Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
File: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer (raw, json)
Hash identifier: GaprDZ+/GGe4BH4m0QxHVkIoCEihfHb3J400IVYlSH0=
Subject key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BD67D47558D1C99C46F55C0D13657
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213858
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d6:7d:47:55:8d:1c:99:c4:6f:55:c0:d1:36:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:90:4a:dc:27:21:3b:0f:a6:0d:67:e8:85:
f0:22:fc:11:27:22:d7:f0:a9:6a:3e:b4:5e:c9:5b:
aa:d1:e9:24:8a:3d:60:1a:e9:8a:f9:99:7f:d5:63:
ca:f4:8b:5d:08:97:9a:bf:75:27:4e:60:f9:08:14:
db:fd:f9:7a:0d:fd:55:29:ec:b7:c8:57:4f:96:f9:
57:59:40:d0:6d:53:c3:20:fc:9a:69:27:f5:97:f7:
04:16:12:f7:a4:05:63:fc:f6:7d:46:37:51:68:c2:
08:a3:ea:4b:ed:b0:e5:a3:71:10:ee:d6:67:07:6d:
6e:d1:8c:47:2d:6f:b8:40:7e:a6:a2:c7:f8:f9:f7:
0b:89:f7:5f:af:3d:38:21:cf:55:cf:05:d5:b0:a7:
a5:e5:e8:d9:18:43:3a:98:79:fa:06:ca:0f:38:50:
e7:5e:f1:4b:0c:81:bc:be:36:1a:ac:64:e5:55:28:
28:19:37:47:c6:cf:14:f8:e4:06:01:33:a3:24:58:
6f:29:ab:fd:1b:43:c3:cd:3d:26:43:44:56:e5:4f:
d9:1e:69:7a:dd:c2:20:b6:e5:7e:3f:66:98:59:72:
d6:b6:21:71:66:40:ba:b8:37:60:42:ca:7b:4f:c0:
3d:f4:9b:4d:3d:2f:bd:ff:fa:e0:82:e2:b6:b2:aa:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213858
Signature Algorithm: sha256WithRSAEncryption
43:95:2e:4f:6c:fd:66:13:b9:a4:3c:d6:f4:dc:fd:c5:a1:c5:
f4:87:cc:30:28:cd:5d:88:37:e1:34:8e:d8:2c:c3:b7:f5:4d:
87:6f:89:24:74:d0:4b:ef:de:a9:71:d5:00:3b:b2:ab:1d:27:
98:1d:58:66:35:55:72:36:38:65:64:63:f6:e4:11:78:22:25:
fc:93:06:a2:25:d7:32:42:de:8b:b1:36:9f:44:0e:c1:35:cd:
1b:8e:5c:03:28:ba:9c:ae:a4:98:20:85:f7:c9:00:1f:7b:ba:
19:97:71:6e:a7:eb:d7:2d:c5:38:a0:c3:d7:98:19:48:88:12:
17:30:90:3d:fe:ee:70:25:7d:5f:43:2a:34:cc:80:c3:92:a1:
d5:c8:e2:2e:a8:2a:32:04:ac:a3:e2:c5:a7:38:56:ca:6e:c4:
a8:3f:60:16:21:b7:f7:1b:8f:8d:97:39:b4:a3:79:d2:bd:bf:
c7:0c:c6:02:dd:b6:4d:40:46:78:1e:24:6a:05:79:09:e9:7d:
ef:16:43:dd:f6:e4:e3:44:6e:2c:33:ca:24:4e:8a:0c:5d:c9:
68:6c:24:6d:76:fd:55:5d:d5:7c:1e:50:f4:09:60:70:43:bb:
c2:da:fb:5e:d4:6a:26:e0:22:58:b7:56:c2:0c:27:c9:12:28:
b3:46:65:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:53 2025 by rpki-client