Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer (raw, json)
Hash identifier: XdnuLO6slmvSuEWFk6wwQWRajfspOzi6bKpLg+cejJU=
Subject key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214451CE4848D25E6EBE40649EF23777
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205953
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:51:ce:48:48:d2:5e:6e:be:40:64:9e:f2:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:f5:7e:82:53:5a:a9:07:16:b6:b9:be:dc:
b2:1a:6a:d7:5f:b4:01:59:f7:da:fd:1f:07:67:0f:
2b:ee:d8:0f:46:b0:6c:6e:d5:d3:8c:d7:b5:1e:ea:
05:94:fc:93:cf:7f:aa:13:1f:43:cb:c9:59:74:31:
58:eb:a8:e5:f3:ad:99:30:2b:cc:b5:61:86:2c:02:
65:e6:02:81:9e:97:ec:e6:8e:22:62:05:a2:ee:6b:
74:59:ba:4d:f1:6e:ae:61:91:df:8f:a7:99:31:29:
64:5a:78:29:76:3a:e9:5d:99:58:68:95:4f:75:52:
40:a7:b9:a7:54:84:59:f4:a3:fb:88:20:03:ba:bd:
9d:36:b8:84:14:cf:c1:78:c9:2f:af:b2:96:44:f1:
4b:d6:21:74:5a:07:9a:8f:af:97:4f:5a:31:98:45:
2d:1d:2b:10:b1:cc:e5:ef:25:f8:8d:5b:41:1e:1e:
da:d4:b1:0e:61:72:b3:94:f8:60:c5:3b:32:11:95:
2b:41:9c:e9:80:b4:dd:49:25:96:18:3a:23:bf:bf:
dc:24:fa:96:64:f4:64:b8:17:a7:12:f9:70:7d:54:
a9:41:28:03:54:b2:18:3a:e8:8f:e3:d7:b1:e3:be:
33:ee:c5:d9:6b:97:f1:bd:33:e7:b3:f6:3d:be:1a:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205953
Signature Algorithm: sha256WithRSAEncryption
56:88:9d:db:42:8a:2f:02:6a:07:cb:79:ae:45:d8:b5:37:b9:
b4:f6:bd:59:47:25:21:bb:12:11:3c:29:18:47:27:ff:33:ef:
bc:11:b7:84:b1:06:d0:d3:92:a5:ee:1b:76:e3:6a:b5:c0:84:
f2:69:a2:9e:c6:31:ee:42:21:08:61:13:31:0a:b5:92:22:be:
9b:f2:f1:8a:09:84:cd:4c:ab:f5:fe:ee:39:00:e3:dd:4e:d4:
1a:c3:c4:3b:39:02:ca:d3:68:af:43:bb:01:28:a5:f2:13:aa:
08:e9:f7:68:83:3a:a8:48:80:a9:e8:7d:3d:34:4c:b1:6e:3f:
c1:35:37:2e:10:f6:44:d7:61:e4:1a:dd:15:96:ab:1d:03:8f:
8e:eb:55:cd:8f:03:ac:c9:24:14:eb:a8:cc:77:e2:c3:96:d2:
1a:27:65:2b:92:08:a6:d0:3d:0c:e4:31:d4:a1:98:6a:00:af:
a7:9a:f4:b7:62:89:95:fa:f4:e4:60:74:bb:8b:8f:0a:6e:f9:
9e:33:85:d6:f3:7c:2a:88:91:16:e9:39:83:42:41:1a:36:bf:
2e:7c:77:94:4b:7a:1f:41:55:36:64:53:4d:93:7e:43:e7:77:
5e:00:a9:60:ac:d3:e4:a2:0e:32:54:90:8d:9d:7d:e5:d6:98:
70:39:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:43 2025 by rpki-client