Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.cer (raw, json)
Hash identifier: A45HGXNKuwIXGEvhucLQi/rOlc0MUgbRYk2SngqCxBg=
Subject key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F293A4B9D2D08FEECDE43CAC969DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206448
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:29:3a:4b:9d:2d:08:fe:ec:de:43:ca:c9:69:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:7c:e3:fa:b8:5e:54:27:b1:fe:5c:e7:33:
47:4b:76:fa:d9:b2:65:e9:90:22:b8:b2:40:ab:ba:
b4:8c:cb:67:07:3b:5e:5a:e3:b2:f6:be:aa:c6:b2:
45:48:a7:be:86:ae:b8:35:f2:fd:9a:2d:b5:c2:2a:
72:7a:91:07:bf:e9:0e:b8:3f:b6:87:d0:85:81:15:
68:6d:b7:ed:48:61:c8:20:fd:fa:68:39:e3:f2:29:
8d:29:bd:9b:56:cb:90:34:86:fd:44:19:5f:d3:c5:
1c:ab:36:bb:58:2f:6e:b6:20:cc:c7:21:44:3c:23:
b8:85:b3:64:7b:d4:7a:56:71:44:75:1e:db:31:56:
00:b6:72:07:6d:4c:51:8b:d1:b1:01:ae:c5:84:66:
9e:3b:37:fb:04:d4:a2:43:d8:ec:95:cb:f1:63:2d:
15:40:a9:33:b5:72:e4:37:77:21:3a:f7:6e:65:33:
ce:b0:a1:eb:11:14:32:6d:95:af:34:3c:e5:b5:34:
ae:e3:95:27:de:f0:ad:ea:6c:89:6c:42:6a:a8:1f:
17:4a:52:47:55:af:0e:f4:46:9e:fe:fd:8a:77:dd:
16:66:ba:6d:0e:c8:99:55:17:d0:a5:6f:8d:81:fc:
68:f7:9e:26:cf:7e:63:41:84:0e:47:02:22:80:8d:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206448
Signature Algorithm: sha256WithRSAEncryption
4d:70:bb:3b:1e:da:ac:ab:b3:41:43:6c:39:7b:ea:5b:21:04:
bb:d3:90:69:64:e4:94:5c:2d:0d:37:cf:62:ad:bd:61:a7:d6:
de:42:dc:1a:33:df:32:8b:57:b1:05:36:26:6f:90:78:d3:21:
58:ce:dc:7b:3d:dd:ad:e9:2c:42:3b:fe:70:20:45:b0:f2:0c:
0a:ab:a3:c6:e0:63:4e:43:99:a9:ca:24:c3:d9:56:d5:f3:c2:
88:90:7e:e0:7f:c5:f9:69:13:af:1f:4b:6e:2c:49:b5:4a:da:
c9:65:cf:39:04:1d:75:f0:7c:40:c6:36:f3:a7:24:83:28:bd:
cf:6a:aa:05:1e:7e:46:7b:20:30:e0:f1:ad:a4:43:6c:1f:42:
15:1f:f1:92:3b:9d:c2:42:11:2c:d4:07:7c:de:47:40:9d:70:
42:12:8d:2a:92:31:8e:fd:05:81:e7:22:a2:f1:e6:f7:9b:43:
8d:6a:94:90:56:ae:81:20:5c:ee:60:e7:39:00:cb:0e:cd:4d:
f8:97:a4:63:9c:d9:16:95:73:a9:91:7b:47:41:30:47:25:a9:
2e:0e:c8:b9:9b:4d:fb:63:4f:0a:05:2d:c3:97:67:c9:b2:14:
22:a2:67:fb:e0:51:85:0f:49:3c:90:7d:50:a2:1d:6a:69:e3:
91:ec:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:57 2025 by rpki-client