Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
File: Illqyngn2jIPE1xhMpnjWi4iJUM.cer (raw, json)
Hash identifier: YuZvmoe/vypg85PxxRXhpvpKOmEHm5z+DQtPyq6t4dA=
Subject key identifier: 22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7BC46759F8FA704CCF2AFC11FF51E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200226
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:bc:46:75:9f:8f:a7:04:cc:f2:af:c1:1f:f5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22596aca7827da320f135c613299e35a2e222543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:2f:e7:5e:a0:0d:07:51:f5:39:dd:b6:e9:f9:
7c:fe:9d:60:7d:49:37:17:d9:2b:92:30:59:16:ef:
ed:29:9d:3f:81:bc:ee:10:cf:18:02:27:87:54:08:
51:19:0c:39:d6:d2:ad:9e:04:28:5f:6e:7f:83:b9:
18:eb:fd:99:0a:ff:81:29:6d:e3:dd:0e:92:ad:5e:
31:ff:df:b4:fb:35:93:56:0b:e7:c1:a4:33:5a:00:
5a:1c:46:ea:49:73:75:4c:9c:74:1b:92:23:b2:0a:
95:36:35:8e:e5:7e:2a:27:be:de:39:54:31:0f:01:
33:01:bf:34:08:6e:08:e0:36:c0:06:38:87:91:fe:
10:3e:ef:92:93:d4:85:47:c8:56:92:d5:b1:fe:7f:
c5:f5:6b:7f:46:25:e5:a3:88:1e:e3:23:a1:74:93:
8e:9b:2a:0e:34:15:34:62:10:79:65:ab:b4:8e:4c:
15:8c:79:3c:06:1e:e3:9e:50:88:fc:ca:54:c4:ac:
4f:5f:b1:34:43:20:38:6d:89:b1:00:f4:eb:db:91:
61:4f:5c:25:16:aa:5b:13:de:5c:04:4e:13:31:2d:
5e:e2:ee:e7:29:08:6b:6e:f8:30:68:6f:09:bc:fb:
ad:8a:73:18:af:6b:03:ae:5f:87:3e:6f:5b:29:62:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200226
Signature Algorithm: sha256WithRSAEncryption
03:65:76:6d:56:6f:32:ce:10:55:ad:f0:b5:08:c6:22:92:c6:
2d:94:6a:92:17:13:47:75:b0:76:87:6a:e2:9f:92:13:fd:b7:
45:cd:f5:f2:0c:39:f7:14:b7:41:47:e6:bb:c8:2d:c4:6e:cf:
77:3e:4e:9b:91:19:9f:42:63:31:f0:23:ee:1e:c3:1d:6f:b3:
df:85:9f:42:4d:20:35:6c:72:53:ff:d3:74:9c:3b:7e:f4:0d:
8f:51:d5:43:bb:6c:d3:0b:e8:16:f9:ef:19:d9:83:b0:b3:bc:
f5:f5:21:f5:c3:5e:53:20:b6:a3:97:72:0c:f6:0c:c1:e2:18:
ea:ba:59:c6:82:d3:3a:8a:46:cd:80:fd:6a:a5:05:48:3d:89:
a0:61:52:9d:ba:a3:c9:a2:55:e5:8c:d5:5d:7c:9a:34:85:c5:
17:84:b7:26:a2:6e:a3:84:2b:44:50:80:c5:bf:13:a3:6c:6e:
73:9e:64:42:82:31:b2:93:4a:4e:1a:a3:08:81:56:09:32:5a:
5b:0b:63:9d:8a:79:16:df:de:17:f3:07:ba:6e:be:ad:75:a5:
e3:37:e5:c3:93:22:fc:b0:7a:4a:7b:33:06:b6:30:89:e2:26:
8a:80:d5:07:02:62:87:91:fe:7f:a4:b7:e6:0f:ac:39:24:72:
77:d7:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:58 2025 by rpki-client