Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.cer (raw, json)
Hash identifier: 4AAy+GP70UnqbOL/rqRoNxdjsxpVLrdR4xcym046uqo=
Subject key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444C63DFE56791EBA81A19B26313337
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204783
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c6:3d:fe:56:79:1e:ba:81:a1:9b:26:31:33:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df9a963809714d1103b6460d9d0e14a12e850325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:68:ec:c4:5c:70:23:dd:34:08:a2:c0:4c:
da:bc:dd:bf:f1:03:84:dd:fd:86:57:4c:d8:a6:16:
8f:ed:84:b7:2f:6b:8c:a7:bd:f6:d3:8f:fb:0d:94:
07:15:97:f2:d5:11:32:41:2c:8b:ce:7f:4a:ef:5f:
4e:6f:4a:36:d4:9e:8e:e1:50:35:69:f1:04:a3:bd:
06:8d:96:a7:3f:ac:6d:30:58:44:bc:c3:bb:fe:87:
ec:fe:e3:3b:64:26:cb:05:99:80:67:9d:4a:1b:ac:
d5:68:31:68:d7:9a:58:72:f1:d6:bb:53:be:2f:4c:
7f:9f:6f:d1:55:7c:62:9a:e1:ad:5d:db:79:d7:f8:
b2:53:fd:cb:4e:3b:d6:f1:d8:a8:f3:8f:05:78:db:
3f:d3:70:b7:ba:2b:29:97:b9:80:3f:2b:ac:6f:30:
0f:5e:bc:90:a7:e7:89:48:de:8b:3e:99:7f:30:2e:
14:ed:1b:7a:ea:36:15:a7:4c:ff:bb:e7:00:38:2a:
94:58:53:f3:d2:eb:1f:12:fc:44:0a:39:14:55:b6:
88:3f:a3:f0:0c:cd:67:39:d1:30:ee:ff:bc:71:c5:
df:a0:61:d9:99:c6:eb:03:f3:f1:10:00:eb:7c:d6:
d1:ba:b4:76:ce:02:4a:b0:83:7c:6f:3b:4c:d1:f3:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204783
Signature Algorithm: sha256WithRSAEncryption
45:94:01:a3:99:d9:2b:38:48:5c:e2:ac:9a:cb:69:1b:00:d7:
fd:50:b2:64:12:f9:cc:1e:af:d7:63:96:49:25:6f:a8:9a:8d:
47:d1:a2:74:7d:cc:d0:58:d7:f1:54:0f:13:b4:e4:19:ba:06:
40:d1:9c:6f:03:ba:77:d2:1b:f3:f2:79:41:cf:2a:2f:96:38:
87:5c:d2:57:43:73:b8:c2:06:a0:7f:6d:7d:4e:8c:cf:b3:85:
2b:23:67:30:b6:d3:e2:1b:fb:8e:f0:f1:92:76:19:4f:85:fb:
28:d1:3e:b1:66:34:c5:81:ff:ed:9b:16:32:a3:cb:98:35:42:
89:1c:e6:0a:e1:db:ef:07:10:7b:d0:88:21:d7:eb:d7:d9:12:
00:05:e7:59:f3:2d:fa:4a:6f:66:f3:f6:b4:1b:a6:a1:12:66:
22:2b:ca:25:aa:bc:23:04:27:a8:b9:3c:6b:2a:73:55:07:88:
cc:a7:58:b1:b4:d9:22:66:95:44:bd:05:1c:d7:95:73:5c:16:
a1:71:f4:5e:9d:d8:1a:67:71:d8:a3:fd:bf:02:89:75:f0:f0:
35:91:bf:45:af:f0:55:67:db:dd:7a:5f:7f:e4:6a:9e:e5:8c:
be:78:9d:52:4a:b3:e1:2e:4f:b8:e7:b7:55:f1:12:56:38:2e:
6b:f7:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:15 2025 by rpki-client