Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.cer (raw, json)
Hash identifier: OZRBtgpnxLV8yx7C9qes72vXT83TVOmBZqj8MAMxyk0=
Subject key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B24A2663F521775BAD5DD2927B500D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 64406
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4a:26:63:f5:21:77:5b:ad:5d:d2:92:7b:50:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:56:1e:a6:78:dd:7a:e5:48:3c:02:42:f0:
6f:42:c6:cd:d8:47:ad:8a:87:f8:ca:19:9b:91:a6:
63:cf:eb:73:f7:53:23:82:21:ac:82:f1:48:43:5c:
47:3b:35:dc:e8:b1:fe:b5:a4:e0:09:5a:31:6b:fd:
47:4a:6a:c1:f4:a8:67:df:c3:88:b3:72:76:af:62:
0e:b3:0c:17:99:0c:bd:57:b4:59:35:50:ae:3e:18:
60:a4:d8:aa:9f:d3:a6:87:3e:c5:dd:d0:c7:46:f1:
b0:28:ca:98:7a:bb:40:d4:18:d0:89:a9:db:c2:c4:
f3:43:44:33:cf:12:4b:f0:9b:a4:a3:49:eb:f3:c1:
97:d5:ae:89:53:99:e3:74:c8:08:2b:33:18:3e:cb:
67:09:89:6a:34:ff:73:66:35:a0:eb:4a:59:cf:b1:
38:c5:64:a4:c7:21:47:75:40:5c:54:ea:1b:ec:4f:
a5:02:92:ff:7c:57:2d:54:7d:c5:28:1e:76:e0:bb:
88:cf:42:0a:14:23:94:16:41:0d:57:fb:d3:4f:40:
dd:d6:8d:c7:d3:55:fd:e6:32:70:ef:30:87:03:04:
27:62:d5:6d:a5:04:9c:22:1b:48:09:37:44:51:4a:
9b:37:78:89:e2:be:d0:ac:f5:35:a0:5e:94:40:79:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64406
Signature Algorithm: sha256WithRSAEncryption
09:79:ad:27:7a:72:d5:2b:70:1c:e4:72:77:bf:54:12:46:d5:
09:f3:20:cc:f1:b2:5b:34:f3:e0:56:c6:a0:eb:92:51:61:2c:
d2:8d:4f:18:73:ea:3c:94:ab:b3:35:b3:f9:ae:23:4e:2c:28:
90:c0:55:f4:20:db:4f:7e:56:33:4e:bd:cd:02:98:2a:2b:a4:
a3:3d:07:74:b9:b0:2e:98:89:f9:0e:41:37:91:27:17:a0:b0:
84:01:a0:b9:4a:cb:32:95:18:a6:46:21:6a:48:f9:e1:f5:ad:
9a:ab:fd:de:20:50:fb:69:90:58:32:3c:ad:c3:60:bd:cd:5d:
f6:ea:f8:b4:91:56:0a:fe:a0:4c:9c:c1:ec:a1:47:07:a2:f9:
01:21:16:c2:21:d2:ea:09:e2:c5:e3:4b:05:4e:f5:2a:e9:27:
69:f2:72:44:47:7a:d4:35:7d:32:87:8b:c2:a8:bd:1a:af:0d:
93:58:82:8b:e0:77:00:81:1a:c9:55:7d:a1:2d:3a:dc:d3:b6:
03:02:e8:38:36:dd:bf:72:1c:b3:b2:70:3d:8b:5e:4e:3a:99:
f5:7f:d9:60:bb:13:a1:2b:ee:c7:18:bc:1c:b9:6c:ed:40:0c:
3a:12:cb:c5:a2:9f:01:a2:d6:ae:1d:30:40:fe:ad:4e:fe:ef:
1a:d5:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:33 2025 by rpki-client