:a7:1d:
c4:31:32:6d:55:9a:c5:e1:33:5b:af:cb:b7:db:80:
55:f3:f1:b2:df:9f:6e:03:9a:f0:0a:9b:c3:d5:3e:
04:a2:97:0d:eb:88:6d:19:73:61:f6:94:c0:d4:e2:
97:70:a0:f5:c7:0d:2d:ca:1f:53:63:f0:47:e1:e2:
67:96:37:cc:9c:19:32:c1:6a:3c:b8:bb:e8:72:f6:
d3:cc:b9:6b:e5:95:7d:c0:bd:41:26:d7:f2:1e:65:
70:fc:66:7a:36:db:16:b4:16:ce:94:e1:17:97:42:
ca:c9:97:f3:f9:3d:64:62:70:1c:63:69:88:ae:23:
5f:1b:c3:4b:9d:b7:f3:f1:4e:13:67:18:ed:c1:26:
b1:8e:17:28:1d:72:74:52:a1:9f:08:9e:a0:25:fd:
bc:d0:7f:05:d3:43:25:a1:dc:49:3f:db:10:32:bb:
75:3d:28:e9:60:57:f1:63:6a:48:ec:9e:08:07:ed:
4b:52:09:34:93:a7:12:cf:e9:e9:cf:ab:82:c0:18:
97:4f:82:f8:e8:e0:6e:70:b5:48:be:1c:3a:74:50:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.144.0/22
193.201.32.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198009
Signature Algorithm: sha256WithRSAEncryption
01:39:c3:97:b8:5f:6a:86:5e:51:bd:47:21:85:85:67:4b:f3:
c4:83:60:4d:f9:9f:67:63:95:56:5e:fa:29:22:8a:af:70:e4:
4f:f4:79:bf:87:7b:c4:e3:0e:48:c3:ed:08:27:11:28:27:8d:
29:4b:69:6c:0e:43:45:f8:d5:d1:19:0d:cb:ba:f7:4f:df:0c:
9d:a8:9a:e1:06:98:24:95:47:a7:ea:d6:e6:a9:e4:75:52:7a:
5e:ea:c3:3a:87:be:86:22:dc:f7:23:33:a2:54:00:37:69:3e:
5c:16:d4:2b:5b:80:14:4e:59:41:3b:57:eb:ec:3a:dd:fc:17:
4c:15:c7:47:46:0a:c5:69:9c:fa:90:d3:b3:4c:61:57:db:31:
67:f2:1f:5b:1f:ff:a8:01:38:f7:cc:95:29:69:1e:1d:87:00:
16:79:3e:f9:82:9c:5c:b9:42:83:32:13:d5:85:c0:5b:1e:b4:
3a:5a:59:75:4a:5c:9d:a2:7b:6e:4e:ec:01:5b:6e:29:14:22:
09:79:52:3c:76:dd:12:f7:38:03:48:db:b6:10:1e:84:6a:09:
de:e0:7f:52:72:16:51:b0:52:a5:63:72:43:ec:e2:e5:dc:5c:
33:74:bb:78:53:11:70:ee:ac:eb:24:35:34:4c:32:74:9c:19:
7a:97:c0:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:23 2025 by rpki-client on console.sobornost.net