Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
File: ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer (raw, json)
Hash identifier: kJB9kkUVS4voFWv9VXKdnqoyjd7xx1dobCT8bsHrSRg=
Subject key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3ACE9181FA7FEB594457A9500DA87
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212044
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ac:e9:18:1f:a7:fe:b5:94:45:7a:95:00:da:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:14:b8:4f:15:de:7f:57:47:25:1b:a2:e2:
e3:34:a1:b2:cc:6c:39:5d:7d:70:d0:0e:6c:68:2b:
da:ee:43:7c:3d:2b:3c:81:1d:99:89:37:ee:09:58:
c5:4e:8a:79:01:eb:4a:19:e3:3a:0d:34:59:db:c7:
58:af:db:1c:01:89:f9:5d:fa:b2:b2:67:c4:70:cb:
74:8c:eb:78:21:67:dc:60:86:63:01:4b:2d:87:fc:
70:22:d8:1a:64:30:01:b4:52:62:e6:64:f2:56:8e:
15:0c:ea:2b:11:cf:1a:4a:4a:25:f8:f3:23:3d:c7:
e3:6b:ef:09:b3:94:9a:3b:d4:22:f6:41:25:c3:87:
99:8b:ce:73:6f:9e:a0:60:99:d0:06:ee:d9:ad:ec:
7e:d7:f8:0f:c3:fa:f1:d7:81:ca:f7:1d:18:97:01:
ec:f1:7e:2a:a7:ee:fe:03:43:53:67:74:d4:00:18:
9f:5b:6b:e9:41:a1:e0:ce:a8:d9:21:d8:8b:a4:e8:
ac:61:47:b0:99:18:c6:81:e5:ff:c0:32:b0:30:ae:
ec:f5:91:1b:c4:92:3a:ad:5b:94:15:37:a0:bc:1c:
8b:a6:d9:0d:44:a7:f2:43:d0:af:f7:bb:e0:af:64:
14:d5:fb:6b:fe:6d:fc:83:02:bf:f4:6b:d8:92:89:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212044
Signature Algorithm: sha256WithRSAEncryption
0e:78:29:ef:fc:7e:6a:cf:f1:1e:a5:b9:34:54:b6:e7:45:88:
79:13:4d:12:08:91:a1:bd:74:e5:b8:59:a4:6f:f5:6d:de:33:
ea:c4:a1:8e:1e:9f:fe:11:d5:cc:d4:bd:74:e4:6a:57:aa:b7:
e5:73:5e:5b:9d:aa:46:eb:29:08:19:a1:67:9d:58:de:f6:a5:
56:5a:26:85:fb:0e:ed:71:47:9f:8a:aa:93:1a:62:eb:95:e9:
6d:cf:9a:19:35:fa:e9:0b:28:b1:a3:29:3b:a3:44:a8:83:53:
e1:c3:aa:ce:55:b7:f7:d5:94:ee:39:13:a1:ab:09:dd:4a:c1:
92:94:3e:af:01:66:a7:fa:92:33:28:f0:0a:df:43:bb:67:26:
1d:5d:84:6f:85:d2:0d:c1:b3:dc:d8:ee:91:55:86:6e:32:ae:
59:63:da:2a:c7:d5:97:73:95:f0:ad:b2:4e:22:32:20:96:ec:
7e:e8:07:cf:7f:e5:b1:f8:5e:74:d2:7c:d1:c3:5a:95:fc:0c:
84:d4:ab:e8:86:1e:af:4f:dc:a4:59:7f:81:66:cb:cd:7b:7c:
7c:5e:e9:0f:44:89:33:51:fa:69:54:e0:00:11:df:81:89:a0:
76:7f:43:83:c3:0c:0e:46:6c:c7:9b:36:6f:47:44:4f:05:61:
9b:e3:e6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:15 2025 by rpki-client