Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer (raw, json)
Hash identifier: sMO66A8BMjxMV1b07vxnG85JUbfFNF4R2ZgPJ+mQP0g=
Subject key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B37254EF07973E1C8555BE59F76489
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207831
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:72:54:ef:07:97:3e:1c:85:55:be:59:f7:64:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:8e:8d:c2:7a:5a:e1:fc:55:33:a6:bc:96:
ce:98:7b:e3:8a:4a:ea:21:24:91:00:43:11:4d:15:
92:75:ca:83:68:c5:44:0b:d9:79:77:c1:6e:33:0c:
b6:78:25:bc:84:ad:27:0b:29:df:ac:18:89:5b:81:
30:77:f5:47:4c:17:27:92:e2:e1:91:2c:cc:b4:66:
b0:9b:76:34:07:53:fd:39:ac:ab:04:8e:e1:b6:14:
fc:72:16:e6:4c:1f:7c:52:f9:f0:2e:e3:dd:3b:04:
33:f3:21:7b:12:b7:54:f0:b0:85:61:fe:19:9e:bc:
d1:a1:a8:3c:97:af:7c:90:8e:f2:16:75:15:b2:fa:
53:e4:0c:ed:f8:9e:b6:ce:98:7c:5d:d0:a6:7c:e5:
27:16:83:f3:90:9b:0a:73:50:c7:80:53:ac:df:4a:
df:2f:1e:5b:11:4e:75:e0:27:23:6b:97:0b:2e:8f:
bf:a0:0e:7a:03:58:e9:24:0c:8f:f9:18:bb:39:cb:
ff:a9:1c:dc:cb:85:b8:b3:9c:d2:db:97:3c:a9:8d:
19:60:45:05:b1:24:6e:d4:f0:ed:d4:c8:81:fd:d4:
4c:9d:64:5a:86:d2:3c:02:f8:d4:cb:81:0a:36:9a:
3d:72:53:ff:2b:12:14:b5:82:a9:ff:93:78:57:f5:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207831
Signature Algorithm: sha256WithRSAEncryption
76:61:da:0a:f7:49:35:71:85:fe:08:27:10:a8:f0:9f:d3:24:
b5:68:93:60:7a:fb:4f:36:60:bd:c1:3a:d4:a7:44:23:89:c9:
17:a8:47:91:60:94:be:f4:ee:ee:8b:c8:fa:06:4b:a7:e3:bd:
1d:4f:a2:53:bb:55:53:52:d7:ec:33:88:41:0c:7f:78:40:96:
77:dc:b6:7c:ba:9f:f2:91:8a:82:05:c0:a3:f8:7c:44:19:6f:
f5:64:d7:66:41:73:84:5a:e2:2b:61:dc:a4:30:f7:1c:3a:ba:
93:52:4f:23:41:43:6c:5e:5d:54:4f:23:33:3b:62:3b:fb:f9:
2e:96:73:c3:36:42:c2:21:5a:84:0e:06:e0:75:f3:f8:b3:a0:
fc:c2:04:de:5c:bd:70:9d:70:58:e5:25:b5:b3:a0:d0:6d:99:
c3:12:76:e1:c6:88:73:8c:ef:7b:96:24:00:31:ec:a3:5d:7d:
76:ba:dd:4a:32:a1:0a:1d:dd:bc:db:17:84:c2:22:eb:32:55:
05:20:94:75:b2:5e:e4:73:e3:69:c0:88:ce:24:78:6c:da:ac:
a6:ca:38:00:a8:d9:9d:0d:b9:de:93:2e:29:5e:87:28:3b:a1:
64:1f:8f:e5:d3:84:3d:85:c3:eb:70:bd:23:62:65:53:f8:ad:
0b:c8:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:35 2025 by rpki-client