Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
File: 03o_Gc-XFmpEQiB-Em8qA7bL65g.cer (raw, json)
Hash identifier: EfPNeTARd3KJtE9Hw6jM4ckTv3fSNKhYwPvX7p6xj+0=
Subject key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2BC381223B8E9AE77DB5F09BF8FE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204873
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:bc:38:12:23:b8:e9:ae:77:db:5f:09:bf:8f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:f7:df:50:74:92:ad:b6:6a:d1:dd:18:b8:
50:98:d6:d5:02:12:3b:3e:ad:cf:37:d8:42:2d:da:
e5:7a:8a:b5:3d:39:52:01:6a:1e:e5:de:de:eb:20:
15:3a:16:98:94:c5:ab:25:1c:81:f9:13:96:79:f8:
b3:93:88:c8:88:7f:af:92:72:5e:a8:a3:cc:94:a4:
22:d3:a6:cb:e5:62:52:e2:78:0e:65:7d:e2:f8:19:
0e:ec:ed:af:56:4a:4a:4e:0c:dc:76:7c:02:e8:3f:
d7:dc:fe:2b:b7:66:4e:c6:2e:20:1f:2f:85:c9:76:
14:9e:2d:b8:eb:7f:08:fc:63:10:3f:bc:79:02:98:
20:4a:e4:6a:bc:06:2b:7d:8a:6c:f9:64:fb:ca:7f:
16:ed:50:c4:e5:71:75:51:74:f3:25:c0:95:9a:97:
68:8f:e9:af:7a:92:bd:38:a1:4f:63:31:5c:33:5c:
7f:cc:aa:96:d5:c7:b6:d1:73:57:05:cb:da:8a:02:
26:3c:23:55:27:bc:6d:ae:2c:d1:3e:96:1f:6a:2c:
67:6f:a9:54:56:83:29:1d:ed:c3:1f:5c:1b:ce:10:
e2:91:ed:f3:63:4e:a7:1d:8b:f1:46:3b:8d:3a:55:
32:f6:b0:23:73:82:8c:fe:63:b3:bf:46:d6:c3:04:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204873
Signature Algorithm: sha256WithRSAEncryption
a2:42:1c:8a:6e:c8:0a:a0:d5:bb:05:4e:bb:2e:a4:dd:d4:d1:
c6:be:c9:b8:55:a1:b8:13:d6:7c:60:ad:b5:74:51:bc:49:31:
a4:4b:b2:22:0d:ba:32:c5:67:5c:60:b3:28:14:3a:80:54:64:
ec:7e:00:1f:37:9c:4b:bc:bd:f2:fe:bc:03:9d:fa:7a:44:ad:
a4:f0:dc:ca:6b:8c:f5:ec:5c:7d:bf:cd:0c:52:39:be:f1:5b:
bb:94:8f:1f:82:2b:02:57:b7:55:43:a4:56:33:27:36:58:23:
75:2e:1f:20:62:b4:aa:ba:93:28:10:69:3b:ec:cb:2c:f1:29:
81:cd:3b:c9:16:9c:26:7a:7a:53:7e:c9:a1:55:8f:21:44:bf:
ab:10:3a:9a:eb:ef:da:43:9c:53:5d:85:d7:36:93:41:00:67:
ba:be:3d:3a:84:b4:6d:02:45:8c:b1:69:dd:e5:cb:c0:9d:6b:
4c:d3:da:05:29:a4:f6:d8:cc:5f:d4:fb:74:01:b8:d0:5d:7a:
ec:ad:1e:f9:fc:f2:17:c1:ab:7e:30:a4:f7:54:6a:7e:2d:a0:
4c:f0:68:ac:45:ac:66:db:f2:fa:82:fe:60:21:9d:c3:0e:8a:
80:f6:86:3f:fa:95:e1:21:e3:05:d4:7e:bf:e5:3e:f8:85:00:
94:f3:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:15 2025 by rpki-client