Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
File: 55rcKmJwJwixoO4N87TPkiiW3NY.cer (raw, json)
Hash identifier: nrrMRtuFE2xNjFh4roxrAOMGcrc2REUSYVfCzwO9pGY=
Subject key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C70C6697BE2BB3551989443F0B118
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202279
AS: 214721
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:70:c6:69:7b:e2:bb:35:51:98:94:43:f0:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b3:20:4a:84:20:b1:26:71:d1:6a:ab:82:75:
81:6e:52:f7:48:a9:96:43:c3:32:7a:85:4b:ae:2d:
bb:0b:95:a3:21:a8:b8:9b:4d:bb:1e:4b:2f:3f:a6:
a2:b5:3a:eb:ec:48:67:16:cc:8f:82:68:2b:be:b9:
a1:74:c6:1b:de:66:0e:ff:0a:46:ca:62:43:f6:bc:
09:15:9d:d4:77:c1:82:34:85:bf:a3:cc:2e:96:49:
bf:2d:86:75:f0:49:fa:e8:28:de:c2:37:3a:8a:82:
b6:89:8f:10:fd:c0:c1:46:de:74:66:97:0a:c9:51:
51:dd:a3:78:15:64:38:e4:f6:10:f9:59:d9:83:d8:
0c:42:3b:62:e8:5b:9b:f2:e5:33:d7:35:f1:7a:fb:
a2:5b:5a:d1:74:b5:0c:fb:a2:fb:3c:ff:7a:e8:64:
e2:07:ab:d9:e9:0f:ed:b7:c4:f6:7e:4a:f7:30:91:
66:d0:e0:2b:c9:87:1e:6f:00:7f:40:a7:1f:79:74:
af:68:6f:d9:22:3e:ac:15:02:c2:4c:d3:82:70:36:
33:44:04:05:12:cc:46:b0:13:d8:1c:68:84:36:8d:
b1:1e:30:db:16:b5:c5:0f:56:50:40:c3:31:d8:aa:
b4:f5:09:4c:f9:8f:dd:89:80:a8:93:4c:a8:4f:2a:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202279
214721
Signature Algorithm: sha256WithRSAEncryption
82:b3:57:45:2c:7a:51:07:64:90:7d:f6:29:e5:dc:6d:9c:f2:
99:14:7e:47:60:7d:6f:a0:ba:7e:b7:c6:fb:b2:a8:5f:73:21:
8a:c2:c3:27:6b:70:a9:d4:7d:93:fc:f6:09:3b:54:e1:c2:01:
92:30:19:86:9a:aa:be:a1:f7:dc:bf:8d:bd:c3:36:02:a9:3c:
11:3e:e8:b0:d7:e3:9c:a9:71:26:e6:a8:18:3b:42:77:b6:14:
e6:52:46:ce:ce:73:cc:03:7e:99:50:c8:55:da:de:d9:5b:20:
44:49:3c:45:3f:61:95:a5:f9:08:c5:cd:e3:f2:e3:ba:7d:78:
1d:93:fe:2e:d2:87:58:b1:5c:9c:89:64:2a:3d:57:0f:37:4d:
84:83:ab:f8:11:d7:ea:9f:7f:ee:53:f4:eb:7e:1c:cd:09:6e:
dd:8b:11:80:88:b3:6e:be:27:9b:ab:82:86:c4:81:a4:df:32:
71:c1:92:8e:f7:73:41:80:4e:ba:44:5a:2f:2b:cd:28:86:3c:
f4:77:51:09:fe:6f:5a:11:5b:7d:8f:f3:3f:86:9b:92:fb:dc:
69:6c:45:fa:5b:be:ea:90:4f:b4:d2:6c:65:6a:41:16:0b:ed:
8e:d4:dd:a1:80:d0:94:14:02:f4:b5:b2:1f:a0:22:f4:75:21:
86:ac:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:59 2025 by rpki-client