Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.cer (raw, json)
Hash identifier: HXY+3Ppy2QVIJgNoZUpyW0/42tHIrA1muSUXGhoKnyY=
Subject key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B36A1078E9E33923C60390C9F515A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34521
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6a:10:78:e9:e3:39:23:c6:03:90:c9:f5:15:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:5b:85:d2:b3:d5:59:9f:03:ef:a3:ff:da:
a7:74:74:09:ed:1a:45:ce:de:76:fd:a7:f8:3c:23:
cf:92:84:16:3a:92:92:4e:99:d4:5b:05:52:2c:ce:
0d:01:69:74:3f:0c:0d:4e:53:c9:d9:b3:17:69:dd:
b8:90:5b:b3:9f:24:5e:67:b2:e9:db:62:20:cc:36:
1e:3e:75:e9:d2:f9:fa:80:ab:4e:01:28:1c:fb:fc:
e1:f7:cf:0f:88:e0:ea:78:f5:2e:eb:e6:fb:24:ba:
b0:4a:e3:ef:1c:6d:a6:8c:ca:18:e2:03:a7:28:5e:
3d:ca:bf:32:7d:bc:14:d6:3e:61:75:4d:80:a4:39:
a6:92:c9:bd:9b:60:79:a2:43:1d:46:f2:88:99:63:
c4:09:27:3f:17:5a:b3:37:70:7f:00:10:a4:a0:f3:
3a:64:db:eb:9f:8f:b9:8b:4d:65:db:fb:84:94:1d:
6e:87:a9:83:1d:6e:d7:1b:97:37:3d:fb:a4:8c:73:
82:47:43:e3:90:d1:e0:d9:de:c5:69:dd:e4:77:00:
cc:d5:79:71:65:83:59:1f:37:83:c3:f9:8b:2e:3d:
40:95:b4:9e:a6:31:e4:af:fe:d6:f6:17:8c:f8:a4:
79:6d:25:f4:90:66:4a:d4:80:ac:81:92:d4:0c:67:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34521
Signature Algorithm: sha256WithRSAEncryption
6c:3f:53:53:17:f1:33:e6:27:35:75:c8:3c:c5:9c:75:b9:12:
ab:6c:7c:2b:a7:55:09:81:f8:72:aa:96:12:fc:9f:b9:6f:cc:
24:55:b6:49:af:c9:ec:80:00:01:ee:08:21:cf:2f:e1:31:b4:
fa:84:56:04:ef:83:ab:0d:a6:14:be:d0:fd:a1:f7:f5:8f:03:
33:dd:37:ef:4f:76:88:11:06:42:f5:e5:ba:56:71:11:c4:d0:
64:ec:3f:e7:1b:01:ff:d1:c6:62:be:a7:0a:06:62:6a:4f:b3:
f0:4c:c2:21:a4:1a:df:62:95:7d:03:99:1d:d7:b4:f2:a2:51:
55:8e:4a:92:fc:fe:1d:14:83:e3:fe:98:4b:90:1d:61:db:2e:
42:66:24:fe:23:c5:61:0e:a9:26:79:e8:b4:b9:ff:79:d9:3e:
12:80:23:e4:64:06:79:30:36:4e:21:6b:ec:ef:ec:3b:ed:38:
4d:20:dd:04:36:07:0e:70:e6:54:12:13:69:5e:a2:11:d4:f6:
ce:9e:67:02:ea:8a:9e:06:95:1c:e6:0f:d9:81:01:77:10:a8:
46:ca:bb:b1:74:a4:50:ac:b8:c6:6b:19:96:5d:73:19:c3:be:
9d:ab:63:c6:1d:98:d0:90:4f:98:b5:07:61:c4:31:12:99:86:
dd:73:6f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:52 2025 by rpki-client