Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
File: AGXxbaYGeD8wH3CKXmtP1f_UMug.cer (raw, json)
Hash identifier: NbbbLWAN3RBp6bcZHLxxcgddFzihhDI/nJ02f9HaWT4=
Subject key identifier: 00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD5959BF6223B3FBAA3A2D405278C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202673
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:59:59:bf:62:23:b3:fb:aa:3a:2d:40:52:78:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:04:9c:38:dd:3d:17:59:bd:5f:dd:2d:37:
fc:e6:ae:f9:52:25:e6:07:c0:65:a4:cf:42:16:5a:
b7:ee:90:f5:b8:d3:16:78:52:73:cd:3a:e4:0a:0c:
7a:f7:74:d1:47:e4:fe:16:96:ba:98:57:a6:6a:08:
7a:84:55:1e:45:13:76:dc:e3:8f:51:0d:4b:c5:6b:
a5:f3:be:1b:35:57:30:a0:e5:cd:62:19:4a:a2:ab:
5d:e8:9b:af:0d:a6:01:4f:86:12:92:0b:41:3d:c6:
74:08:f1:de:21:ef:d2:24:c9:20:93:b6:1c:6f:9e:
67:f0:de:df:72:ab:1f:74:38:70:3f:5a:db:86:b4:
c9:66:f3:aa:c5:7e:f4:bc:34:9d:99:fe:4c:49:0f:
34:68:15:44:67:a5:1f:a5:b0:da:ba:93:d0:2a:d1:
03:6f:d8:8c:eb:63:25:8d:e7:9b:54:d1:ac:4f:87:
dc:90:60:89:54:1c:4e:29:dd:3f:26:6b:51:c5:95:
58:fc:3d:8b:3d:a4:0d:21:3c:6c:4f:8c:67:1e:c4:
c1:d1:cf:2a:d3:8c:48:1a:60:45:eb:e1:e0:4c:c8:
33:a1:00:77:2b:09:ba:6e:83:46:78:ea:7d:39:d4:
9c:cc:16:2b:67:e4:2f:55:60:53:61:ba:2a:3e:e5:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202673
Signature Algorithm: sha256WithRSAEncryption
40:08:8e:df:ba:05:be:7c:d0:f1:eb:7c:48:4f:63:f7:8a:fb:
4d:24:6c:6d:45:72:d7:04:da:8a:e5:36:37:fb:e4:58:a5:10:
7e:30:98:c4:dc:5b:a8:4d:3e:56:3d:24:f6:05:36:48:13:cf:
aa:8b:6f:61:2e:8f:d3:02:aa:a5:68:40:21:80:6c:cd:fc:00:
61:da:f5:2a:b5:36:4c:b7:bc:cc:09:ec:ae:45:c1:39:4c:b5:
d8:6a:a2:2f:fd:75:0f:18:4e:9a:7a:e7:18:e7:30:97:8a:71:
39:21:6a:1a:80:cb:81:eb:0e:9f:09:b2:b0:fa:f8:47:03:49:
06:53:61:c6:68:d1:c0:19:a5:85:61:87:9a:b3:c2:54:9c:b1:
47:e8:bf:b7:37:59:0e:a3:4b:e7:38:94:85:57:35:b9:30:56:
f8:62:e9:98:23:d9:d7:0f:86:e6:b0:84:64:44:0c:35:aa:52:
c5:50:d8:54:5e:92:2f:53:24:13:92:ef:0a:8b:12:36:76:a0:
35:d0:75:39:f1:21:e3:b8:60:7f:c3:c0:06:24:fe:5f:4e:e2:
f9:a1:0c:b8:b0:99:8d:8e:3a:01:65:bf:e7:69:4d:17:14:58:
b3:ca:d0:28:92:cb:62:5d:33:a8:a1:4c:29:20:29:1f:07:b7:
bf:45:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:14 2025 by rpki-client