Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.cer (raw, json)
Hash identifier: mmEh2C/PFV+CS9jlKJliFbU/DEeu4LMq54SqIxbRrso=
Subject key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E4E9B7AE6E1C53DA73441A72F225E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41370
IP: 91.212.152.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:4e:9b:7a:e6:e1:c5:3d:a7:34:41:a7:2f:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:86:cd:01:5b:a1:df:7e:f7:aa:49:6d:38:
ed:d4:9a:d0:a3:27:ea:07:da:9f:6d:9e:cf:84:7f:
bc:80:c3:77:60:72:42:90:7d:a6:8f:c8:d2:a6:43:
12:89:c8:90:5b:f6:e8:f3:39:aa:9f:0a:85:5e:c3:
3c:ab:4c:99:30:5f:59:f6:e5:6b:05:7d:96:e9:28:
81:12:cf:4b:b7:cd:80:9c:dd:3b:1c:1f:e8:be:5c:
c7:6f:2e:74:e0:84:e4:88:8c:2b:44:cd:45:1f:16:
36:f6:af:25:42:f6:8a:55:cd:82:d3:29:4d:14:c3:
06:e2:cf:d9:af:dc:6f:8a:e6:be:26:a8:05:6f:82:
1b:f5:9d:e5:9a:37:bb:1f:fb:b3:6c:71:0d:cb:cc:
7d:c5:eb:44:83:f5:55:a0:65:36:31:15:36:36:c8:
9d:3b:d8:ca:23:df:24:7a:09:ed:a2:1d:72:a9:6e:
9f:a8:3b:9f:ea:f6:35:75:a8:57:14:a2:ab:3f:58:
a3:78:99:18:bc:f2:65:eb:25:b6:8e:6c:df:70:c7:
28:ad:21:9b:1f:1f:2b:9e:7e:42:a1:4c:57:44:65:
c9:55:c7:db:2e:3f:64:0a:ed:49:4a:f3:d9:88:2d:
11:08:57:85:dc:0c:f4:56:a7:5f:c1:d5:d3:a6:58:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.152.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41370
Signature Algorithm: sha256WithRSAEncryption
01:55:cd:6a:c4:c0:c1:27:bb:da:3f:9f:72:ec:34:8e:71:7b:
a7:4f:a0:d1:8a:9c:b4:58:c2:39:3b:2d:df:ab:a6:3b:69:30:
5d:69:ef:65:0d:28:6e:ee:e0:bc:1f:e4:a1:5e:dc:28:c0:9c:
5a:22:de:f5:f8:f9:13:e6:44:d9:90:3b:6e:ff:75:51:06:55:
9b:42:fb:88:4d:72:91:14:eb:b5:1e:dc:19:79:2a:f7:d3:30:
8e:5c:76:a9:35:69:15:14:3b:0c:87:33:17:56:fe:d0:b3:55:
8b:a6:c0:00:6d:f2:16:b0:08:73:be:a1:f9:0d:05:e6:1f:6a:
50:9a:d9:3e:eb:99:4f:48:55:ba:29:4f:58:54:b4:d0:30:35:
aa:42:34:a6:32:a9:e6:66:4b:83:be:4b:b5:11:29:e0:8b:7b:
21:b4:22:00:77:21:be:84:32:1f:70:8e:73:fc:1e:70:85:eb:
13:43:d4:09:52:0b:d2:03:ea:34:fd:6b:90:07:47:67:67:72:
19:4b:b3:79:a0:bb:8e:13:7b:ff:07:3f:98:7b:e1:19:19:a6:
1b:6d:e1:b8:a5:6e:1a:90:4a:45:39:c9:15:2e:49:14:02:7a:
67:72:44:a8:7b:51:a8:a9:ec:48:e6:0d:64:89:7c:d2:04:ac:
24:ab:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:27 2025 by rpki-client on console.sobornost.net