Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer (raw, json)
Hash identifier: 3BbKt0ehhlU7M+dfd6WYipwj2whuV6essQRl1iNrJ6Q=
Subject key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAAF66A3254C55786F9F591EEA47E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51094
IP: 91.216.144.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:af:66:a3:25:4c:55:78:6f:9f:59:1e:ea:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:24:89:4e:8c:c6:59:5f:94:9b:43:6d:e8:
a5:ca:40:4c:d8:9e:8f:8c:de:9e:50:f3:82:19:e1:
ef:fe:da:0f:53:c6:e3:94:6a:27:42:96:3a:31:1e:
0e:06:a2:8d:f8:25:35:96:f7:f4:dd:60:47:dc:8d:
cb:e5:f8:3a:03:c7:ad:a7:11:45:9c:bf:03:be:68:
02:cb:25:d3:cc:6d:e5:f2:57:67:3b:51:5b:77:a1:
1d:30:c0:da:d8:21:f9:f3:bc:e0:34:be:d3:41:f3:
d2:8e:42:72:cd:46:d5:33:21:31:42:f1:b0:03:6d:
01:57:bb:e3:cd:a2:dd:35:a4:43:b2:30:26:5a:b9:
38:8b:95:b2:e5:27:31:17:c3:be:e2:e0:5f:43:a0:
fd:eb:1d:74:70:5d:04:70:8a:6d:5b:e5:79:3a:71:
88:91:be:33:ae:5a:2a:f0:7a:35:95:eb:fb:fe:ea:
b7:42:cc:61:e2:af:82:07:f6:0d:40:c9:fe:f7:4f:
4c:5e:37:ad:dd:59:0d:0b:8d:9e:ac:81:1c:65:0b:
d2:30:64:54:fe:b2:cb:4c:a8:f1:61:71:ba:80:07:
f3:9c:fc:d8:64:7b:a1:7e:a8:f4:1e:55:43:39:25:
95:d6:03:6a:18:6e:a5:07:09:27:b1:db:50:79:76:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.144.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51094
Signature Algorithm: sha256WithRSAEncryption
84:34:e8:cc:db:b3:43:56:7c:d8:4a:fc:f8:00:4b:95:67:bb:
12:3f:dc:55:85:a4:0e:1a:a5:a0:83:11:e1:e9:1a:db:fc:10:
b7:d1:66:ad:f6:5b:32:86:1c:56:bc:fb:6f:60:ec:f8:ae:9c:
70:f8:98:a1:39:cc:30:6b:8b:70:af:9c:31:06:33:14:e4:59:
de:03:df:9d:1d:10:2d:ac:71:d2:8e:23:fb:cc:e9:ea:15:47:
95:62:28:a0:1c:9b:e1:04:ea:b7:6a:41:e4:84:82:1d:09:fb:
af:be:c5:d9:16:0d:d9:ce:d0:0f:fd:d2:30:2f:8d:f8:1a:a0:
3c:77:4c:b6:61:4a:bc:3f:d2:1f:1b:f7:31:36:fc:f0:cb:88:
49:d4:4f:47:f6:9b:6a:d9:ee:ee:d8:3b:4e:dc:c4:62:28:4b:
ba:b4:65:65:6c:ac:d7:3f:b5:5e:34:8a:8e:2f:3c:3e:3f:7f:
ad:a1:e8:70:82:a0:80:97:f2:fd:61:1f:6f:89:89:d0:4e:dc:
82:69:97:dd:a8:3a:bd:47:ce:b0:aa:dc:71:09:92:2d:7d:ef:
a5:e0:42:5d:da:73:a3:31:5b:12:10:e9:79:d1:8d:07:3e:d5:
2c:c0:59:73:8c:28:eb:88:ae:f0:78:9f:bb:6d:b5:66:b5:3e:
af:0b:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:04 2025 by rpki-client on console.sobornost.net