Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
File: 97LAktArE86qejP_BXqECmjXFSE.cer (raw, json)
Hash identifier: lUueVGYQVay0/ArsI1DrxosdjKATu2o3dQR1ZMkWtDc=
Subject key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444EDB5840A6879C4B89C847F43FB30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211424
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ed:b5:84:0a:68:79:c4:b8:9c:84:7f:43:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:ea:4a:90:6e:fe:c4:a3:58:9b:20:36:ba:
f8:c5:c6:7f:80:72:15:86:78:35:99:98:79:05:b0:
0a:fc:82:b0:57:f1:da:92:78:1c:e7:56:14:52:1e:
89:9f:2f:0d:dc:2a:dd:8b:98:17:9c:0b:96:6b:07:
b3:69:37:46:c5:b1:ac:40:d4:46:13:f0:5a:53:26:
cb:72:6a:be:b0:c3:3e:5e:b1:0f:f6:3d:93:e7:12:
93:c1:27:7c:6f:e6:15:21:4f:ba:1e:eb:86:51:1b:
5c:6a:52:bb:a7:fb:6e:f6:9c:35:47:e8:01:81:3e:
41:e6:95:88:92:5d:ba:45:37:ad:33:12:ba:e8:2c:
94:0d:ed:cc:d8:97:9d:c2:21:95:f8:57:36:9d:63:
c5:fd:ab:90:8f:a3:ec:db:f4:13:47:eb:a9:c5:6a:
ff:c0:37:64:d8:61:28:a4:fa:0c:14:c0:31:e5:3f:
86:39:41:65:0e:66:d4:ea:c7:d0:82:7d:e5:0e:f9:
f7:eb:9d:1a:b8:8f:72:43:60:e3:19:f4:25:3c:46:
fa:2d:e6:ce:17:3e:e5:0f:bc:d5:39:44:e5:91:f7:
30:4f:2a:a3:c4:37:03:fa:c7:e9:79:0f:4b:c9:01:
c7:bd:dd:9e:77:4d:57:8a:46:ce:7a:7c:4e:27:08:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211424
Signature Algorithm: sha256WithRSAEncryption
77:66:b0:df:57:73:36:60:7d:b0:54:2c:93:57:8e:16:a8:ab:
e4:8e:36:b4:2a:72:93:65:72:f7:03:5e:c7:fa:5f:be:78:69:
ec:2e:01:82:35:d2:ee:de:50:92:21:56:3f:1b:f4:45:6b:99:
1b:8c:18:56:49:20:7b:22:4d:b1:37:9d:d6:da:26:e1:e1:4e:
66:a9:d5:20:66:41:3f:8c:b6:06:f6:5b:bd:0d:21:94:18:47:
91:83:4e:17:f4:32:ec:39:a6:6f:97:65:9d:a1:52:0e:dc:ec:
1a:20:2c:90:eb:9f:7a:10:b9:82:89:e2:5a:c4:4c:3d:fb:27:
ac:48:b8:41:7f:b2:a8:48:ff:21:6b:9d:0c:01:37:ef:ba:ad:
30:f4:d9:51:9e:8e:7a:3f:26:22:77:09:5d:32:63:d2:c8:82:
45:49:5f:f4:fa:6e:8b:bc:59:e2:39:f9:09:92:e0:fc:65:71:
11:c7:8f:8c:49:17:8f:0d:dd:51:ec:63:4f:d5:a0:53:70:8a:
65:b7:81:08:52:ab:2f:a9:b6:37:07:9b:9e:c3:81:7e:3a:a7:
fc:6d:ed:5b:32:ef:66:3e:14:83:9a:06:96:dc:89:9f:fe:ea:
26:db:ab:d3:a8:5d:82:4b:76:ab:3b:c5:ee:eb:bf:3f:b0:c4:
0a:be:78:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:35 2025 by rpki-client