Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.cer (raw, json)
Hash identifier: I0RDFFlLawEiNTlgkRg/Rufg/2EPEE+OZDbKZPt1x9Q=
Subject key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA50E06065695D10829168F0DA5148
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59513
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:50:e0:60:65:69:5d:10:82:91:68:f0:da:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:f3:4d:dc:65:f3:a1:6c:4c:34:2b:e4:88:
94:69:af:5d:d0:10:c1:56:5c:23:f5:15:47:47:bd:
40:b0:a6:d4:bf:1c:06:1f:49:63:34:69:a2:ae:62:
cf:ae:f2:0d:89:6a:a8:1f:6f:49:b4:45:d0:7c:5f:
30:52:9a:0a:6a:b3:a3:c9:16:f6:4b:5a:ee:10:55:
2d:62:44:51:de:ee:c2:8d:6b:f8:29:4e:1e:0b:22:
6b:4a:09:a7:27:bf:3e:c5:c8:7e:0e:42:ed:c0:63:
56:39:87:58:fc:22:bc:50:e4:fd:99:77:c6:17:39:
7b:f6:f9:24:64:65:44:b6:10:ca:48:8f:05:ef:88:
d4:e2:05:5e:14:f0:a0:2c:c6:86:9d:90:a4:77:14:
52:9d:c2:dd:55:2c:7e:94:e9:98:6e:9a:82:89:61:
c9:c1:9e:f6:6f:0b:7d:d7:14:83:51:2d:44:b0:15:
e6:9e:11:c3:e2:a1:6a:90:8f:aa:30:ee:1f:9f:43:
6e:88:2c:38:63:3c:85:66:fd:61:2a:9c:b6:fc:42:
b6:3a:da:dc:2f:95:b2:bc:d6:13:f6:be:6c:f7:19:
78:c2:f7:5c:e3:7d:e6:bc:4c:da:20:ea:9d:9c:b9:
85:09:2a:80:cf:eb:8a:15:5a:c7:7e:ac:66:ce:61:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59513
Signature Algorithm: sha256WithRSAEncryption
24:4e:de:89:33:34:f4:f5:1a:07:09:4b:3c:fb:ac:74:11:cf:
ca:9b:a1:9b:dd:0b:44:5a:05:48:cc:e7:84:ee:c2:b3:e3:a0:
10:bd:91:66:d5:27:cc:a4:cc:3e:0f:50:d2:31:28:70:a5:60:
b6:38:e9:c8:c4:40:8f:6e:72:6f:1e:a2:6a:c7:51:a1:ad:9c:
92:f6:5e:68:07:75:b1:c7:59:79:49:16:27:8c:cb:99:60:40:
53:67:de:bb:0a:7c:ca:cb:1f:ec:58:64:0b:46:8b:60:b7:af:
eb:8d:89:13:44:a1:4b:92:ab:ba:a2:92:c4:30:13:94:a6:7e:
21:4f:03:ac:22:99:f6:7e:3d:06:99:bd:ff:d0:6f:2d:39:89:
2a:7a:e8:8d:e5:d2:38:c2:7f:d3:ff:6c:eb:b9:b6:e5:9e:7b:
75:53:dc:c5:11:55:9d:b2:db:f5:07:d0:66:e3:1b:51:10:72:
ba:75:41:28:5e:56:c6:d0:4d:30:7b:1e:65:05:7f:42:c8:13:
98:5d:79:f0:e5:6c:63:c8:2e:09:46:1e:7a:db:81:74:53:8e:
f8:ca:be:14:ce:d7:7f:21:25:4e:28:57:7c:f4:11:5c:a6:33:
65:bb:12:6f:02:1d:7e:a3:58:28:5f:ea:1f:74:53:9b:67:33:
30:eb:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:11 2025 by rpki-client