Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.cer (raw, json)
Hash identifier: V4FJc3UQ9m3e39796hFiq5osK/yHykxqu9pBa9kRoTQ=
Subject key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C62C299AD06879DC021EA9EF54849
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207662
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:62:c2:99:ad:06:87:9d:c0:21:ea:9e:f5:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:66:55:e7:37:6b:ec:b0:30:b8:f0:30:4c:
27:ec:f4:e6:69:22:4b:20:71:2b:89:08:50:c9:51:
b6:3c:fc:7b:6a:9e:6d:d2:9c:b4:08:1e:db:dc:2c:
c4:3f:46:4b:41:61:97:d5:64:eb:7c:ba:b9:81:ca:
48:01:bc:c0:0d:ac:04:4b:77:49:ac:78:5f:c7:e4:
72:28:84:0a:30:8b:af:d6:c4:28:3a:c1:80:92:65:
a0:08:87:34:bc:e7:be:37:1b:d1:a1:1b:fc:5b:02:
9e:e6:12:fc:cf:ba:2c:44:e8:74:43:a5:51:8d:f0:
d5:44:40:00:fd:b8:d4:ff:8b:3f:73:5b:b8:16:97:
68:04:29:07:21:79:66:05:81:13:57:ff:63:e9:a6:
5b:36:c7:98:92:d4:b0:8f:dd:d1:34:69:08:58:e6:
8b:83:14:3f:a6:11:6d:ee:49:71:db:ee:bf:2f:e1:
11:4b:87:a0:be:a5:b7:f8:3a:14:9d:d8:0b:58:7b:
64:4a:0a:42:c4:dc:1e:8e:30:03:20:13:c4:b5:c2:
d3:52:58:0f:45:9b:bd:e9:29:68:8d:36:0f:08:1a:
0a:60:98:72:51:7d:0c:2a:43:a1:20:a3:1c:4c:34:
f9:e1:79:16:86:bd:20:83:4e:71:59:ed:f2:37:3f:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207662
Signature Algorithm: sha256WithRSAEncryption
7f:eb:86:3a:a9:03:56:36:87:86:66:f8:2c:0d:58:18:78:d3:
c9:d1:eb:9a:6c:14:e1:de:4d:f1:a8:e6:20:22:fe:4f:cf:a4:
4b:65:21:f1:49:07:4c:2d:10:b1:45:05:4f:b9:b4:f5:0c:e6:
28:6a:5e:0d:9f:e6:ef:65:28:e6:53:09:27:32:46:2b:e1:18:
da:aa:3e:62:6a:aa:94:b9:05:eb:4d:4b:23:8f:3d:c9:27:bc:
83:54:a0:2a:f4:19:b9:92:3f:28:f0:f1:b4:3f:c6:21:99:6b:
d8:a4:9f:fb:4e:df:56:70:41:ff:b2:10:7c:c0:e1:ed:7f:0b:
af:fc:7d:6b:9a:38:97:5d:7e:da:50:d0:38:2f:13:7b:bf:9f:
da:84:2a:c9:49:8d:cd:cb:83:27:22:77:ae:db:14:7d:06:43:
2b:49:aa:3d:b0:6d:6b:e0:60:0c:c4:96:ba:0b:fd:9c:2c:0d:
af:b7:6e:8c:da:57:39:2e:36:05:7e:96:ec:a3:52:2b:db:8e:
5b:8b:02:23:45:36:44:05:23:be:73:a5:7a:17:3a:d4:18:41:
1e:53:ba:2f:f5:30:0c:a3:17:18:fc:7a:73:9e:87:db:ff:f9:
be:3c:d4:1d:13:ad:b1:ab:1c:d0:4c:4d:75:d8:51:2a:5d:e5:
8e:0d:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:25 2025 by rpki-client