Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer (raw, json)
Hash identifier: 35KDF+LiGZmIua4NCK4+tLA195knCeguefi+wiDB/N8=
Subject key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823AFECF697A6C9D13C6AF8AAEFA997
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200964
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:af:ec:f6:97:a6:c9:d1:3c:6a:f8:aa:ef:a9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:fd:ea:0b:f4:9e:f8:f2:a3:04:fa:5d:63:
2f:0d:a7:a6:a2:af:52:1f:9d:36:39:8e:65:af:70:
b0:2c:42:c2:50:6d:d5:53:04:2e:ab:21:20:a6:41:
3f:a4:9b:64:71:4d:61:d0:8d:fc:9e:d5:de:f3:05:
42:47:f9:bd:81:f2:3a:ba:1c:36:e6:5c:33:b0:05:
94:cd:1b:39:af:1d:ce:33:a7:a1:41:1d:47:4f:74:
bc:c5:23:a2:22:95:dd:9a:6e:20:f1:f3:31:d0:83:
ba:b7:1d:7d:76:cb:5c:42:3e:00:10:5a:49:e2:67:
0d:7e:8d:d8:12:3a:14:70:77:79:bc:7b:51:6d:b8:
eb:b1:5b:0a:f6:e8:9d:04:d8:b2:30:37:89:3c:51:
1e:3c:96:d9:fd:c0:7e:c1:d5:a1:fc:d4:57:1b:ce:
37:17:21:d3:fa:d5:80:dd:37:2c:07:2b:9b:fb:aa:
57:02:33:2c:3e:0c:50:d3:56:94:9e:3c:bf:23:06:
c3:c0:4e:4b:ea:c6:34:a1:c3:1d:11:67:45:f8:c3:
ca:96:07:e0:19:27:17:07:03:c3:b4:d0:51:7c:4b:
fe:ce:f9:8c:01:26:1a:63:41:14:07:a3:58:68:91:
72:5c:c5:7c:0f:a7:bb:26:07:35:92:92:78:e2:e9:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200964
Signature Algorithm: sha256WithRSAEncryption
13:0d:06:80:11:48:0d:f2:bd:6d:32:fb:65:79:1c:d6:f9:e7:
9a:bc:75:74:61:79:7c:39:39:be:e3:4a:fa:f6:88:c8:a4:46:
07:46:0f:5e:07:6b:cc:e6:12:fe:5b:00:cb:e3:6f:9b:d3:f5:
3f:49:cb:f4:69:81:96:58:2d:e7:e7:e3:23:f3:15:a9:ce:d6:
ad:0b:3c:c9:bf:4b:78:89:ee:fd:42:68:e9:10:71:ca:cd:8c:
c2:85:83:cb:da:8a:63:07:5a:b4:20:4b:74:89:36:fc:5e:b3:
90:43:5c:cd:f1:ce:02:9d:d7:89:09:ca:e1:32:28:57:97:99:
31:00:3a:9d:8e:51:f0:34:fa:c7:e5:89:99:e9:8a:35:92:65:
79:e4:e6:07:cf:24:85:ac:38:bb:d3:12:b5:39:32:56:d6:76:
02:5e:cd:b5:35:b8:4b:5c:d8:d7:f6:00:22:66:f0:02:32:7e:
dc:5b:b0:92:5c:50:59:a8:be:d6:ff:ea:9b:5e:ac:4f:50:9f:
f2:20:65:d2:5c:87:9e:b6:d7:fb:96:bf:54:87:5c:cd:87:95:
48:fc:02:48:84:ab:02:95:6e:fc:35:e2:e2:1a:b4:1a:5d:cb:
6f:36:09:fd:b7:d9:b1:24:68:a2:cf:fd:63:a2:6a:27:45:ef:
fd:b3:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:33 2025 by rpki-client