Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.cer (raw, json)
Hash identifier: TFLbXn3QIsJve6qARMgGZE9lTvSszARkOkGdchinHSc=
Subject key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444E073D50525DDE8017B3BB2BBE390
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56642
IP: 92.118.152.0/22
IP: 185.155.248.0/22
IP: 2a09:ae40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e0:73:d5:05:25:dd:e8:01:7b:3b:b2:bb:e3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:87:e5:2f:0d:a3:cf:84:ac:db:fe:53:c1:
a3:7d:22:52:49:fd:80:1e:7a:8d:26:78:28:4a:0f:
7c:de:ce:20:84:51:c0:cb:24:85:23:cc:b3:c9:c4:
5a:33:6a:f2:b4:38:d6:e2:63:f6:92:25:91:a7:d6:
1e:e1:75:d4:e0:5d:67:0a:e2:e0:d8:bf:e4:be:3b:
2b:de:a1:1a:13:ff:11:8f:04:c1:55:64:f2:1c:e1:
43:48:25:a9:87:1e:c8:78:71:b2:51:b1:88:18:5c:
22:32:14:d6:53:ca:90:94:fc:3a:f5:94:75:7b:3c:
63:2a:9b:82:ba:91:c8:29:e6:71:17:9c:d8:17:5a:
8b:fd:4d:d5:39:38:36:57:bd:d3:31:57:e0:f2:24:
6c:23:4c:2b:9c:ec:35:ec:41:29:18:0e:5f:f6:7c:
62:c3:8f:f6:91:5e:e4:9c:87:a9:ac:6a:b5:f2:cb:
11:8c:c6:9e:0f:5e:1a:99:63:bb:b6:41:25:57:c0:
db:66:52:4e:81:24:36:88:57:a3:5e:6d:d8:13:ea:
4d:15:d5:eb:c4:64:28:bf:ae:0d:01:a6:53:a8:b1:
9d:6c:ad:24:3c:8f:1e:d9:0f:1b:56:82:22:33:ed:
92:9f:14:04:53:e1:37:ce:4c:7b:f3:b6:08:ea:af:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.152.0/22
185.155.248.0/22
IPv6:
2a09:ae40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56642
Signature Algorithm: sha256WithRSAEncryption
ad:c9:b8:2a:82:df:2c:57:77:54:be:e9:64:60:a2:d9:b3:fb:
59:8e:78:03:49:0a:7c:71:78:12:e0:ca:1a:ff:53:02:9b:9c:
13:e6:20:a8:09:e7:af:43:cc:27:12:fd:fa:52:c8:eb:3b:80:
cb:b1:1f:1f:29:ed:4d:91:3b:7a:6f:43:38:fc:a9:7b:42:74:
fa:e7:2d:22:bb:05:14:b2:1d:e4:93:ac:2d:84:94:79:6c:07:
49:6a:5b:3a:56:cf:77:62:1a:74:d4:35:44:81:4a:13:93:d3:
6a:20:aa:4d:ec:a8:64:cf:07:11:af:9d:dd:3c:fe:3f:75:52:
03:b3:44:55:5f:3d:43:b8:d4:44:66:d1:3e:e8:2c:42:8a:c5:
da:98:57:69:28:6c:97:13:94:53:7b:73:4f:c3:b5:fc:2a:c3:
41:a6:7d:4b:3c:2b:0b:18:e0:be:db:93:ec:3f:e2:4a:d6:15:
b9:02:e3:3f:47:04:68:25:fe:d5:6d:e7:a6:e6:f7:d1:d3:cc:
a5:13:01:bd:8a:a3:46:f4:e8:07:ec:4b:8e:67:fc:5f:9f:6f:
8b:ed:a4:37:a3:85:95:8c:72:63:76:d8:67:d9:ad:c6:f7:ce:
59:2a:d8:ae:11:4a:98:de:7e:23:47:77:cb:a4:d2:24:c9:ef:
00:d8:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:26 2025 by rpki-client on console.sobornost.net