Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer
File: EwZxu09jgBL4KLuizOeFwXJTDAI.cer (raw, json)
Hash identifier: 7TXc5tCNx/oYZv7695XtSgbT5/m0oxUxnrsWx1mLg6s=
Subject key identifier: 13:06:71:BB:4F:63:80:12:F8:28:BB:A2:CC:E7:85:C1:72:53:0C:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5E575EAC866E904ED752E62AA2426
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216265
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e5:75:ea:c8:66:e9:04:ed:75:2e:62:aa:24:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=130671bb4f638012f828bba2cce785c172530c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:be:e0:66:5c:f3:c7:86:2e:a8:4c:df:24:
48:ee:08:cd:ea:ac:36:e3:58:9e:1a:33:04:a8:bb:
e7:b8:ec:40:94:96:e5:05:34:f6:5e:79:2e:ca:45:
2b:e4:64:33:ae:08:b8:0f:f4:02:4b:00:60:73:db:
e5:35:72:cf:12:e4:24:03:c7:79:90:a4:82:af:14:
e8:18:b3:a7:85:52:62:8f:16:c9:5b:7f:83:b6:8f:
11:21:c4:42:92:ff:b3:51:35:8e:80:81:de:6f:ba:
9e:20:d6:68:00:93:ec:44:87:a2:53:b4:9a:ce:de:
03:38:7b:4b:d1:fc:79:34:22:86:c1:32:86:f1:4b:
fc:7b:8c:c6:19:55:22:39:7c:73:de:6b:07:2a:17:
ca:8a:74:e6:53:5d:49:ae:8c:8c:b9:2e:b8:a8:28:
c7:30:cb:30:05:77:22:d3:46:9c:4e:ef:e5:4d:27:
aa:3e:fc:ef:75:ee:06:e2:7f:7e:b4:a0:19:21:4c:
81:0c:00:b1:e6:2f:84:a4:0f:37:bc:da:50:d4:4b:
b9:e7:fa:ac:fd:51:4b:7c:ba:76:82:6a:6c:e1:14:
17:ed:cd:3a:1c:08:dd:13:a0:ce:e0:a2:24:11:de:
f2:29:b9:8d:5e:3a:6e:e9:74:ea:c2:06:8a:ec:ef:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:71:BB:4F:63:80:12:F8:28:BB:A2:CC:E7:85:C1:72:53:0C:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216265
Signature Algorithm: sha256WithRSAEncryption
7f:18:04:11:24:80:6e:9f:fc:d8:2b:44:66:2d:4c:7c:f4:0f:
e8:ba:56:98:c1:93:e6:ba:0c:00:89:f8:f3:99:33:6c:49:24:
50:fa:e6:22:18:07:98:72:59:c7:c1:0b:f5:d4:01:2c:c2:36:
44:4f:5b:6f:50:da:e3:dc:ad:5f:1f:7e:89:30:70:fc:fc:f5:
52:08:ac:b5:35:68:4c:f0:47:2c:9d:40:b8:7b:9e:87:65:e3:
b7:9a:31:80:c4:14:9d:5e:71:11:0b:99:fd:7e:ca:c4:a9:eb:
aa:19:d5:cc:06:2f:bb:74:d7:ab:e3:a0:81:d3:cc:71:65:c1:
c0:12:71:d8:90:9a:ce:8d:82:d7:26:e1:67:f0:6f:2c:9e:4d:
3d:64:28:93:88:8c:b8:53:0a:d5:ac:3f:97:e1:13:49:f0:ca:
fe:5c:0d:8c:e3:5e:59:e2:ba:ba:29:0a:fb:e0:43:a6:ac:80:
f6:4d:d9:61:3b:67:08:84:38:ad:43:42:ad:8e:e6:7c:68:de:
42:14:42:e6:92:b7:06:ce:18:4c:40:9f:92:58:9a:32:31:22:
91:06:e9:21:85:27:07:71:f0:6d:3d:f8:63:29:55:f1:e7:9b:
f7:36:d1:50:61:fb:2b:58:5d:80:e5:97:16:09:6d:a8:28:0b:
a4:2b:7f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:10 2025 by rpki-client