Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0qJGL3IIsJcBO18hbWNDf6QB-3I.cer
File: 0qJGL3IIsJcBO18hbWNDf6QB-3I.cer (raw, json)
Hash identifier: c3/CS2IPHuXIQB29sXetMjV1j0ILct+VrEGYXCrbCME=
Subject key identifier: D2:A2:46:2F:72:08:B0:97:01:3B:5F:21:6D:63:43:7F:A4:01:FB:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EA0A0F7AC53B929826B5EB34608B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/72ac58-a9f1-4516-861f-7dbf50d7428c/1/0qJGL3IIsJcBO18hbWNDf6QB-3I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/72ac58-a9f1-4516-861f-7dbf50d7428c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201386
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:a0:a0:f7:ac:53:b9:29:82:6b:5e:b3:46:08:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2a2462f7208b097013b5f216d63437fa401fb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:eb:52:50:51:ab:d8:7a:a8:51:69:12:9e:
c2:15:44:03:90:ad:84:e5:86:be:c6:70:92:cd:96:
66:e8:c4:94:8d:5b:a5:fd:df:85:5c:85:a9:8f:a2:
93:74:65:3e:97:48:be:c1:35:ec:b5:6d:2d:b3:45:
7c:93:40:cf:d0:2a:ab:2a:d7:58:b8:78:4b:96:12:
0a:b9:50:7f:88:5e:af:88:a0:fc:b1:1e:77:8d:c6:
82:02:71:ba:8f:2a:47:4c:a3:07:7f:9e:5c:b4:0a:
b9:34:88:69:48:53:df:e0:80:04:ad:28:af:19:11:
04:04:26:63:85:b7:2c:3f:64:62:5b:0d:36:fa:6e:
64:7f:8d:da:fa:1b:a0:d3:02:22:36:fc:55:ad:f4:
04:a9:12:31:b9:44:44:bc:d2:9c:d1:d3:87:15:28:
81:7c:79:10:e7:ff:68:b1:51:e3:1b:4e:17:20:9f:
20:36:91:41:a0:24:a4:3a:07:6b:7f:95:71:52:38:
96:77:17:41:8d:3d:3b:a6:27:ae:b1:00:40:e7:b4:
9c:91:6a:e9:3d:f5:ea:5e:88:60:82:f3:03:ca:44:
15:62:9b:72:d5:05:d2:cb:f1:95:1f:36:13:8d:d8:
29:7f:1c:e0:f4:59:1a:8a:5f:3a:0f:f4:da:fb:eb:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A2:46:2F:72:08:B0:97:01:3B:5F:21:6D:63:43:7F:A4:01:FB:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72ac58-a9f1-4516-861f-7dbf50d7428c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72ac58-a9f1-4516-861f-7dbf50d7428c/1/0qJGL3IIsJcBO18hbWNDf6QB-3I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201386
Signature Algorithm: sha256WithRSAEncryption
03:67:9e:de:a5:c3:db:3f:4d:9a:8b:fb:56:a2:54:c2:84:f4:
61:b6:99:e4:c0:88:d5:f7:d4:dd:a8:db:fd:f0:c4:fb:0a:ed:
41:bf:dd:1f:64:cf:03:11:4a:1a:c8:ce:c8:ba:ee:c5:49:c0:
25:09:32:68:ed:a6:13:b2:0f:aa:47:55:18:66:73:a0:e2:88:
97:7a:fd:b5:77:90:f7:08:88:e2:aa:e2:d4:29:2c:c5:c8:e4:
0a:18:f8:6c:1e:b5:a7:08:c2:f8:f3:b0:df:f3:ec:08:fc:01:
fc:6d:df:7b:f5:23:59:a8:90:41:02:9c:3b:9d:77:d6:06:a5:
b4:6e:f3:0a:18:66:bf:58:d5:95:1d:ec:e8:43:d7:44:0c:90:
3f:5c:33:1d:71:9b:e4:d9:43:7f:00:a8:9f:f9:14:4a:62:bf:
20:86:3a:27:07:fe:3b:64:64:bf:8f:bc:c8:1e:c3:2c:3c:fe:
01:f8:76:79:b6:39:97:98:f7:eb:66:d7:43:d9:0d:7f:b1:57:
f8:64:e7:04:af:d6:a1:f5:23:28:4e:a7:37:e0:31:8e:49:e7:
18:33:6e:5f:fa:d0:c5:e2:1d:c5:4d:fe:e2:1d:bb:4d:d0:e7:
4c:e9:52:31:93:75:dc:4a:71:ca:88:34:96:dc:eb:99:a2:ba:
08:06:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:22 2025 by rpki-client