Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2DZCm5upPLpYJ3661wmzfnYDzdk.cer
File: 2DZCm5upPLpYJ3661wmzfnYDzdk.cer (raw, json)
Hash identifier: xlqNTqIIRTLfGjzrBhkLHSAqx69YzQZWD8k/7GgjKV8=
Subject key identifier: D8:36:42:9B:9B:A9:3C:BA:58:27:7E:BA:D7:09:B3:7E:76:03:CD:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214421E92DFC96986DD8BB34278B71AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210578
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:21:e9:2d:fc:96:98:6d:d8:bb:34:27:8b:71:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d836429b9ba93cba58277ebad709b37e7603cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:78:80:d5:1b:d1:47:60:5d:4f:bf:b3:d8:
03:74:21:50:56:fc:d5:76:15:31:7c:3f:e3:7a:41:
8f:e8:29:ae:92:62:48:d8:75:99:3e:56:ae:5b:fc:
f2:0e:4c:02:c0:21:eb:cd:70:6b:91:72:72:4a:55:
03:3f:9a:27:a3:9e:ba:f7:05:dc:ba:ec:a6:80:0a:
98:d9:7c:ac:2d:9e:96:28:b5:a3:31:98:5b:f9:de:
7f:37:29:b6:11:cc:a1:33:6a:fd:4a:bf:3b:ca:ad:
de:bf:90:49:13:03:b8:a7:68:d5:d1:12:ba:b5:14:
ba:e2:6d:73:c8:7e:a6:5f:7f:5c:de:4d:c4:e6:eb:
7e:4f:61:4d:b7:ef:c4:95:e6:4b:19:49:3c:e9:96:
3e:48:a8:1e:2e:29:09:2a:58:b5:82:15:ce:6c:26:
9c:3b:37:22:57:30:d0:bb:6d:8f:c8:b4:1e:a2:1d:
d5:2e:d9:68:f4:df:fc:7d:e7:99:9d:4d:e6:6a:da:
d3:5b:59:8d:34:9e:be:0b:d6:85:61:f3:20:a1:9a:
e0:56:de:06:55:d9:9f:95:bc:6e:20:7c:12:4b:b9:
28:df:36:a6:6e:72:b3:6c:b5:b6:20:8f:d8:b1:e6:
9c:38:c2:b8:69:e6:ed:bb:a1:ec:b0:69:ca:7c:59:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:42:9B:9B:A9:3C:BA:58:27:7E:BA:D7:09:B3:7E:76:03:CD:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb5ddb-db3d-4b57-9a6f-b53589a5f9aa/1/2DZCm5upPLpYJ3661wmzfnYDzdk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210578
Signature Algorithm: sha256WithRSAEncryption
88:54:64:8b:a8:71:5f:8b:11:4a:ee:c9:de:5f:54:c4:94:0f:
2c:ad:a9:55:f6:0e:1e:d7:eb:27:83:d8:ef:8c:57:a6:f2:09:
69:a2:00:60:54:06:52:04:4f:55:be:bd:45:fe:f3:95:5b:7b:
11:9e:29:dd:fe:a7:63:f5:79:88:3b:25:eb:d0:17:5c:c3:96:
7c:3f:cb:cb:04:6b:2f:cb:13:63:26:0c:ec:32:f9:95:58:c4:
3a:22:58:f8:8d:8b:e7:43:53:12:5f:bd:e7:63:52:6e:80:49:
8c:09:72:b3:de:40:1d:58:b4:3b:fd:42:c8:52:ed:b3:30:25:
5e:d6:e8:4f:0a:af:ab:3c:38:5c:17:33:f5:b6:f3:1f:76:50:
55:f9:30:72:a0:03:17:44:0a:ce:f0:7f:94:32:3b:1d:dd:31:
89:0d:da:e4:e4:07:ce:f9:f6:92:46:4d:ea:44:a7:d3:8e:b9:
b1:ee:70:8b:83:bc:c1:22:c6:f8:4d:3d:80:75:6b:75:a9:ab:
bd:e1:7d:46:ed:e2:7c:6c:2f:c3:b7:6f:91:b0:c4:45:ff:c5:
43:5f:e6:c3:82:c9:6a:69:0e:23:20:9f:9b:f1:40:34:0f:63:
86:a8:ad:ce:a9:99:17:5c:4d:e5:b0:27:77:e9:50:1c:e5:72:
7a:10:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:17 2025 by rpki-client