Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
File: 45WAim89Q2FJAcmQyc5jLhXt-gc.cer (raw, json)
Hash identifier: KleECfPBVWz0yPmGwbQU21SbYaM8WWh2HjJ4yIhBjC0=
Subject key identifier: E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BB26A5E74DE48E65C87B5EDC01C1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214773
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b2:6a:5e:74:de:48:e6:5c:87:b5:ed:c0:1c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e395808a6f3d43614901c990c9ce632e15edfa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:5a:9a:c9:43:14:76:c2:a9:0a:75:f6:45:
c0:2e:8e:89:45:03:72:a8:c8:3b:45:65:60:d1:53:
3a:c7:35:4b:ee:6a:a7:17:87:78:52:a5:2f:ea:1c:
03:9f:b3:9c:0e:da:46:57:5b:b5:7e:fe:db:09:72:
85:6d:1b:f0:91:3c:36:d8:3c:44:be:d3:84:bd:f9:
cf:97:d3:0e:2f:97:29:2d:38:c0:b3:fb:30:a6:2a:
bb:5e:f3:7e:54:42:08:dc:81:21:22:60:9d:86:71:
2c:18:da:6a:7a:cb:9d:2a:b4:a6:6b:a5:d3:fb:d5:
3d:2a:a4:a1:cc:1b:e2:91:87:91:28:03:6f:a3:96:
86:88:94:5f:10:b0:fa:ce:42:6b:4f:92:84:c5:fd:
5a:69:f9:e1:60:4a:15:31:ce:30:d2:63:4a:92:16:
12:02:23:12:2e:80:1d:dd:33:6b:97:fe:5b:e2:16:
c5:99:73:70:2c:07:71:e6:1f:f5:7a:e1:71:91:1b:
82:f3:33:90:92:24:8e:bd:a6:66:68:a8:70:12:c1:
e1:83:8d:d6:5a:5f:36:67:49:b5:eb:fa:28:ad:56:
f4:58:05:3b:0e:63:b6:1c:0c:32:da:fb:1a:c0:e4:
d4:be:48:2a:c3:c0:f4:8c:58:20:49:84:b4:b2:0d:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214773
Signature Algorithm: sha256WithRSAEncryption
93:1c:8f:ef:a8:16:66:68:09:68:5e:3d:44:c2:1f:a3:7a:ef:
2b:7e:85:36:77:d4:05:06:bd:10:69:9e:01:78:af:f1:a0:ed:
76:10:7f:cc:9d:8b:8e:ce:a8:30:9e:d5:b8:95:a9:02:d6:30:
c0:26:de:88:f1:ca:82:ec:22:c3:af:1e:41:5c:2d:33:c6:a9:
e2:4f:1d:80:10:8a:3d:d6:f2:07:41:ef:e7:09:fa:a0:bf:a7:
56:87:6a:09:5b:b1:3d:4b:8f:d5:28:40:76:a5:5e:59:22:1e:
c6:83:ff:f3:a6:aa:9c:47:bf:d9:c3:79:30:41:92:10:44:80:
69:73:24:69:cd:46:f6:f7:9c:a0:f6:41:85:d5:4f:aa:f3:73:
d0:4a:c9:19:b4:57:41:c8:9f:03:ce:4d:9c:04:35:9a:2f:23:
8b:c3:cd:21:82:8d:e4:f8:c3:36:c6:35:46:5e:98:99:17:df:
74:bd:1a:f8:82:81:71:f6:2c:9d:a1:05:30:f4:4f:82:e5:6c:
29:cf:4b:a9:d6:e4:fd:70:db:49:04:49:74:5f:07:9e:79:bf:
85:cc:93:0b:aa:c7:ff:ca:56:bd:23:5f:5d:86:55:2b:7b:a8:
79:44:8a:07:4a:55:4a:4b:22:93:95:42:75:89:2c:f7:c0:75:
12:fb:7b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:54 2025 by rpki-client