Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
File: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer (raw, json)
Hash identifier: gUJWja03UllsnKjBbnDkjab6AUTUi9yWGb+/27UQjMI=
Subject key identifier: 07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB5A5D02C9212301E259B4B2B1C082
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208029
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5a:5d:02:c9:21:23:01:e2:59:b4:b2:b1:c0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:39:4b:c7:6f:46:75:94:3f:1c:1b:b3:12:
a1:1c:6a:75:8f:37:13:af:42:a2:87:40:e3:5c:a8:
c1:a3:e9:b2:da:82:b7:1c:9d:1c:d1:d1:71:96:ee:
1c:34:28:59:3c:da:e3:de:7b:b2:a2:fe:51:64:58:
76:9d:54:85:e1:97:17:c0:73:a1:15:de:bc:0d:0f:
26:60:d8:80:c6:6b:af:a1:99:f5:45:8f:ed:7c:4e:
fa:e3:57:4e:e4:1f:65:e5:e2:45:11:87:96:96:69:
ed:45:e4:c8:07:07:64:32:dd:e6:5c:ba:85:2d:0d:
65:ed:cb:6b:8e:95:05:27:fc:2d:22:05:fa:5a:a9:
06:35:59:6b:b6:2a:f9:e4:0a:48:ae:b8:e2:71:f1:
1c:a9:9c:f9:8c:5f:41:22:b2:7d:95:95:d1:6c:52:
90:19:d0:fe:a2:ae:50:67:96:a1:52:8a:d6:0c:1c:
dc:c4:d7:4f:83:6e:92:8a:f6:ef:f1:c1:be:c0:50:
35:ad:ac:34:ba:41:0e:c4:f4:66:b6:8e:6e:78:dc:
3a:58:ac:e3:3d:47:69:3d:e1:1b:e1:b9:34:98:60:
71:be:16:ca:b7:a8:16:12:ee:48:ed:d7:2e:33:80:
14:3c:ee:b3:7e:e3:55:be:aa:72:03:3f:02:55:aa:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208029
Signature Algorithm: sha256WithRSAEncryption
58:e0:8a:b2:74:0a:52:b7:85:0e:a6:a9:6c:ec:25:43:e7:ab:
8a:5a:76:1b:f7:13:1e:26:4c:08:08:59:9f:d3:d6:10:d2:fb:
5f:df:2a:a9:10:43:f0:83:fc:f8:3e:05:a2:58:99:4d:78:bd:
71:dc:e8:ef:15:a7:71:a5:eb:74:20:79:8a:9b:6c:b1:a4:7f:
d7:5d:96:57:22:fd:80:f5:58:f9:3f:7a:19:b1:a6:af:9d:86:
e2:bd:e4:9b:52:42:2c:ff:ec:e9:6c:52:27:ca:45:90:ef:4c:
2e:6a:46:9e:3b:22:99:91:c3:bd:b9:5a:be:e1:04:4c:56:e2:
03:86:f3:ec:9b:8c:46:bf:45:fe:65:e2:44:bf:47:fa:14:24:
ae:4a:76:0e:61:d4:e8:a2:1d:24:ee:f7:30:98:41:4e:d1:ec:
05:54:c4:0a:bc:59:c6:0c:d6:fe:5d:49:83:15:bb:1c:5e:e6:
5c:b4:95:da:2b:5c:81:b9:4c:fa:c4:ae:26:74:d0:b1:88:b7:
d7:22:1d:00:26:86:85:c9:34:1a:94:d9:df:d0:1a:9a:fa:d1:
13:fb:69:19:da:b4:37:0d:74:4e:f8:6f:3f:89:64:88:15:39:
64:d0:55:f1:ec:3f:da:bc:92:9a:2b:c7:14:7a:8d:1e:da:12:
46:ed:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:28 2025 by rpki-client