Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
File: G7Qd9-pn1O3-D60S99XOzYPhjZo.cer (raw, json)
Hash identifier: E4NObaKxP1dHkG6VdvhblLpPoQ8njYs9U2KQKyPoMxM=
Subject key identifier: 1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420682E7E440B2D8F1F5FB0327C158EC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48747
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2e:7e:44:0b:2d:8f:1f:5f:b0:32:7c:15:8e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:c9:e6:fc:fb:b3:72:76:3b:5a:3d:f3:21:
ec:8f:cc:a0:f1:c4:c4:44:e4:c6:07:bf:5d:a7:08:
87:52:da:cf:60:1f:31:e4:13:6c:af:73:df:b2:09:
4e:04:09:2c:f0:fb:83:fc:78:7e:9b:f1:ab:fc:25:
94:38:93:19:60:74:7f:ad:73:69:b3:01:20:33:8a:
4d:7b:70:7d:d6:22:0f:b3:91:fd:b1:9c:93:4c:7b:
d4:9e:f4:d5:99:91:22:c7:72:9f:08:37:0d:e8:45:
b7:58:18:61:16:91:0d:ed:0d:16:45:48:1f:e1:24:
72:2e:b6:98:77:5d:91:93:6a:44:e2:88:42:1f:d9:
99:4a:2d:b2:b5:50:53:7f:22:83:de:2d:ac:3d:81:
6f:c8:b8:e0:a2:42:8d:65:0b:69:de:28:9c:62:e2:
1d:a6:ee:54:61:5c:f3:48:d4:24:67:6b:d2:a0:00:
32:81:25:cb:ce:4f:be:cf:e5:51:8d:99:c9:37:07:
a3:46:53:a6:94:b9:ac:61:e8:e9:4f:c4:e7:c7:fb:
0a:54:7f:f8:de:4b:34:83:b9:5b:a0:bd:13:48:07:
b0:98:52:cf:4e:92:12:a5:79:5f:66:b2:f7:8a:16:
85:ec:8f:a3:c9:a0:5c:06:bd:8f:99:09:7e:6f:cc:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48747
Signature Algorithm: sha256WithRSAEncryption
6b:b0:ed:67:bb:81:62:ba:0a:74:c9:d7:b6:ce:fd:ea:e8:ff:
df:b6:0d:10:55:a9:21:c8:73:78:c4:95:3b:d6:ae:5c:e1:0d:
46:14:49:55:4b:87:43:21:a8:38:2d:ca:c8:d4:64:67:43:b2:
89:0e:03:62:0c:0e:cd:dd:cd:0f:15:16:69:f8:a1:4f:47:75:
3b:0d:82:e0:bc:44:1d:57:62:4d:f0:f5:c3:64:69:f6:0a:9b:
a9:c4:f0:7e:4b:bb:b0:44:21:78:87:31:52:64:31:6f:eb:ae:
40:9e:94:49:dc:73:fe:11:0f:09:e4:71:f1:74:05:d6:f4:ad:
51:b1:d3:d5:90:a3:f8:65:98:ed:ea:d2:bb:57:98:20:a6:02:
95:ae:a7:fe:b9:4f:6e:4a:3f:24:5f:45:1a:6f:fc:eb:5c:dd:
14:26:4b:f1:ac:10:a9:ac:94:e1:dc:4a:ad:4e:a0:05:59:0f:
bf:63:fc:c7:7b:9d:03:79:f7:7b:bc:6a:20:ae:c2:d3:2b:22:
4f:a1:f8:20:74:f9:71:0f:1e:48:1c:8b:b9:59:75:5c:d7:50:
7d:04:95:45:d4:ae:17:94:23:b4:ba:05:bd:4b:1d:74:ec:73:
0f:e1:1a:73:00:ac:9f:06:c3:6f:9b:d8:b5:23:14:d2:22:58:
d2:e2:a4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:24 2025 by rpki-client