Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
File: xP8jscNxNS85tz05pOB_jKmMzWc.cer (raw, json)
Hash identifier: h5yQlyZc4lxdUqbQWz7oLwgdpK+ngSLE3QaSlwGr2Us=
Subject key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FBBC620B3EAA9BB062462D25388B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21110
AS: 47448
AS: 56775
AS: 196775
AS: 205772
IP: 2.58.8.0/22
IP: 31.222.48.0/20
IP: 91.235.119.0/24
IP: 93.191.192.0/21
IP: 147.189.164.0/22
IP: 193.169.30.0/24
IP: 2a10:cec0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bb:c6:20:b3:ea:a9:bb:06:24:62:d2:53:88:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:bd:6a:23:f4:37:5a:45:81:f6:d8:b5:ca:
04:8e:5c:fc:dd:f3:91:b1:2e:c7:19:88:11:b1:79:
b1:19:a3:c7:2b:45:2b:61:a2:47:37:2a:c4:f6:05:
d6:21:de:0e:c5:8b:08:17:ed:5c:65:e3:76:92:8f:
34:3b:cc:2a:6e:d8:21:80:ae:8c:cf:0c:c1:11:38:
b0:55:32:56:a2:f3:60:77:55:88:6a:7e:60:e2:be:
7d:fd:a7:32:29:aa:85:97:b6:8e:66:46:52:75:b0:
3b:db:e8:35:81:b3:52:83:29:36:53:ae:f6:13:5b:
4a:59:c9:e7:e5:23:4e:03:32:ce:91:e6:14:06:56:
79:03:b3:5d:b1:bd:42:f4:f1:39:c5:6c:95:95:cd:
f9:61:ad:58:95:10:b3:4d:eb:0f:b0:4f:c4:eb:cc:
04:67:36:7a:19:b4:38:62:54:e4:78:a8:f0:d8:c9:
c7:40:4f:75:46:06:7d:8c:d3:bf:d7:79:ad:c1:86:
91:f5:6c:8a:3f:a1:36:4d:f6:5a:7c:66:5a:9a:aa:
c8:c6:7d:62:a6:95:0d:48:ec:9f:b8:94:54:16:95:
e6:30:97:72:28:c8:44:df:c2:bc:b0:24:82:0b:76:
8e:90:bd:4e:53:58:b1:3b:40:69:c5:e8:8e:69:1e:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.8.0/22
31.222.48.0/20
91.235.119.0/24
93.191.192.0/21
147.189.164.0/22
193.169.30.0/24
IPv6:
2a10:cec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21110
47448
56775
196775
205772
Signature Algorithm: sha256WithRSAEncryption
2d:98:a1:5e:13:f1:53:ea:71:43:d8:fe:ea:b9:46:50:4f:6d:
74:0d:1e:af:52:f0:b7:1a:b4:59:f4:b5:db:b5:f0:cd:b6:f9:
4f:66:5b:c1:32:51:69:49:3b:97:c2:d9:40:b3:5c:10:94:6d:
17:00:7c:15:ce:d6:2a:72:e2:aa:4d:2f:77:19:18:ba:d7:dc:
bc:ef:b4:8d:43:65:91:2d:37:0c:2a:0f:ce:1a:ea:13:5b:93:
28:70:2d:cd:ab:7b:99:59:18:7b:37:b7:3a:42:af:48:9c:d9:
0a:b0:e5:40:f1:0d:be:f5:ad:d8:0d:c9:81:c3:74:77:38:2d:
3d:a8:4e:50:8e:ec:b2:0c:3d:52:9d:94:25:a0:80:7d:f3:d8:
75:eb:71:f1:a9:ad:9e:0d:e8:b7:fc:24:45:c5:b8:34:b9:6e:
e2:a7:c0:c6:5a:e3:e4:96:f1:31:00:6b:8a:85:a8:0b:a2:3d:
0b:57:da:bc:78:c7:eb:69:df:5b:a4:73:52:ba:3d:0e:85:a0:
8c:8d:a6:82:30:c0:f7:81:9b:a4:f8:03:20:8d:39:0e:f9:75:
bf:b0:5b:73:cd:0a:da:d6:71:b4:09:28:b2:59:a1:18:4c:29:
83:2d:32:f2:87:ee:3d:83:8b:d5:e0:e6:34:fc:8e:1b:06:f9:
c5:65:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:16 2025 by rpki-client on console.sobornost.net