Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer (raw, json)
Hash identifier: AUHMy6QN8uvH+60VBlLQYLO92QFsLqghgwbELedjTvQ=
Subject key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D661C16A2934233E15BF5005300AAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212405
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:61:c1:6a:29:34:23:3e:15:bf:50:05:30:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:e2:aa:a7:5f:b1:e4:c4:cd:ba:8c:78:ba:
17:4a:45:5a:26:23:57:31:09:ad:d4:c9:5b:fd:e9:
88:8c:70:fd:a2:a3:92:8f:23:78:b1:9b:1b:69:99:
cd:42:92:7c:d9:c8:89:83:8d:4f:2a:59:7e:23:70:
9d:38:c4:1f:1d:f7:30:60:fa:90:0d:9d:14:ee:0f:
7b:0c:d2:53:72:67:df:f1:99:96:81:d9:d4:6c:8e:
91:f1:1f:2a:70:44:43:65:2a:98:b4:9e:66:e4:eb:
30:bb:e0:b2:25:4e:bf:e1:61:4f:da:b4:be:82:a2:
31:9c:73:d9:6b:bb:2f:87:75:11:4a:60:1a:7a:b7:
d3:93:19:da:2e:0b:04:22:1a:23:75:7e:33:29:f5:
df:09:a5:79:0c:45:8b:6d:27:c9:23:9d:a4:03:3a:
c4:a4:2c:10:1b:46:b6:55:e7:ec:68:47:fe:00:87:
fc:53:b5:ad:4d:44:d0:14:4d:4f:99:98:a1:06:71:
22:7b:2f:aa:10:d4:2b:ae:43:dd:b6:5a:bb:40:c0:
12:dc:3f:cc:ff:63:7d:05:f5:eb:25:e4:fc:0f:2e:
05:eb:e5:39:aa:4c:d9:b9:9f:64:7a:f7:30:fc:ea:
4f:a9:c4:e3:2d:47:02:18:e1:de:f6:42:39:ca:01:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212405
Signature Algorithm: sha256WithRSAEncryption
9b:c6:99:a6:da:bb:e5:b6:50:7f:d8:91:7e:be:f1:94:96:cb:
93:87:ef:35:05:ef:5f:43:73:15:83:5b:4b:19:4f:e7:46:05:
92:b4:f1:58:3f:ad:67:b6:c7:15:a1:6f:82:7b:33:f9:42:fb:
c0:53:a1:8d:07:ab:43:81:8b:1f:df:9a:8d:91:62:d5:e2:9d:
08:be:85:03:95:53:8f:bd:5b:4d:2e:48:ac:39:6d:6f:6e:bf:
64:fa:5f:22:6d:84:ef:70:29:07:93:e5:bc:70:d0:28:97:da:
89:bf:8f:6c:44:cc:ac:21:ac:6e:f3:22:1b:69:a7:40:33:39:
a5:0c:39:de:3f:da:5d:54:11:fc:9a:76:6d:0f:55:a9:06:37:
49:56:8e:ce:ea:c0:b9:36:39:7e:ee:fa:3d:a3:1b:17:db:ad:
c0:f7:f6:56:17:26:b0:64:89:08:f2:91:80:d4:33:1f:c2:1e:
81:e3:45:00:f9:6a:e5:74:79:29:07:53:7e:64:03:dd:04:53:
66:f2:1a:40:dc:f3:01:0e:c2:b9:ff:76:ab:19:d6:75:15:72:
a5:05:10:84:fb:3e:24:d5:75:43:fc:aa:f5:a9:b4:27:a2:b3:
eb:f0:3d:f0:14:85:91:b0:87:95:cd:b8:e8:df:aa:4c:d1:12:
1f:4a:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:00:53 2025 by rpki-client