
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
File: o-VcYHJU0eKwURqFbnADn_r0MDI.cer (raw, json)
Hash identifier: feyPbYT6yDu2ypAwcFHvhmYm7JLwf4qYB4ML5B9SwqU=
Subject key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C52255387854C931F897104E3416A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211579
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:52:25:53:87:85:4c:93:1f:89:71:04:e3:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:8d:26:bf:c6:7f:89:50:04:c2:03:12:d7:
5a:dd:f8:3b:63:bb:11:40:2b:4a:c1:0a:f1:81:e7:
0b:dd:69:30:cd:b9:3f:2e:48:3a:1e:65:0b:96:28:
70:33:05:64:de:b5:d2:f9:34:df:e5:02:b1:a1:12:
d3:72:41:70:c6:87:38:1d:a4:df:57:89:4b:7b:ce:
2d:f6:a9:61:4f:ea:2a:56:57:c2:bb:5c:7d:25:d1:
12:0c:c6:5e:fa:59:fe:da:80:08:3e:a0:6b:71:f6:
f5:b0:3e:4e:48:ef:fe:25:ad:28:4b:e4:24:4f:11:
e2:22:3e:9e:ba:74:cb:56:74:4a:fd:53:1e:5a:f7:
8e:8f:ac:d4:ad:47:ca:fb:ca:35:32:91:59:55:47:
41:45:c8:fe:6a:88:13:59:0d:c0:4c:fd:d8:b9:b2:
b5:86:79:c3:95:f9:e1:7c:a4:37:5a:6f:a6:81:63:
f8:14:d1:a9:6c:5f:07:c3:5b:21:c5:73:2d:6c:00:
ed:1e:95:0f:b9:50:60:81:e9:55:27:3f:20:c3:96:
9d:a5:68:30:37:57:87:6f:b8:42:57:c8:e4:b4:0b:
78:88:c2:6d:c8:09:32:a6:f8:c5:5e:7d:a9:97:67:
b0:7b:e0:a8:fe:d6:1d:73:b9:64:b6:5e:7b:35:9f:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211579
Signature Algorithm: sha256WithRSAEncryption
87:1c:e6:0f:82:63:03:e8:4a:07:a1:8f:44:a0:a3:17:d5:cf:
a6:58:63:5f:10:cd:be:ac:07:6c:07:07:b7:98:db:db:08:bf:
91:6c:f9:60:01:46:16:35:05:a8:7b:3d:35:b9:a9:dc:2b:6a:
2a:91:3c:19:fc:9c:fd:06:40:25:04:2a:32:0d:9c:52:e2:2f:
ea:7b:2a:6c:65:ba:05:4e:c1:f8:21:a0:4b:2f:95:e0:6e:b4:
c0:43:e4:8d:5e:fa:01:d9:58:c2:2f:4e:c0:9a:a1:dc:35:cd:
2e:0f:a4:9c:fa:c3:e5:e3:91:92:f6:16:4e:a5:2e:03:b8:a2:
86:4a:05:d9:1a:b7:74:d3:56:53:91:fc:50:b3:f5:e7:24:f6:
1d:bd:5f:0a:8b:84:4b:a4:dd:d1:8b:d6:86:0e:b9:1c:6d:99:
a8:23:d4:a8:5c:8a:db:de:70:eb:95:96:5a:a1:1e:b0:3f:77:
d6:79:67:9d:08:56:59:c4:91:42:b8:ff:b4:1d:9b:bb:bc:5c:
a7:e5:60:c7:88:05:05:f0:6d:92:4b:87:03:86:ef:56:0e:25:
77:48:e8:4f:59:fb:b7:2c:3d:86:9e:45:c7:02:16:d5:1c:ba:
b3:4c:ee:43:d6:b2:63:6c:2a:95:9a:83:5b:a7:d8:19:0c:d8:
74:13:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:49 2025 by rpki-client on console.sobornost.net