Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.cer (raw, json)
Hash identifier: IPp2x6omfd6vfTJAB0lIROWlD9yeFuI7a/cJWZVUL3E=
Subject key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5490931B1A16418E091AC69148AF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56623
IP: 31.133.112.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:49:09:31:b1:a1:64:18:e0:91:ac:69:14:8a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:68:57:e3:60:cd:ee:8a:cc:8b:d6:67:cb:
2f:3e:c1:95:b0:ca:1e:60:e8:df:21:d2:2c:fb:16:
59:45:17:b5:72:65:e4:54:fe:0e:1a:02:f9:57:fc:
e9:20:d8:29:a2:d2:68:4a:14:b8:90:99:de:80:4f:
6c:aa:f9:90:da:58:1a:be:98:65:84:56:aa:e2:e1:
23:1d:9b:13:5f:df:a7:59:24:ca:0f:61:3b:05:3f:
ac:8a:96:51:99:b7:9d:93:79:88:01:95:8f:99:3a:
48:0e:85:f8:f4:8b:3f:19:57:69:09:51:18:64:d4:
f2:7b:40:38:1b:2a:0c:96:86:6b:b7:2c:87:3e:35:
4c:6b:76:28:b2:6c:b7:4e:d4:51:74:19:4f:03:24:
70:3c:02:3c:f5:05:4b:21:0d:80:64:d5:04:07:42:
63:ae:50:1c:f8:2a:0b:68:13:e3:04:32:8c:27:be:
37:97:dc:23:89:f0:f3:fd:19:27:2a:27:5f:12:56:
50:24:f6:d9:dd:00:30:1c:1f:da:bb:8e:45:de:e2:
d3:68:35:56:77:fc:15:be:22:12:33:6d:ae:98:54:
23:88:98:9f:38:8f:0a:6c:26:26:86:2e:cc:11:f2:
7b:b0:5d:b2:b8:02:5b:34:89:b0:8e:42:7a:23:d8:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.112.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56623
Signature Algorithm: sha256WithRSAEncryption
25:55:5e:21:ef:9e:ff:db:19:4a:b3:8b:9d:83:fd:86:45:d9:
eb:30:82:34:9d:c2:4c:4e:80:5e:6f:c2:57:6e:17:bc:c0:17:
84:9f:89:22:f1:d0:d8:31:d3:58:7e:ad:45:ed:1f:f6:3d:88:
a5:ff:11:04:0d:03:ed:9f:02:a0:01:9a:e9:7c:f6:cd:b7:6d:
41:f4:11:52:9d:5c:ea:bf:8f:e1:65:b8:5a:ff:63:96:26:20:
a5:dd:61:e7:d8:cc:ac:66:cf:d4:db:2f:d2:ff:f7:40:cd:3f:
8c:48:3f:ad:b7:8a:dc:d8:79:47:6b:27:66:cc:14:b1:e6:2c:
63:f8:dd:02:db:90:d0:00:39:2f:5c:68:64:0f:0c:83:78:9e:
8b:b2:1d:a1:cf:d4:c1:25:ae:b1:5f:64:33:11:c9:a9:e9:fd:
6c:f4:8a:ae:22:be:f9:dd:a2:f8:11:f1:7d:15:e9:77:93:3b:
e2:48:4e:b0:61:ce:89:14:bc:3b:81:8e:49:5b:6d:db:47:d1:
97:ed:8e:7b:43:fd:19:cf:95:0e:a5:17:88:70:fd:d0:c8:cf:
a8:0a:f9:1d:22:28:dd:56:99:36:6c:83:81:c5:f6:f5:e0:fb:
6c:79:4a:d9:a3:47:04:e7:c4:86:45:03:29:19:1a:78:94:74:
bc:ef:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:56 2025 by rpki-client on console.sobornost.net