Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer (raw, json)
Hash identifier: 1veXfB7pH//+2Qo0JrZzoi8cUmiSQgZLu+t0AlnKkbg=
Subject key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5B08CB533D3A6D87D58FE664DC8AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211972
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b0:8c:b5:33:d3:a6:d8:7d:58:fe:66:4d:c8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:a6:9d:02:a4:1a:83:ce:ba:eb:34:71:68:
59:50:29:8e:11:35:d8:6e:5e:10:74:b6:ea:53:00:
1b:45:39:49:b5:b8:7e:ba:3f:ca:25:6b:0d:e1:b2:
2b:7b:f1:9d:9e:ce:b3:bd:db:3f:78:61:71:af:33:
f6:e3:14:e1:87:a5:00:33:30:5a:cf:6d:d5:93:55:
75:5b:3f:10:f4:7c:42:13:bf:df:54:2e:b3:0b:54:
21:2b:3b:c7:2c:f9:ce:c5:1c:77:3b:4f:9c:13:f2:
93:f8:60:b3:9c:35:17:24:d3:22:5d:eb:f0:b2:74:
f3:19:38:74:82:4b:6c:3c:04:0b:d2:2a:66:04:62:
91:ba:8f:21:9d:cc:38:d8:64:3c:cd:28:ce:18:5d:
a7:15:1c:0f:58:9d:0f:32:b3:8a:05:58:86:23:03:
de:b4:95:b6:3e:e4:85:ef:e4:82:5f:8d:67:3c:df:
88:6c:a2:34:bf:a8:3d:61:f0:19:56:89:eb:7d:b5:
54:38:3f:6b:04:d3:01:ce:e9:d9:6c:9c:07:7a:85:
d9:cd:bf:28:7f:98:88:ea:bd:b4:e3:eb:24:96:cb:
cf:a1:e9:3c:c0:f7:c9:64:67:7b:96:e5:ea:df:68:
f7:42:da:78:78:b8:b5:c1:6c:c4:ae:42:a3:56:d8:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211972
Signature Algorithm: sha256WithRSAEncryption
a8:17:aa:e8:22:e4:22:8b:cf:db:a3:bf:f7:9e:e2:41:2b:3f:
ae:f9:47:ea:75:39:5c:8e:b3:01:08:30:d7:77:6b:92:bf:8d:
f0:75:f2:ae:4b:fc:ec:e8:df:8f:02:25:b1:1f:b7:84:91:4e:
7e:42:0e:54:aa:3b:45:79:59:f6:e8:d9:d4:09:c8:87:90:44:
2c:8b:74:36:7e:91:39:ff:52:1f:de:b9:2d:34:27:b6:36:7d:
e7:20:8a:72:97:6f:53:58:a5:31:66:9a:d2:75:23:9e:fb:2c:
82:19:e2:68:e6:af:ce:04:17:34:22:91:aa:bc:5f:0e:5a:42:
8c:e5:4b:7a:73:95:5e:a3:ad:60:67:da:a6:97:21:78:03:6a:
1a:92:23:74:1b:e3:4c:c4:34:5e:ad:ba:bb:01:e6:d5:f0:bd:
1d:40:34:ce:56:a7:c6:80:2f:6a:5d:f1:cc:44:eb:0d:e1:1a:
4b:27:4f:de:49:a3:d8:51:6b:f9:d9:ca:4a:be:8f:b1:f2:12:
c9:c4:c7:5b:1a:15:22:ff:fd:2d:c5:82:02:6f:65:7a:0a:73:
91:a0:5a:66:60:69:56:09:bc:dd:3a:0f:99:19:5a:6b:79:d5:
7c:1e:3f:cd:84:76:a3:c9:bb:b7:fd:82:dc:05:96:9a:0f:13:
d0:99:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:41 2025 by rpki-client