Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.cer
File: 1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.cer (raw, json)
Hash identifier: Qm1wcCcmmdHl/CevUV+YXoWlpx8WFq2qWOxD9t+mc4g=
Subject key identifier: FB:BB:B7:63:8C:07:41:A3:43:A3:77:9C:DB:70:9A:04:AA:B4:15:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D732C2153C32AEBFB58C72CE92C4FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215228
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:32:c2:15:3c:32:ae:bf:b5:8c:72:ce:92:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbbbb7638c0741a343a3779cdb709a04aab41554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:5d:d9:51:dc:a3:b1:f4:a2:3a:9d:d1:30:
1e:0d:43:28:6d:fe:53:99:c4:39:fa:12:71:ee:7c:
a8:75:45:cc:40:38:b9:97:33:8b:85:83:60:25:85:
c2:0b:d1:37:76:c7:d7:ca:24:8f:3f:53:1e:c7:49:
2b:38:06:df:93:e8:53:bb:b5:a8:14:cc:6c:c9:7c:
35:19:21:c5:d2:5d:38:a7:49:44:3d:ef:b2:4e:b3:
e0:52:e3:d0:11:ea:11:82:e2:1b:fd:8d:c9:03:d0:
22:f3:24:dd:59:e3:bc:13:d6:94:21:e5:b9:de:34:
5b:f8:06:ec:7f:3e:e5:44:48:a9:fe:1e:23:ad:f5:
0e:3b:9e:ca:1f:fb:4a:01:e2:f1:bf:ef:65:fc:4e:
a1:2c:b2:18:d0:d4:88:78:0b:c1:de:db:b7:e0:e4:
38:08:31:96:91:d8:77:8a:a7:a9:59:d9:07:28:37:
21:22:95:83:2c:7a:19:b6:b2:34:bf:7c:43:a7:0e:
ac:bc:de:4e:fd:b0:68:02:d4:fe:c0:fb:0f:83:cf:
af:6b:24:dd:15:da:57:ac:11:2f:56:bd:86:68:ea:
0a:6f:8c:3d:e6:97:e0:36:9c:e0:66:84:bb:59:6a:
fb:49:43:7c:e9:6c:35:c3:48:e8:cc:70:b0:7c:b0:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:B7:63:8C:07:41:A3:43:A3:77:9C:DB:70:9A:04:AA:B4:15:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/445602-fe77-41cc-a687-10d6058b4761/1/1-7u3Y4wHQaNDo3ec23CaBKq0FVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215228
Signature Algorithm: sha256WithRSAEncryption
1a:47:a0:98:c9:21:74:30:90:1c:eb:6a:4b:36:fb:a3:f5:d0:
a2:54:38:b5:31:b4:7d:a0:de:60:a1:f1:30:7e:5d:75:dc:e1:
a9:6f:b4:03:d8:2a:f8:02:85:58:f5:29:bd:38:7a:43:07:61:
f0:e7:72:d0:18:1c:a1:94:ca:50:a6:6a:23:54:f2:eb:6a:a3:
a0:af:e7:38:05:82:65:9d:89:f6:ed:d6:51:fd:5d:a0:1b:3b:
96:00:59:f7:a6:79:54:ff:3e:bb:63:70:ec:35:ed:b4:93:95:
4b:ef:2d:d0:68:a9:c7:6e:65:07:81:14:5a:41:5c:75:99:4a:
5d:74:a7:b1:2d:51:32:21:05:92:4d:36:8a:ce:37:b9:f3:2f:
49:57:b4:23:b5:52:9a:3d:47:f9:25:c3:0a:87:00:d8:30:db:
1f:f1:a6:6c:40:d3:a5:bb:6a:8d:f7:d5:5b:44:37:62:37:6b:
2d:a1:48:00:c4:9b:6b:99:f7:08:a5:d4:51:62:3e:cd:31:21:
71:27:1f:90:7a:9c:8d:87:fc:ea:6b:1c:0d:ec:14:3c:a5:70:
3f:40:16:ad:90:e3:b2:f0:a0:1b:49:19:6d:17:9b:2f:19:b4:
91:18:f0:4a:65:32:18:e8:58:f2:84:e7:34:1f:ce:ff:04:f0:
85:a4:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:26 2025 by rpki-client