Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.cer (raw, json)
Hash identifier: ip7Ja7TiU4S6jd4I/BWMQA2PwmxS7ylZOm1nXaZFRUc=
Subject key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F670975BB75EAF6255026851838A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197369
IP: 46.16.40.0/21
IP: 188.240.4.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:67:09:75:bb:75:ea:f6:25:50:26:85:18:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b5:d3:b4:89:f0:3d:a4:42:05:67:fc:5d:0d:
2d:01:b0:96:cf:81:ca:63:f2:72:aa:9f:62:5c:32:
57:1e:30:b5:a2:48:ff:44:39:a7:0a:f6:28:17:cc:
ee:5c:ef:32:5d:6a:62:3c:c2:03:bc:33:56:c2:b1:
02:1f:f6:3b:02:d6:76:48:07:6d:f1:72:c2:0a:0e:
ee:d5:4d:54:4e:5d:44:e8:34:2f:8d:7c:39:0c:06:
ca:e4:96:22:e7:58:bf:41:43:2f:1d:0b:03:56:cf:
90:5a:01:36:63:15:24:f7:26:73:de:6b:76:e2:67:
4c:04:74:50:2f:1f:fb:12:08:00:fa:7f:b6:c5:5c:
e4:ab:f7:d9:0a:90:47:56:ce:0f:27:d3:50:fb:ad:
77:ce:d9:fc:8f:90:ab:bb:0e:54:fa:83:e9:22:ad:
b0:0a:be:2d:1d:e7:59:21:50:2e:b3:db:e7:49:d7:
c2:d1:c1:17:31:56:f4:4c:8e:18:61:c0:92:8f:da:
e9:b8:b4:00:92:80:1e:0b:3d:2c:f4:5b:04:23:7b:
e0:d8:1b:cd:6d:ec:e1:09:6e:2c:96:82:34:78:8f:
57:fb:fb:f6:8b:b4:13:22:e0:f1:c5:33:fc:af:bd:
80:67:fa:34:1b:4c:1a:22:a8:c3:2d:51:b8:dc:fa:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.40.0/21
188.240.4.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197369
Signature Algorithm: sha256WithRSAEncryption
53:2e:c3:29:db:1e:93:c8:85:16:a0:35:24:a1:ae:5c:a6:c5:
ad:90:cb:fd:03:c3:f0:4e:d4:12:e9:42:58:7a:69:9c:25:3a:
3d:c5:f5:5f:4d:3d:a2:41:2a:75:28:d4:05:3b:20:54:81:a7:
8e:3f:f5:44:07:56:03:a7:5e:61:14:63:33:b8:c5:93:1d:9c:
17:43:c9:69:75:3e:67:06:26:47:4a:16:7e:01:a7:7d:57:64:
78:d7:17:c1:b4:52:41:3f:b1:28:11:3c:93:0b:4f:02:31:9c:
e7:54:ab:c6:fb:d8:18:f4:6d:c4:a3:27:0e:5a:05:d3:d3:08:
02:ec:32:96:4e:e9:71:ee:dc:1c:95:31:e1:8d:97:90:0a:ab:
f3:95:dc:76:2d:dc:a3:a9:7f:c0:de:61:37:b9:e9:6d:12:50:
44:85:8d:0c:7d:f7:70:f0:07:9c:95:a4:ae:cc:42:d7:ef:9e:
7f:03:e7:52:22:fb:17:33:79:8f:af:6d:52:8e:44:c4:ba:fd:
0d:10:a8:f9:f0:06:ba:61:44:2a:83:41:7d:61:c0:2c:63:4c:
e1:e9:73:0c:9c:a2:56:51:ec:64:69:3f:1e:55:08:01:96:2e:
00:b0:eb:73:e0:9e:0f:f9:01:8c:cc:30:69:06:bc:6c:05:e2:
ef:ac:e6:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:18 2025 by rpki-client on console.sobornost.net