Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
File: 0XSpf-m-DvYs3ln0GppfCZGCkUc.cer (raw, json)
Hash identifier: mwIGcoDOOF2gY+0rwgp+YIP9sECleE3quJbJlS7bEAo=
Subject key identifier: D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FBB74EB8F67D067C09304A8226BD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42101
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bb:74:eb:8f:67:d0:67:c0:93:04:a8:22:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:39:3b:f9:85:57:58:91:29:c6:f0:82:15:
e6:59:1f:de:37:e6:21:39:3a:af:30:e0:c5:ee:da:
d8:0b:7f:c7:77:66:12:96:f8:5b:75:7c:02:5b:ba:
94:c4:ba:bd:58:ff:58:d7:85:15:71:13:2b:17:08:
58:96:95:db:28:e1:ba:10:db:00:9d:de:c9:a6:e9:
6a:53:46:ef:00:fd:ad:71:d8:3d:19:21:f4:8a:09:
08:88:f5:e9:e5:23:08:37:c7:e2:ec:45:ab:10:bb:
87:0b:72:c9:41:ec:73:48:4b:b1:91:42:67:ff:c3:
45:fe:40:6b:fe:7c:c9:59:e1:a5:cc:16:40:05:a3:
04:59:58:54:3d:e5:6d:e7:94:ed:6c:92:05:b6:5b:
53:d9:9b:6a:9e:d8:a7:6a:c6:fb:1e:be:28:f2:87:
6d:86:24:6a:35:63:32:46:b7:04:f2:19:ac:1e:12:
db:85:16:07:f1:3a:f2:33:0f:d7:49:2a:0b:9e:69:
2f:b1:76:d0:71:d1:aa:7a:1b:8d:fb:b1:4e:d8:7a:
45:53:63:6c:79:32:ed:f9:6c:36:d6:4d:30:da:fd:
ba:88:18:ab:a1:08:38:bd:17:1d:4d:91:33:6d:1b:
4c:72:6a:1d:8e:d3:f2:db:82:49:99:79:47:25:9e:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42101
Signature Algorithm: sha256WithRSAEncryption
4c:d2:0c:86:92:77:ac:5c:da:52:2b:f4:08:60:6c:60:61:8d:
4d:cd:ec:c7:c8:27:1a:0e:8c:d3:b4:f9:09:82:90:0e:1c:c4:
13:94:55:cb:49:26:05:5f:cd:bb:e6:e5:90:a6:78:f8:f1:6e:
2b:e7:50:03:49:ab:8f:34:d4:d0:37:1e:fc:58:05:e0:68:da:
d0:05:47:8c:14:ff:22:c3:f2:ad:c2:1b:53:2c:d2:86:3b:34:
f6:a4:6b:c0:76:fc:51:d4:14:dd:8f:8c:4e:27:34:fb:df:02:
4a:bb:31:bf:4b:c0:39:87:45:ac:bd:f2:b3:ed:af:c6:5f:8e:
db:ba:3e:a5:3d:54:b4:b9:d8:27:15:08:53:42:94:b0:4b:b1:
92:87:19:4d:89:52:96:0e:1c:95:e7:30:71:ca:58:5a:7e:35:
63:4d:72:b3:91:d5:d2:21:32:f2:68:29:d3:c8:93:7b:70:6e:
82:2d:4c:4a:c0:cd:fd:21:b2:14:1a:35:7c:0b:4f:1a:25:06:
d0:46:8b:19:77:c3:99:2a:60:97:f5:da:cf:d1:7c:0c:da:c8:
e2:5a:9d:fa:6c:25:98:ad:47:48:8b:34:82:e5:45:13:78:e4:
1b:3f:58:a7:02:47:c4:4e:15:7e:19:99:1d:2c:f2:b7:89:3f:
0c:5f:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:57 2025 by rpki-client