Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
File: mXZKyKibCft4hQ10xo4dqo8-KvE.cer (raw, json)
Hash identifier: gArWtbQjscuZkhnBm3H1UVu5tKUepVuoOFMumAi9GRc=
Subject key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E0EB1DB3009431333110BAE786C1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16234
IP: 37.44.160.0/19
IP: 91.199.195.0/24
IP: 2a00:7240::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0e:b1:db:30:09:43:13:33:11:0b:ae:78:6c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:57:8a:9a:45:20:0a:26:e3:9e:f1:d1:17:
4b:e3:4f:92:36:7a:43:77:ba:ac:e1:e7:92:0e:6e:
31:49:69:c5:b1:d5:49:3e:a3:07:bc:65:3f:fc:75:
3f:78:f5:69:35:73:6b:4a:a2:0c:03:e4:47:0b:37:
d7:c8:8c:71:f7:1e:75:0b:05:a9:ba:19:a9:3e:d9:
33:99:23:2a:3f:c9:f0:db:9c:69:28:1b:1c:86:34:
8b:05:65:f1:86:9d:02:4f:da:f1:6b:a2:28:f7:0a:
ea:34:bb:69:62:6e:80:5d:2a:51:28:7e:36:6f:1e:
c9:ba:61:5d:a8:2d:6a:f6:b4:6d:47:9e:3e:b2:af:
b9:6f:40:19:7b:54:04:e0:d2:f2:5e:dd:26:fb:73:
49:54:56:f8:61:e0:31:bb:8a:e1:9f:62:c3:78:ef:
0e:fe:4d:a9:a7:92:be:f3:b5:96:e5:f2:ca:20:79:
71:d1:65:da:ce:4d:bf:67:c0:5a:18:f1:75:9b:72:
bf:1e:c1:3b:00:49:15:90:91:b9:85:aa:af:50:9c:
3a:35:be:45:42:4e:1f:c1:d6:2f:ed:15:c9:04:84:
e1:fb:99:9d:1a:fe:60:6d:fb:8e:d9:b3:4f:0f:38:
88:9e:77:c3:e1:d8:70:bb:be:55:d7:b2:f8:dd:2b:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.160.0/19
91.199.195.0/24
IPv6:
2a00:7240::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16234
Signature Algorithm: sha256WithRSAEncryption
76:79:30:d8:f6:3d:22:4c:e3:57:b7:01:74:bf:e0:8c:a0:a3:
7d:08:e5:cc:83:62:25:48:76:bd:86:5c:c6:95:37:9f:4d:64:
b7:ca:f0:80:9e:46:38:55:48:96:6b:5c:4c:81:c7:83:16:b3:
75:17:11:7f:4e:3f:f1:fc:82:21:af:97:a8:8b:13:60:58:b2:
64:87:0b:72:fb:78:12:7b:c9:66:a5:19:ed:67:4b:b1:a8:21:
de:de:a8:f3:70:75:3c:f9:21:c9:7f:e2:17:51:b7:3c:60:df:
06:62:13:06:65:34:73:91:91:78:87:96:0d:c5:f6:da:a4:9d:
45:4a:de:00:e2:9e:79:eb:b3:92:bc:14:21:26:7b:69:c2:38:
5c:b9:bd:b2:db:fb:5a:7e:3c:a2:f9:66:f7:9d:0d:14:c5:8b:
ab:a8:c3:58:66:d3:94:2d:c4:7a:3e:06:4d:ea:f0:a5:9f:15:
be:f4:38:34:21:26:72:c5:dc:c6:3d:44:f1:ca:82:73:a1:78:
b0:76:8c:94:10:3d:23:88:74:72:01:35:0b:15:28:ed:de:c8:
52:7b:f0:1e:20:c7:c9:0f:8e:78:75:5e:b0:34:cd:8c:42:6c:
d0:d6:e0:95:f9:8d:cc:fb:57:b6:0c:cd:c9:a1:f2:b5:7f:0f:
15:7c:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:27 2025 by rpki-client on console.sobornost.net