Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer (raw, json)
Hash identifier: yh2TGmCmEIsPXgOWsfK8FPtbmkK8pslrIjNh3PXzGfQ=
Subject key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1A57A8E00482C9C006A07E302804E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48136
IP: 2001:67c:c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a5:7a:8e:00:48:2c:9c:00:6a:07:e3:02:80:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:d5:c3:3f:59:67:7a:65:06:7b:e5:3f:8c:
4e:db:c3:3f:79:0b:31:67:84:47:8c:5f:9d:58:b9:
b5:68:9a:2c:10:90:a4:57:73:1b:b4:20:53:59:c5:
a7:51:16:f9:94:32:33:eb:8e:88:49:d3:a6:25:35:
c8:72:dc:08:d2:e1:b0:2c:95:64:45:d3:1a:93:23:
a5:fd:9a:09:1e:81:f5:d3:9c:10:04:07:c2:ce:bb:
6a:39:f1:e7:45:94:31:61:33:2d:02:0f:68:33:99:
a4:ad:42:f9:0e:e4:f8:ee:2f:b4:40:e7:e9:be:05:
10:7a:f2:f7:05:6a:d3:37:d6:c1:a0:68:ff:2f:11:
cf:13:98:10:36:67:74:42:01:0a:3c:39:3a:09:03:
92:5b:50:3b:50:59:65:9c:58:72:66:81:f0:3a:c3:
17:6d:00:29:92:2b:cf:c8:14:d1:43:36:85:a9:2a:
d4:85:b9:18:76:48:db:d9:a1:4e:ca:a2:0f:3b:ae:
87:d3:2a:a6:a0:8f:84:f9:d4:44:5a:63:90:85:0b:
be:8d:24:a8:a0:9c:dd:3b:5c:9e:50:1a:d7:5a:7e:
d8:23:77:71:44:f7:a2:02:7e:c0:39:4b:d4:31:f9:
6d:80:21:64:56:e5:18:8f:06:05:9d:3e:ae:ca:c4:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48136
Signature Algorithm: sha256WithRSAEncryption
02:d6:9a:8b:15:58:7f:69:1c:55:ac:7e:8a:ea:0f:ad:a4:ce:
e0:5d:2a:5b:68:be:df:71:e6:e3:a7:4a:08:a4:ca:1d:16:ea:
3c:c7:77:d7:84:b2:73:ea:77:09:d1:d2:7a:5a:23:81:29:cc:
b5:61:56:09:cc:fa:6e:b2:56:d5:ba:0d:4f:fc:45:83:ce:1b:
00:4c:86:b2:f0:a5:77:d8:b8:8f:40:7a:4a:15:e8:9d:aa:1c:
8c:d9:6e:71:1a:87:36:f1:3c:c7:11:f8:6c:f9:48:e3:0c:8c:
9a:51:59:91:37:8e:d7:e2:c2:76:38:2c:85:36:06:78:09:0c:
ed:11:da:08:14:56:23:25:f9:f0:d8:11:ae:ae:33:99:f5:37:
62:3e:50:d9:68:f0:b7:57:e7:5f:bd:74:86:29:b5:b6:7b:b8:
52:34:be:95:34:b8:24:ed:94:6e:7e:e7:a3:8f:6b:f6:3a:6d:
03:36:13:ca:6a:c9:a3:76:42:cd:62:71:cd:15:c6:26:5e:3d:
ae:7e:c5:fa:b4:cc:12:d6:d4:f6:b3:77:59:d8:32:40:c2:b3:
0e:ed:75:d6:7e:46:05:dd:83:2b:02:94:11:2a:7e:4c:87:e0:
d7:55:26:1d:6e:23:74:16:7c:aa:27:f3:08:54:c6:2e:8a:7a:
b5:b6:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:55 2025 by rpki-client