Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.cer (raw, json)
Hash identifier: zgibWQMBP0tmgjGLhINCcb5bt4XgD6UEEjKLx7pfrSY=
Subject key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7DC5AC6C268B53F166D82EFA4FB84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5407
AS: 15425
AS: 28904
AS: 30764
IP: 5.53.8.0/21
IP: 31.28.128.0/19
IP: 46.47.128.0/18
IP: 62.129.32.0/19
IP: 78.157.128.0/19
IP: 82.209.0.0/18
IP: 84.16.96.0/19
IP: 84.21.96.0/19
IP: 85.135.0.0/17
IP: 86.61.128.0/17
IP: 89.29.0.0/17
IP: 91.106.240.0/20
IP: 93.181.64.0/18
IP: 94.242.64.0/18
IP: 128.0.176.0/20
IP: 164.215.112.0/20
IP: 176.227.248.0/21
IP: 185.5.68.0/22
IP: 188.134.128.0/17
IP: 193.165.0.0/16
IP: 212.109.176.0/20
IP: 213.216.32.0/19
IP: 2a00:ca8::/32
IP: 2a02:c38::/32
IP: 2a03:6e80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:dc:5a:c6:c2:68:b5:3f:16:6d:82:ef:a4:fb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:53:93:18:b7:14:5a:73:21:a6:1f:39:68:
0f:c4:52:50:45:d0:70:25:1c:53:b1:f4:55:65:c8:
97:d4:7b:be:22:58:44:9d:66:4e:75:57:3f:93:7e:
f9:ec:02:16:48:11:2e:a4:01:7e:e1:f0:ff:ba:b4:
34:96:e4:1a:eb:25:8e:86:f9:96:ca:8f:36:5d:de:
59:17:35:c4:91:a7:f1:80:84:f8:ed:23:ea:20:21:
31:04:5e:89:c3:86:f0:6e:82:ca:bb:f4:2d:9b:18:
4e:7e:3b:5a:e4:96:5b:53:e3:2e:cf:cc:3d:18:36:
32:1a:02:57:71:80:92:17:6d:b0:a7:72:42:2e:6e:
91:be:f5:93:52:5a:fb:0f:4d:96:25:4b:66:03:e9:
da:5a:98:c6:61:cc:7d:30:d7:a7:14:22:f9:ba:75:
a0:63:bc:61:0e:26:c1:ff:0b:8b:78:d2:bd:2d:79:
92:ca:53:37:1c:2a:ad:8b:61:48:e8:63:c7:42:5f:
6d:94:dc:d8:fd:69:ef:89:4e:c0:96:58:14:a6:ac:
42:97:9f:b1:c5:34:53:fe:d5:67:2e:a3:bc:11:c0:
3b:63:a2:33:40:00:5b:e4:51:23:27:98:79:f3:76:
d4:01:e4:ee:5c:4e:c6:1e:cf:59:3e:1c:e0:fa:21:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.8.0/21
31.28.128.0/19
46.47.128.0/18
62.129.32.0/19
78.157.128.0/19
82.209.0.0/18
84.16.96.0/19
84.21.96.0/19
85.135.0.0/17
86.61.128.0/17
89.29.0.0/17
91.106.240.0/20
93.181.64.0/18
94.242.64.0/18
128.0.176.0/20
164.215.112.0/20
176.227.248.0/21
185.5.68.0/22
188.134.128.0/17
193.165.0.0/16
212.109.176.0/20
213.216.32.0/19
IPv6:
2a00:ca8::/32
2a02:c38::/32
2a03:6e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5407
15425
28904
30764
Signature Algorithm: sha256WithRSAEncryption
ac:62:bb:1d:a7:b7:81:e3:2a:77:cd:54:8f:a7:ae:95:45:19:
f0:94:f4:82:7f:5b:2b:9e:f4:8a:40:64:05:05:96:ad:64:8b:
ca:ec:68:20:04:12:3b:b6:d1:c3:80:78:77:b9:cf:de:b9:e6:
37:59:37:e2:df:60:5d:aa:85:5a:8d:fb:51:52:b8:31:0b:41:
fb:1c:74:6b:cf:cc:6c:c5:99:d2:b8:cd:a4:84:8d:a0:63:ec:
9d:a8:cb:e0:46:0a:89:ac:10:9a:3c:0f:07:bf:b2:6d:b4:8c:
54:b5:8e:e7:16:78:36:df:39:9d:49:6f:42:d4:cd:c0:e8:a4:
39:32:da:49:92:8e:88:64:77:16:5e:42:ef:1e:94:1d:37:ad:
c4:53:cd:33:28:9e:cc:c0:1d:c6:8c:36:7a:ee:73:06:85:a9:
be:9c:ab:60:d9:f4:aa:8b:00:ca:16:37:a3:b5:f8:a5:b6:5b:
ee:fd:39:f6:96:2c:5a:a8:ba:0c:07:01:b2:7f:c2:fa:7e:b0:
1c:62:15:87:5f:12:b4:ee:3d:92:28:70:88:ae:a7:78:9b:22:
4d:3d:28:3d:00:58:c2:10:30:bd:87:e2:ec:04:f0:1f:3a:61:
04:f1:cc:7d:c7:14:7c:08:d1:db:cb:f1:b0:fd:5e:58:4f:ec:
f9:23:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:28 2025 by rpki-client on console.sobornost.net