Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.cer (raw, json)
Hash identifier: Gljvk5OyqCZ1HwlYrfLsuW9uX6jNv2vh6Sz9uc7R+X0=
Subject key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195EB19ED0DD84181D8388283A26057E9A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 31 Mar 2025 07:28:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60543
AS: 201939
IP: 91.238.150.0/23
IP: 185.57.52.0/22
IP: 195.78.82.0/24
IP: 2a02:5820::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:19:ed:0d:d8:41:81:d8:38:82:83:a2:60:57:e9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 07:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:73:79:fa:82:f2:fe:37:08:86:11:d2:4c:
ff:b7:f5:e7:49:ff:79:89:19:0b:87:25:23:92:4b:
f8:7e:ec:34:eb:ea:35:2e:6b:a3:53:a1:a8:bb:25:
de:e6:14:0b:10:6c:50:ed:df:da:c8:d0:2d:92:62:
06:ee:d8:de:4e:dc:a6:0e:4a:d9:62:83:73:14:1e:
45:7b:d8:ed:24:21:a1:e3:c7:d7:f4:67:50:28:14:
51:f4:0b:c5:b8:a0:da:0d:ee:68:5f:67:81:00:58:
4f:77:03:3a:3b:a4:7d:d1:45:70:c7:72:9b:51:49:
d7:84:97:62:3f:c6:ca:3e:0a:15:78:17:75:8b:f1:
72:0f:bb:7f:44:bc:ef:e7:dd:06:67:3b:a7:5f:f3:
85:90:08:57:af:a9:4a:99:f3:75:70:91:1a:b4:13:
ef:63:62:15:41:67:86:89:29:a4:28:75:86:8b:fb:
76:0c:e3:77:97:86:44:38:8e:70:fb:0c:1b:a4:74:
16:52:80:21:31:47:11:2b:1e:e6:4c:f3:ef:d6:10:
08:21:eb:4f:83:f8:23:20:22:ba:a2:84:b1:28:57:
0d:8f:40:71:c2:2c:73:d0:5b:c1:de:e0:54:d7:67:
ed:37:cf:99:cb:13:3e:c2:ae:da:bc:0b:40:ae:83:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.150.0/23
185.57.52.0/22
195.78.82.0/24
IPv6:
2a02:5820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60543
201939
Signature Algorithm: sha256WithRSAEncryption
a9:48:40:ce:f1:c0:f4:3d:5c:29:41:bf:8d:07:e5:f2:7f:ba:
a8:1d:df:77:0f:c7:c2:32:82:ea:88:cd:54:ca:34:7c:b0:45:
2e:e4:d7:61:bf:d8:f5:3d:c2:d6:e5:77:29:3a:64:4a:da:1c:
3c:3b:ef:d2:d5:64:85:b6:b4:4d:1f:60:e8:36:af:b0:23:10:
71:56:9d:9c:61:f0:1a:21:74:0e:84:7c:9a:47:0d:7f:d8:42:
a2:b7:6d:e5:4a:01:13:85:d2:93:72:90:b6:8d:d4:30:a0:2e:
6b:91:3f:d9:bf:6a:c6:d6:31:93:c3:ec:b7:46:fc:d9:2c:d4:
07:2d:c2:34:33:85:20:59:e5:d3:e9:00:4c:a4:98:9a:84:1e:
4f:b7:a3:91:19:8f:05:7c:2a:84:78:16:a8:b2:8c:6e:86:82:
5c:85:e3:95:b6:a5:76:2b:8e:eb:35:96:8f:cc:b3:8a:0d:0d:
bb:3a:29:bc:40:d4:de:ec:3a:2e:14:ae:50:cf:ea:ad:5e:9b:
43:30:d2:22:1b:18:80:85:fb:76:9e:b6:2d:58:78:dc:9c:78:
0a:3c:d8:3c:06:36:37:c7:e5:03:f2:cc:78:5c:5f:64:fe:79:
bf:ed:3d:b0:3b:49:be:76:e8:ba:cc:90:46:7d:a8:aa:eb:d3:
a5:9c:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:15 2025 by rpki-client on console.sobornost.net