Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer (raw, json)
Hash identifier: UbVDT9TF7t9OcbeBAOqna7XC9QzA1I6JyDPm7UvcftM=
Subject key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067B973F8A5D0F70713770561DC827F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31522
IP: 193.138.67.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b9:73:f8:a5:d0:f7:07:13:77:05:61:dc:82:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:8a:c3:10:4d:7c:d6:24:de:7c:bc:30:69:
be:8f:16:de:d0:61:f8:89:cf:30:46:e5:36:d0:c7:
29:e8:32:ff:4c:a4:69:8c:00:99:6e:c6:1d:1b:71:
31:ad:60:fb:37:c4:9d:14:a4:b7:e8:ca:a7:cf:34:
47:a0:de:6b:fe:a4:0a:72:08:81:25:01:4a:dd:fb:
f8:e6:a5:93:c4:2c:40:fa:f3:4c:a4:b0:b7:bc:e0:
ec:6f:b1:a2:98:ab:bf:51:6d:93:d6:76:cb:87:0c:
bf:f8:39:73:93:1f:a0:f0:2d:1e:ac:6f:fa:83:da:
78:fd:b7:5e:26:86:51:f7:38:7f:48:94:6e:1c:5e:
19:87:89:a5:e8:71:e2:84:18:d9:99:2a:da:b4:83:
4a:54:7c:cc:07:c6:7b:38:c0:42:96:67:fa:73:37:
12:4e:ca:b6:83:ef:6f:ea:c2:f8:c1:94:2d:11:09:
c6:f5:d5:6a:d9:29:33:45:36:13:46:6e:e9:dc:78:
e3:eb:1f:8e:8f:aa:6a:9e:1e:48:d0:67:ba:9f:44:
ab:0d:7b:98:90:78:36:37:90:a5:a0:63:ae:ad:4d:
c5:ff:09:d1:24:a7:3d:9b:ba:1a:1d:c4:53:77:99:
1e:83:a5:c6:02:05:59:b8:7c:08:8e:dc:c0:53:ef:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.67.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31522
Signature Algorithm: sha256WithRSAEncryption
02:93:23:fa:1b:0e:75:c3:6a:8a:1c:71:e9:d1:ff:1e:e0:1d:
ce:32:38:41:df:41:2f:56:b8:07:eb:93:18:82:1b:51:c9:01:
8d:14:27:d6:1b:24:cb:c5:ef:5a:92:f7:4b:1e:f4:a6:97:73:
20:a3:71:52:f8:eb:9f:37:cf:1a:a6:65:c3:d3:c8:87:c9:23:
bf:70:7b:b5:d2:ce:61:67:7e:68:0d:7a:2c:f2:c1:ef:06:7b:
18:28:9e:b4:02:21:32:6c:1f:73:f5:8a:bc:0f:7a:a7:d1:3f:
a1:03:00:aa:84:d3:d6:db:5a:59:93:8c:05:a6:f1:7a:75:8c:
97:40:47:05:9b:53:cb:76:03:f6:08:d1:1e:d6:ca:ae:0f:39:
f6:25:82:47:73:d3:79:21:64:fc:da:e7:70:42:e5:fc:67:ae:
6d:e7:fa:51:b9:6e:96:67:36:04:c3:c5:57:20:ce:c5:63:c5:
28:ec:ee:65:a4:a3:19:08:bc:69:12:d0:1f:75:75:f2:69:53:
6e:60:70:e9:a7:89:c0:19:66:81:d2:c9:fd:41:23:46:1f:fb:
01:98:25:fb:04:4f:d6:64:f1:0e:dc:3e:ad:c6:50:87:37:33:
df:da:a6:4f:54:ce:ee:fe:15:7e:13:1c:d1:cb:9e:e6:6b:3c:
c9:33:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:29 2025 by rpki-client on console.sobornost.net