Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
File: 5D7dxEvG9TRFds9ZrwATXGtiwB0.cer (raw, json)
Hash identifier: 1LQpcwChnozGmzqmfMrqW/xLM6z9bJnv0NcJo5bhwUQ=
Subject key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F53F76959D988F4358C3DDBBA253E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204765
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:53:f7:69:59:d9:88:f4:35:8c:3d:db:ba:25:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:30:14:89:aa:ac:1b:2b:9d:ec:f5:36:07:
d3:a3:1f:82:69:e3:49:08:1f:8b:c0:d1:12:4e:6f:
56:84:e2:89:c5:ca:f8:e7:fc:4a:7d:59:9f:04:fe:
1b:f1:b8:8e:12:7b:47:12:a7:dd:e9:d5:56:96:0e:
6a:06:a9:12:13:5f:a6:e5:d0:10:bf:36:45:0a:96:
e9:32:32:ec:e7:b7:ad:e6:35:e4:f8:7b:0a:b0:d3:
13:0d:7c:9d:07:61:c7:5c:d9:61:cc:21:c4:e5:a6:
c6:58:90:23:14:5c:c4:3b:95:c7:3c:30:93:4d:55:
bd:0a:f3:f4:32:6d:91:c8:ba:e2:9c:33:4d:e2:d6:
5d:d5:c7:11:3f:1f:d6:79:4a:d5:c9:48:e1:34:ab:
69:db:10:7c:63:01:ef:49:13:af:79:47:e8:78:31:
a9:3c:b3:98:4d:5d:18:9b:90:83:33:0c:7d:1a:e1:
d5:97:0a:ce:eb:cd:54:2d:e9:48:45:14:b6:09:35:
61:06:c4:16:2b:de:d8:28:db:72:3e:e6:ec:f2:9d:
b5:95:98:bf:83:11:b9:48:8e:90:05:37:9c:bc:c8:
80:81:93:ed:f0:b9:f8:5d:bc:b9:1d:da:6d:0b:15:
35:b6:a6:c4:02:7e:74:f3:86:40:95:14:73:72:7d:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204765
Signature Algorithm: sha256WithRSAEncryption
ad:04:2b:bd:b4:53:9e:a9:75:19:e1:a1:8d:f6:24:a7:3f:af:
a7:7c:81:e9:52:77:eb:6d:34:e9:4f:a4:5a:0b:29:0a:ed:d9:
af:c7:6a:a2:0b:a1:ae:5c:30:ea:36:b6:cc:28:f8:7e:56:d7:
cc:39:7c:69:6a:65:66:15:1b:13:d5:f7:85:ea:3a:62:7c:da:
8a:a2:1a:ea:3d:3e:30:2e:ac:d5:5d:17:38:cf:dc:0f:44:17:
c4:30:aa:79:28:90:b2:a9:8a:63:ed:b6:33:e7:8a:23:f4:77:
b7:b1:07:4c:7c:2a:af:71:f4:c7:a5:34:c3:02:76:4a:d5:37:
07:14:0b:fd:ad:d5:0f:17:b2:69:55:b8:9f:96:51:1f:35:83:
1d:c8:96:e0:bf:f1:3d:64:af:23:05:e7:8a:66:ca:8d:01:06:
cd:26:2b:ee:07:7a:74:07:a0:f1:4e:f8:06:75:b4:ea:d0:0b:
0a:b2:62:1b:ca:66:10:87:b8:b6:ed:90:7a:91:c7:21:fc:b9:
c9:b7:01:08:42:62:c7:a6:dd:09:2f:aa:49:f8:4e:08:ae:09:
7c:9f:8a:a8:d3:a9:8e:e3:40:d2:ab:d3:fd:c6:05:42:ea:6a:
81:3b:aa:b5:ed:56:92:b7:17:5f:a5:d8:16:6c:00:48:26:00:
43:f8:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:58 2025 by rpki-client