
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vxfVoihiEhe4cYVdRhG8pGTg5iA.cer
File: vxfVoihiEhe4cYVdRhG8pGTg5iA.cer (raw, json)
Hash identifier: NSEedOx5M9bjfX3Wg66ykGh6tSL9Cxb5kqI5jGD5XF8=
Subject key identifier: BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424459C90083C4CF93C7E4932BBC76B69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214929
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9c:90:08:3c:4c:f9:3c:7e:49:32:bb:c7:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf17d5a228621217b871855d4611bca464e0e620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:39:40:4d:fd:27:5a:f7:1a:69:cf:12:82:
4e:7d:45:3b:59:aa:9c:e3:92:cb:83:7e:4d:e5:8d:
26:c2:db:f9:8f:a9:a8:82:72:42:80:58:b0:e6:ce:
48:f4:27:20:09:19:b2:ee:7c:c6:c6:4a:91:15:5d:
ba:fa:18:40:0d:de:0b:b9:bc:8e:5e:e8:cf:10:16:
d9:40:72:20:2f:be:a1:07:f6:c0:6e:56:0d:96:2b:
ee:e5:29:1d:25:e0:d3:f7:de:23:eb:b1:ab:ce:b6:
85:ae:27:e5:b4:cb:18:be:45:df:1a:29:73:46:8c:
12:e7:90:16:1b:ae:27:f7:9c:9b:b6:70:92:9b:2a:
d3:51:e7:47:cb:29:90:a3:63:13:db:c1:5b:5c:be:
08:dd:b3:0b:47:93:3f:dc:6b:72:2d:95:0d:3e:93:
87:e4:4c:60:5f:1d:47:4a:40:9d:54:b3:25:a2:46:
6c:c1:92:d9:d0:10:75:fe:80:5a:94:f8:1f:d7:d1:
6f:d2:07:85:2a:2f:15:ab:5c:c5:97:72:7d:c5:aa:
8d:8b:e4:a6:82:db:ce:ff:d4:b0:06:91:96:a1:e7:
7b:09:25:29:72:3c:d6:ac:c1:80:02:ac:0e:21:f9:
33:41:38:95:ec:40:33:06:9b:6f:7e:08:20:1a:91:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:D5:A2:28:62:12:17:B8:71:85:5D:46:11:BC:A4:64:E0:E6:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/634122-c611-4fec-8046-7c3e48863608/1/vxfVoihiEhe4cYVdRhG8pGTg5iA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214929
Signature Algorithm: sha256WithRSAEncryption
2e:30:34:e5:86:7b:45:0d:52:a4:c9:f4:83:8d:7b:c9:73:3e:
03:1b:f5:36:09:69:82:da:99:4a:9a:c3:b9:80:44:91:ac:6e:
33:c8:1d:03:98:13:21:cd:3e:5c:6e:9f:7d:c9:0b:1d:8a:53:
d1:6b:e2:19:81:a3:23:10:f6:d1:fd:cf:a0:65:22:2b:aa:0c:
8d:8a:2a:30:d6:a3:b3:c4:88:35:4c:24:51:11:18:df:56:e8:
1b:4c:49:8b:ec:f8:74:fe:79:f3:4d:17:e3:4d:11:a2:64:b0:
e8:1a:37:c8:5e:ee:ea:2e:56:00:e2:d2:a3:fd:dc:1b:b3:ff:
a1:27:81:7a:63:fa:14:05:87:2f:b2:1b:31:c4:42:7d:ee:a4:
2f:ac:92:a7:93:ad:8e:ae:6c:89:91:d4:65:6f:21:39:5c:b2:
f7:0e:16:1e:b0:73:1f:bc:29:9d:83:a3:48:7b:55:ac:25:34:
5f:e5:46:f8:be:91:bb:cd:74:ad:4d:d7:34:be:1d:89:9b:b4:
cd:6f:e4:bf:d7:89:f0:89:4d:db:8d:e0:6d:83:ff:6e:c8:05:
e0:6d:d5:1e:d6:ae:d7:32:47:ef:87:a6:1d:57:29:0e:6f:a6:
49:f9:e9:32:16:4e:72:96:00:bc:f7:5f:30:46:f5:41:d7:d8:
fc:9b:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:27 2025 by rpki-client on console.sobornost.net