Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
File: F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer (raw, json)
Hash identifier: kmos4xTkPlA9npc7IeXK5Dr4IjkIMzGEVsFnzKnww2g=
Subject key identifier: 17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F12192AC4E31EFFE7F4C19D74AB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210576
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f1:21:92:ac:4e:31:ef:fe:7f:4c:19:d7:4a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:41:4b:90:ea:c2:0d:83:54:f2:47:93:8f:
33:f5:b4:02:05:1b:71:26:5c:06:18:c1:e4:96:37:
54:4b:14:31:e6:9e:d2:b7:11:03:dc:93:06:ea:4e:
a9:48:34:f1:60:5d:02:52:ac:4a:ae:44:e9:09:5b:
e1:ae:f8:5a:67:f6:83:54:9c:c3:24:2e:db:f8:b8:
3b:e5:73:0a:0b:1b:95:22:62:14:3d:62:0d:e3:42:
d2:6c:63:8d:88:e6:7e:54:8b:f1:0c:8f:30:58:9b:
92:12:20:c5:1b:38:1e:61:86:4f:f3:e8:48:11:1a:
e3:61:5f:ae:38:24:82:25:f5:03:34:a4:1f:fd:e2:
d3:65:93:8c:95:07:e7:98:08:b9:29:d5:c5:49:e6:
45:0f:9e:8a:9b:49:16:f5:fe:11:7e:d6:fd:ab:a9:
72:3e:f8:4b:65:bf:de:f9:5d:2c:a0:7f:7b:71:06:
8a:82:85:6a:d2:b9:28:d2:9a:ad:bc:f1:02:94:e4:
50:dd:e3:3d:74:4a:bf:10:e0:1f:82:c5:1e:5d:8d:
ae:6c:2d:a1:4c:dd:e2:20:72:9f:95:13:c1:44:f8:
08:d5:4b:f6:3d:5d:04:19:0f:1e:2a:63:ca:98:2f:
04:78:de:20:f4:c3:54:a7:43:6b:01:89:da:f6:f1:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210576
Signature Algorithm: sha256WithRSAEncryption
73:da:ef:65:ec:72:1e:f4:46:81:3a:ae:af:5f:e3:80:b3:8e:
db:61:ee:34:8d:76:06:3a:48:3f:db:2f:c9:85:60:f8:58:99:
eb:fa:72:87:2e:f8:cb:ab:75:c0:34:09:57:93:ab:ad:d7:ca:
7c:5b:35:3f:7e:d7:66:fd:ee:7c:a2:97:e6:52:42:cf:0d:e0:
88:6f:77:58:75:51:7b:a7:ca:84:65:e1:fe:66:1e:bd:fc:f8:
ef:d1:11:45:33:62:ca:24:85:4d:c7:da:1e:cc:51:4b:b2:ae:
9b:2b:e7:57:ee:be:5e:20:34:c3:56:36:26:56:41:dd:23:87:
93:3b:ee:77:c4:2d:f7:9f:84:6a:c8:70:24:c9:7b:7f:9e:3c:
30:b9:81:7d:a8:f8:15:19:d3:82:8c:65:e1:8e:29:aa:a4:ae:
aa:18:be:cb:55:d0:e6:a9:45:c0:55:11:0f:9d:ea:fd:d7:63:
1d:30:76:1f:e4:5e:58:53:c8:6b:89:8a:89:84:55:fe:27:4e:
8b:8b:85:c7:6c:06:dc:6e:ab:06:d7:64:89:3b:3f:7a:92:c8:
2a:df:d9:a4:84:dc:f1:3c:b9:0a:56:c4:d3:5e:1f:01:e2:4a:
82:8d:42:f3:1d:70:a0:1c:5f:80:c2:19:d6:4e:7a:bc:5f:c8:
2b:c5:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:02 2025 by rpki-client