Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
File: pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer (raw, json)
Hash identifier: GAqQnuh/PpqRSVqroUB3qHEsBZrQNSUCOx8wBLoXVec=
Subject key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194EFCDD6F5549B2ED4B51032D70FFF807C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
caRepository: rsync://repo.rpki.space/repo/Netiface/3/
Notify URL: https://repo.rpki.space/rrdp/notification.xml
Certificate not before: Mon 10 Feb 2025 12:20:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60223
AS: 213448
IP: 2a14:9e00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:cd:d6:f5:54:9b:2e:d4:b5:10:32:d7:0f:ff:80:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 12:20:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:80:5d:97:23:40:51:ab:0c:43:c4:62:46:
4d:f4:97:44:26:2e:2e:8b:e3:6e:a0:78:2a:e2:88:
28:ff:49:c1:9e:95:30:f6:a8:da:c6:33:23:7a:57:
48:d2:97:14:f9:0e:6b:21:c6:9d:1d:7f:6e:e0:ef:
8c:bd:b4:a2:2c:1f:48:37:79:d4:6c:3a:84:25:e5:
65:88:9e:16:8e:3d:6e:a9:bf:f3:32:67:00:22:34:
17:44:c4:d1:68:dc:1c:59:b4:74:3a:2e:c1:86:bd:
05:12:5f:2f:f0:60:df:ee:17:d4:0b:98:b8:dd:d0:
ad:aa:7e:07:a9:36:b9:2b:f4:89:ab:a4:83:ee:85:
fb:08:ff:4c:b4:70:d3:d0:e7:4a:e7:62:26:f1:91:
16:9f:cc:52:cc:82:b0:2c:4a:8d:73:49:83:e3:bc:
69:df:7f:be:11:15:1b:5f:08:d0:0d:14:29:a6:da:
60:7c:28:5b:21:48:ac:13:e1:4b:3e:d5:d1:ab:76:
3a:60:34:b9:3b:d4:9a:c9:50:c9:8f:48:e0:72:83:
dc:49:d1:4e:d8:ee:eb:57:55:d6:98:0e:6b:a5:ca:
72:2e:de:aa:37:27:65:9b:6d:e1:65:db:8d:65:a2:
a3:68:37:0a:85:d7:c5:26:2a:81:f4:b9:d7:c6:74:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://repo.rpki.space/repo/Netiface/3/
RPKI Manifest - URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60223
213448
Signature Algorithm: sha256WithRSAEncryption
6d:79:6d:32:a3:cc:72:e4:96:e7:fa:3c:d5:7e:aa:81:53:71:
83:0f:df:27:3b:02:0d:24:97:69:ab:95:9b:45:94:45:78:9f:
45:a0:47:3c:92:07:4c:dd:c7:d2:9c:f1:8b:a8:07:aa:f8:ff:
e7:44:45:8d:c1:65:e7:7a:4d:24:ad:77:a0:fc:0d:50:fd:cd:
a4:05:de:00:8d:ed:4d:70:ea:46:13:76:7b:2b:e0:b3:3a:6e:
40:f7:c2:df:4d:0f:96:51:71:18:28:ce:94:99:ce:34:07:40:
6b:64:ac:95:74:4c:0f:1f:27:ce:6e:f9:44:a7:96:c7:7f:cc:
7c:0b:21:cb:73:10:08:d9:90:7f:1b:df:8d:ab:75:04:fd:10:
a8:d8:1e:ff:09:0d:ba:6b:56:d3:f5:62:de:02:bc:8a:74:71:
36:2d:de:12:9c:a8:90:11:d1:77:3a:06:83:6a:6f:29:07:c4:
c1:2d:c4:bc:2f:2b:8d:60:f7:bc:c2:22:26:c6:95:8f:e6:e9:
a9:b1:6b:61:81:6c:fe:1a:7e:9d:ce:79:cc:f2:90:41:c3:02:
cb:cd:75:70:03:7c:73:72:52:ff:07:f0:66:ba:fb:60:b1:a6:
1c:f3:c2:85:ae:c7:5c:90:b2:f0:42:23:8f:d6:85:17:48:70:
17:a6:64:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:54 2025 by rpki-client on console.sobornost.net