Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
File: F1oeMrvmeal2_GGmA-3NalQHK48.cer (raw, json)
Hash identifier: K21ef3csYaxp8SMiQHp+fAmzDro3DEKLi+cdb/ZaRC8=
Subject key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B55C4C8B94D57126D66CAD0F7857B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215087
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5c:4c:8b:94:d5:71:26:d6:6c:ad:0f:78:57:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:22:65:3b:46:5c:05:e7:97:74:62:16:c0:
47:b7:70:e8:62:d2:8a:b7:8d:4a:83:4d:a5:d5:e3:
f6:0a:5a:b4:29:90:55:ee:27:1a:71:f3:7a:f1:5b:
a8:b3:78:15:78:e6:5a:a5:65:d3:97:1c:ee:8c:42:
6e:6e:d7:10:40:7b:63:fe:df:d5:9a:c6:49:27:b4:
33:1e:d8:68:bd:56:a6:46:6e:cb:ab:1f:c6:31:95:
ba:cb:0d:99:9d:8d:fc:a7:8d:85:d7:8c:31:90:34:
71:f0:33:07:ea:f4:6b:6c:cb:39:cd:6f:9c:b0:60:
20:42:ce:28:9b:cb:94:a9:41:a9:c3:64:59:35:6b:
8b:fc:25:00:8c:e4:ab:f4:77:da:15:85:fb:12:f7:
67:fe:46:eb:0a:78:ea:1d:c7:55:b2:cb:9f:21:5a:
76:cc:38:d0:21:b5:7e:c3:7f:d6:2c:f4:19:4c:6c:
cb:7b:18:3e:79:64:be:75:7e:d0:d1:6a:52:72:9f:
71:a8:fa:dc:e6:6b:0b:16:f3:23:7e:95:02:b9:f1:
cb:9c:29:3e:da:7b:7d:88:fe:86:69:36:02:65:f7:
92:8c:e5:57:16:b5:8c:a6:1e:de:fd:eb:0d:bc:78:
c1:00:74:cd:bc:71:c1:23:94:00:fc:96:2d:59:73:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215087
Signature Algorithm: sha256WithRSAEncryption
a4:35:9d:3d:24:7e:79:3d:3d:27:c3:37:d1:8f:09:17:e0:99:
a1:54:1e:ae:fe:4c:01:e5:b6:91:0c:e9:5b:00:2f:6b:a5:f7:
af:3a:64:97:20:b9:47:b3:1c:aa:e3:ef:34:ea:44:c9:76:27:
c5:11:e6:22:e7:cb:75:70:e5:a2:f4:84:e9:76:27:a1:aa:19:
f6:b8:24:32:60:1d:3f:07:af:88:ee:7f:1f:e3:f9:fc:39:7e:
fc:e3:4d:e4:12:da:62:a6:4f:0d:86:45:53:a3:22:ba:ed:41:
3d:f0:08:8d:87:4f:19:c2:6d:c3:98:23:4c:3d:79:1f:37:83:
70:34:6d:2b:85:30:bc:10:29:c0:22:82:c5:41:ba:a3:e2:56:
86:58:43:fe:c1:a3:25:a3:8f:13:ba:2a:86:bd:8a:79:ac:e0:
84:84:bf:a8:e0:e1:15:bd:00:5b:b1:a6:6b:ae:6f:7e:28:af:
75:23:23:bf:30:78:fa:72:7b:f5:83:26:6f:72:53:ce:e0:03:
f9:ca:89:1d:b7:2f:11:3a:66:84:57:c0:32:3e:e0:4b:ba:c5:
d7:1e:b4:15:65:25:3f:0f:40:69:70:a4:04:70:ad:bc:5d:4b:
8d:11:16:81:9a:db:93:cd:a1:a6:d8:db:65:49:9a:53:c7:26:
0f:51:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:49 2025 by rpki-client