Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer (raw, json)
Hash identifier: YoVG14GfxejPuTL0Tf8FAr51lzN4a0eJ8mQd83bguC4=
Subject key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FCFDE9059CD530CE7EDBFB87F62C53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211527
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:fd:e9:05:9c:d5:30:ce:7e:db:fb:87:f6:2c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b770160553760c3567df51a847ed6c529c0789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:39:68:4a:83:bb:44:1f:14:02:5b:86:02:
b6:66:29:23:55:02:4f:7f:d6:71:5a:0f:df:cd:ae:
85:2c:13:e0:8b:63:94:49:cd:2d:00:0a:1a:15:41:
8e:98:fd:cc:5b:21:dd:44:45:f1:3c:3a:ab:58:94:
6e:9f:7d:b7:b5:a6:b4:c6:72:d5:a5:82:75:a7:6f:
d8:74:41:46:5e:88:71:dd:33:12:bb:1b:57:9e:9f:
c1:dc:d7:3f:b2:42:0b:fa:fe:32:b1:fa:77:ca:16:
2d:ab:47:fe:0f:0c:bf:3d:41:f0:4c:13:5b:13:e7:
e4:05:c0:28:72:4b:51:f3:42:e3:00:82:06:b6:22:
20:92:e2:03:79:74:ab:0f:10:8b:40:1d:72:fa:a0:
16:77:6c:45:4b:6c:a2:26:59:fc:05:5b:f8:e9:5a:
35:cc:a4:e8:8c:7b:76:90:fb:b1:f8:9c:86:0c:39:
1a:84:73:f6:59:45:74:8d:4c:fe:03:f5:91:e0:13:
63:fa:9d:5a:7d:0c:1b:18:98:a6:90:b0:1e:57:6e:
5c:45:db:48:2c:be:42:33:73:24:09:15:ae:d1:6c:
83:a0:cd:f8:86:31:78:7d:79:ed:c2:68:e0:8d:1b:
3d:1f:86:9f:62:35:f7:01:ea:6c:75:90:fb:70:0a:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211527
Signature Algorithm: sha256WithRSAEncryption
13:08:73:30:64:58:66:d6:50:2b:08:b2:a4:d9:53:74:3b:4d:
61:d1:26:2a:f8:01:d9:bd:df:85:65:ec:b7:50:46:ce:2c:6c:
08:5e:5c:5b:15:5c:f5:2f:de:f7:65:11:4c:15:76:a5:d2:b2:
3d:94:08:b1:68:66:88:27:56:ed:31:fd:29:b5:d3:90:7e:f2:
f2:4c:dc:ce:ba:4a:c3:88:76:42:ea:17:22:dc:17:c2:c2:ab:
7f:7e:62:c3:52:b1:a6:ea:18:cf:c6:42:58:de:f6:9f:62:5e:
75:eb:3c:0f:ea:6f:c0:b3:a4:55:5c:00:9e:76:d0:d3:fe:9d:
e5:e2:87:e0:6e:9d:98:4e:a3:7d:87:96:70:b6:91:49:0c:ee:
71:93:63:3d:25:ef:86:48:76:13:c2:35:ac:af:3e:aa:cc:61:
d9:9f:13:8b:a2:71:6b:a1:de:06:50:66:08:3c:b0:d5:88:92:
0d:4e:2b:a8:57:3c:04:9a:b8:84:8b:37:58:fd:5b:aa:4a:2e:
4a:cf:6f:7c:0f:de:71:ea:98:9a:7b:7a:27:2e:f1:ef:e2:82:
3d:58:e6:2e:a5:61:fe:56:99:d7:61:2c:c9:c7:fb:d7:61:7c:
8c:27:eb:1b:04:5c:35:55:fd:54:3b:d7:f4:7d:05:48:f0:e5:
1d:e3:05:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:16 2025 by rpki-client