Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
File: wi1VOyjF0OpbHvYMm84z31C8tJM.cer (raw, json)
Hash identifier: cMswfPGfIQnjdWqvUtnBEqSw/cpET6QtcAFNnWDXXt8=
Subject key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B5F6BEC44BACDCE05F5EE615479A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48367
IP: 91.210.220.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5f:6b:ec:44:ba:cd:ce:05:f5:ee:61:54:79:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:df:71:5c:d8:5d:28:b4:90:37:67:0f:bf:
5c:ee:02:3e:f5:e7:f1:98:32:d2:c2:2a:e4:6b:1c:
c2:89:43:92:9e:17:72:b6:c2:84:26:d1:20:f1:ab:
c2:f0:4d:c0:1e:2e:da:da:58:e3:33:07:6c:85:80:
39:78:35:ab:45:b9:50:a4:68:04:81:7d:fe:29:88:
a1:b3:ac:0c:c5:98:70:db:ea:45:86:94:ee:6a:e5:
59:0b:3a:34:c0:a8:30:1d:e7:54:d6:9a:e6:b4:2b:
b2:b3:57:3d:be:98:0e:31:af:32:17:28:a7:2c:c2:
6e:25:1a:b1:e3:82:10:3c:85:2d:19:21:ae:f1:d4:
1e:f5:a6:6d:1c:5f:85:bb:34:48:bb:72:79:7e:c6:
d6:c0:01:05:1a:fe:02:9d:f7:81:6c:27:5d:00:66:
3d:8d:45:a2:1e:bf:dd:88:d0:e6:0b:bb:0c:af:aa:
5c:7e:85:90:8e:56:bb:9f:0e:3e:49:2d:06:80:b2:
51:24:a5:8c:34:7b:2c:7f:f5:38:f2:fe:6f:d4:26:
09:49:07:4c:99:b3:bd:66:fd:b4:4c:29:9c:54:7f:
19:6b:da:bf:71:84:28:18:88:f7:c2:84:3f:53:7a:
91:c6:69:a9:0e:86:a4:d9:ad:05:1b:1c:09:dc:9f:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.220.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48367
Signature Algorithm: sha256WithRSAEncryption
74:9d:71:48:49:40:15:29:c5:12:b2:15:b4:10:4d:23:ff:92:
69:8a:67:d3:bc:f2:3e:83:46:b3:e7:5c:88:46:c6:12:86:93:
59:5a:33:36:29:cb:f9:27:27:36:65:b7:7b:e9:db:91:1b:54:
c4:9a:61:8f:05:02:79:0f:a6:b8:26:f5:83:1e:76:c5:8a:d4:
49:00:24:28:d9:80:4c:85:db:67:89:ce:17:20:75:df:92:f0:
1a:33:03:4b:97:00:3f:0c:8d:1e:e5:a7:c5:2a:d9:a6:1e:1d:
b8:ae:69:e4:4b:09:81:57:e2:09:05:e7:ae:06:60:8c:2d:a1:
22:e2:59:39:5b:e4:ca:be:0e:ec:9f:82:88:ff:99:80:70:9f:
dc:58:a0:72:69:ba:ef:51:5d:a6:4e:19:7a:80:15:53:57:8d:
8a:b1:ba:24:a6:15:4b:2c:f1:21:8f:73:ba:02:68:37:34:55:
98:3d:51:b9:7f:ee:f5:94:e1:98:12:1b:c7:a9:86:dc:85:c3:
8e:3d:2d:a1:c8:91:05:e9:d0:d8:e9:ad:1a:36:ba:c4:3c:b2:
70:21:05:41:14:a8:d6:46:ee:20:7c:ed:09:54:b3:05:49:d7:
50:3c:91:a8:9b:5d:32:2a:a5:00:13:a2:0c:b5:db:90:86:6f:
eb:cc:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:14 2025 by rpki-client on console.sobornost.net