Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer
File: 9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer (raw, json)
Hash identifier: vMNnagdyAjEK7zMxJnFaAxzbY3SzTvTLEi49Q4/3v0E=
Subject key identifier: F4:C7:3A:7A:F7:AE:13:C3:8C:D1:F8:59:FB:7F:93:9D:14:57:48:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1CACC3682E34C0676C1639AABADDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2601
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ca:cc:36:82:e3:4c:06:76:c1:63:9a:ab:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4c73a7af7ae13c38cd1f859fb7f939d14574887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:c8:e5:79:9a:5e:67:64:90:03:6d:26:fc:
89:b7:ed:7d:b2:54:ef:a1:19:bb:1e:fe:81:a8:d1:
10:cf:e6:de:97:28:37:21:ef:4b:53:cc:63:71:ef:
ed:42:f5:ca:65:fc:0e:4b:be:d1:01:bd:0e:9a:e5:
0d:99:3c:3b:01:41:fc:64:38:c1:b5:6a:1e:b3:e5:
7a:2e:5a:a2:98:ea:05:b7:e3:07:20:10:79:e1:83:
e1:31:c9:8f:01:f4:bb:a8:c0:a3:5f:ef:71:87:8b:
b5:65:4d:4f:85:01:bc:db:ac:a0:cf:38:96:b8:47:
75:31:1c:31:66:6b:d3:79:2c:14:5c:d6:29:8f:42:
0e:cd:9f:35:64:6d:17:d6:d9:87:92:d9:d3:c4:fd:
d3:97:df:15:4d:fb:2d:0e:bf:dd:eb:d0:14:1d:f7:
78:0f:6e:11:78:41:aa:15:81:88:6c:b8:29:6b:47:
d1:ce:5f:d0:ec:45:41:94:2c:53:93:42:32:eb:0b:
46:a5:3e:7b:73:6d:ad:8b:4c:ea:36:1d:f1:fc:e9:
c0:10:d3:51:25:d9:52:ee:b0:db:28:ae:51:be:b2:
7c:c1:ec:1a:1d:00:ef:85:6d:0a:29:b0:0d:4f:fc:
df:65:dc:cd:00:45:9d:3f:aa:c9:38:0b:76:46:c6:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:3A:7A:F7:AE:13:C3:8C:D1:F8:59:FB:7F:93:9D:14:57:48:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2601
Signature Algorithm: sha256WithRSAEncryption
ad:bd:32:42:ab:4b:81:25:40:df:b8:f1:b5:02:0e:ce:6d:dd:
5d:0d:27:c4:79:49:8f:8b:29:81:f8:e3:07:99:f8:99:e7:32:
fa:94:d3:89:e9:26:c7:13:09:2c:38:36:32:70:b9:69:1c:5a:
b4:39:c5:75:b0:e4:9c:58:09:56:36:c2:6a:84:92:cf:f2:a0:
39:36:2e:34:af:2c:dc:05:12:fb:04:08:e4:d6:3e:fa:9e:c6:
6f:1a:96:92:5f:99:6f:b0:22:7a:31:b6:de:80:36:33:95:30:
f2:3a:ae:7f:fa:2e:4f:58:93:32:5a:d9:d6:61:34:36:ed:68:
4d:c4:d3:5f:1d:dd:15:9d:c7:42:05:d9:69:f9:b5:65:e8:92:
48:18:8d:a7:74:ad:e3:e4:ae:8f:c0:9f:d1:85:3f:aa:7a:ec:
7d:56:e5:04:0c:95:04:9c:e6:c8:f0:a3:2c:81:5b:32:a0:65:
8c:93:25:6f:93:ff:7e:17:af:81:30:0a:d2:78:5c:4e:fd:1a:
9c:0a:c3:0d:dc:79:ca:f7:96:9d:b0:33:12:5d:79:cc:59:b7:
c5:f0:3b:5d:53:79:11:2b:32:d3:53:f5:09:94:1e:fb:e2:e2:
41:74:da:64:bd:e6:25:51:aa:b2:f5:41:1d:cf:ba:b5:c2:52:
da:ad:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:03 2025 by rpki-client