Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.cer
File: 1-WErnfLI5FutC5Dbr1C_Ivnpjfo.cer (raw, json)
Hash identifier: BCoYxqzCaMBp0PUJzi97P88FiGcW08HIH3hJI/trGXo=
Subject key identifier: F9:61:2B:9D:F2:C8:E4:5B:AD:0B:90:DB:AF:50:BF:22:F9:E9:8D:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427488704E13643896BBF9AB5B515C303
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215998
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:87:04:e1:36:43:89:6b:bf:9a:b5:b5:15:c3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9612b9df2c8e45bad0b90dbaf50bf22f9e98dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:0e:fa:89:3a:d3:ea:0d:86:8a:d2:07:72:
8b:0d:3b:d3:7b:5b:09:0d:d8:4d:89:50:5c:4f:16:
c4:e3:73:01:53:2f:82:5d:bd:29:1f:ef:3c:d8:61:
14:61:4c:c3:35:b6:2c:a7:6f:5d:76:a7:73:50:a4:
17:2b:1e:5f:84:4a:3d:e0:28:98:19:94:0d:c9:4c:
f1:2f:a1:de:a6:8a:6b:f9:24:9d:23:a7:6c:22:33:
c3:80:1f:c1:b3:be:ca:42:b0:a1:61:76:ab:a2:ad:
d7:94:1c:b6:f2:22:d9:03:e9:2c:15:3a:22:9c:84:
46:90:56:23:51:f0:cc:02:a2:19:8a:78:e5:6f:0f:
0d:fc:c8:20:61:22:13:a3:b4:2e:75:c8:2b:b6:e2:
7a:09:02:21:29:2d:88:c5:9f:40:36:b3:e7:25:6e:
91:db:05:38:e8:95:14:0b:1b:1c:ee:09:bd:47:95:
ff:12:75:8b:80:03:23:16:fb:a2:c8:87:da:0d:6b:
e0:3c:dd:73:e5:60:b8:a2:69:5d:67:24:cf:ce:3c:
dd:78:ac:c1:96:a2:c0:4b:c6:51:b7:2d:cc:69:22:
4f:d1:a7:5c:54:af:45:17:13:40:74:65:ef:81:db:
09:b6:5a:bb:65:24:d9:00:ee:49:b4:98:ea:5f:3c:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:2B:9D:F2:C8:E4:5B:AD:0B:90:DB:AF:50:BF:22:F9:E9:8D:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1054e1-dc73-408d-bff1-3fd0c2edafdb/1/1-WErnfLI5FutC5Dbr1C_Ivnpjfo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215998
Signature Algorithm: sha256WithRSAEncryption
6a:31:d2:89:0f:e3:bb:a8:f8:ad:ad:42:9d:cc:0b:3a:bd:d4:
4c:67:3b:34:9e:89:5c:55:ba:65:16:b9:ad:c6:ad:1c:7c:80:
a3:d9:f0:38:07:63:f9:0a:28:92:1c:66:33:a3:59:3b:ca:29:
b0:d9:ff:5d:5e:04:6d:0f:40:37:06:27:49:08:da:f4:ca:d1:
79:06:4d:6d:a5:94:e1:e1:7b:92:78:3a:b6:b6:c0:1e:8c:70:
f2:83:4b:56:0c:9a:55:b0:b6:54:d4:fb:53:e0:99:a6:5e:06:
0e:6f:ec:d7:dc:0f:e9:85:89:c9:a7:4d:34:18:94:ea:9f:07:
57:4a:e6:7c:03:06:3f:c0:9a:bd:54:a8:d6:32:38:5e:b3:61:
da:e8:91:16:16:a7:77:c9:37:7e:4c:90:33:8e:1e:cc:c5:ac:
1d:0e:9d:ca:35:24:a2:72:64:6e:ef:3d:1f:14:06:8b:fe:9d:
bf:40:46:62:50:75:27:30:e2:23:45:f5:4f:37:28:ec:1e:9b:
6b:20:85:f5:f6:6c:8b:ec:c6:ea:61:39:39:0a:fa:40:68:07:
14:47:41:20:ab:fc:fa:d0:ff:67:e1:b0:f1:8f:a3:f0:b3:54:
88:46:10:95:af:56:86:86:20:c2:48:03:b4:8a:d7:18:97:01:
5c:3e:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:24 2025 by rpki-client