Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0WvbquPjCjoSaBh8YiaL0w8wtLM.cer
File: 0WvbquPjCjoSaBh8YiaL0w8wtLM.cer (raw, json)
Hash identifier: I1p8eMdTWDlP/4q3+q7I+FoIbHTZkJbsChBMAz/rJ08=
Subject key identifier: D1:6B:DB:AA:E3:E3:0A:3A:12:68:18:7C:62:26:8B:D3:0F:30:B4:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C5917EB9BA88D73E13C1DCABF7F47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/0WvbquPjCjoSaBh8YiaL0w8wtLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59449
AS: 198923
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:59:17:eb:9b:a8:8d:73:e1:3c:1d:ca:bf:7f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d16bdbaae3e30a3a1268187c62268bd30f30b4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:26:a5:eb:2b:47:ab:66:d1:ba:79:65:79:
1e:8b:02:4e:f8:3c:4b:8a:18:bf:4c:b1:3c:bb:2b:
d0:9f:53:83:de:fc:2f:7f:44:7b:f2:db:5e:08:cc:
cc:65:02:47:68:c9:1e:cd:48:6f:8b:5e:68:31:af:
50:d9:4a:2e:22:91:f1:a8:83:7f:06:ca:9c:02:5b:
90:ee:ef:22:32:df:56:b3:a2:c3:74:a0:3b:70:13:
15:05:6a:e1:8d:02:d7:59:35:d6:18:00:f6:55:aa:
5a:b4:b5:13:11:bf:e6:96:2b:9e:fb:c7:2c:26:e5:
0b:1b:24:4b:e9:19:10:61:19:2c:e6:90:9a:b2:9b:
71:5d:a6:bd:d1:55:db:cf:f2:1b:9d:f1:2c:ff:67:
7c:81:3f:77:b5:f2:ad:0f:9e:1e:ae:17:6d:8e:87:
31:50:11:91:f6:06:fc:54:19:da:a1:2b:04:21:e8:
be:81:ef:a9:3b:60:3d:65:5b:13:95:98:d8:80:30:
8c:57:7a:68:41:43:c3:cd:d7:f2:f3:83:89:78:3c:
df:51:75:5c:06:d2:c3:45:8f:c7:e8:c6:dd:93:fd:
aa:7d:5e:8d:4d:9b:69:39:5f:92:3d:30:56:cc:28:
b5:b3:ea:fb:ac:d5:89:4f:1e:38:92:9b:aa:37:2f:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:DB:AA:E3:E3:0A:3A:12:68:18:7C:62:26:8B:D3:0F:30:B4:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e82c2-44ea-4ac0-a9c0-95d20cf9d504/1/0WvbquPjCjoSaBh8YiaL0w8wtLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59449
198923
Signature Algorithm: sha256WithRSAEncryption
11:8c:2c:7b:51:5e:d5:8e:15:a5:7c:42:65:59:bb:d9:0b:09:
97:91:f9:67:71:1d:df:fe:d2:6a:66:2a:c8:84:11:8d:9d:94:
2d:32:7b:a3:54:04:bd:48:62:98:65:f2:ad:6c:ad:08:91:df:
42:63:84:be:65:63:e0:10:3e:5a:71:3f:72:56:c3:a8:bd:79:
b3:6e:94:3b:db:2f:d8:95:84:56:24:77:38:fa:5a:e8:12:4b:
80:d9:ee:02:e2:11:49:d2:36:31:9b:24:62:ad:7b:cc:75:c7:
40:cd:5d:5d:6d:c7:27:34:08:e7:12:16:0f:3f:0e:e3:fb:c4:
35:ca:25:f1:f2:75:0d:ab:22:9f:57:d8:ea:5f:ab:f6:c9:72:
9e:5b:ca:a7:5b:18:27:ca:38:ba:fd:5c:70:15:62:c0:3e:1a:
93:69:3c:a9:41:e9:42:29:0b:dd:6b:77:f7:c5:d6:dc:8c:e8:
67:5c:3c:dc:b6:71:01:33:11:c1:dd:4e:b7:0f:cd:54:b1:16:
bd:ed:5d:b1:b7:5b:dd:1e:66:1f:0e:ea:5b:c9:87:01:1d:07:
70:66:ae:21:42:d2:15:b0:51:3c:66:99:22:fa:ac:76:1e:9a:
36:5a:e8:0c:24:13:65:e3:6f:eb:0b:66:ff:d9:68:b6:65:07:
fb:a8:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:56 2025 by rpki-client