Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
File: KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer (raw, json)
Hash identifier: X3kk1MhxSBPKySUYLig9nHvGKw5tXqEhNPvtc04BzXU=
Subject key identifier: 28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA843C658E45D372706B2CF39EF8BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48852
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:84:3c:65:8e:45:d3:72:70:6b:2c:f3:9e:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:f5:fa:6b:5a:77:a7:6e:49:bb:c7:48:6d:
ee:47:8a:d2:34:e0:db:7e:1b:dd:b8:78:04:09:fe:
c6:dd:e5:55:9f:ac:c8:8c:9c:d0:e0:99:cd:d5:cd:
88:3d:4d:11:4a:b8:9b:37:df:e3:16:58:44:ed:9a:
e0:51:f4:68:de:7d:3b:b1:c2:88:74:56:47:cc:45:
9b:10:5e:be:13:cd:58:9b:2d:99:b1:4a:22:26:7b:
92:db:67:36:ca:d4:17:93:c6:c3:95:d9:2b:ea:a4:
a0:3c:1f:37:8e:58:a4:b5:a9:fa:4d:e1:c9:54:e8:
30:1c:d6:da:6a:14:65:a8:cb:0f:df:a0:e8:d2:1d:
6a:e1:f9:39:cb:8e:d8:3a:1c:24:09:db:99:13:2e:
de:eb:41:2f:52:ae:4c:78:32:28:d4:37:0f:9e:52:
5c:02:62:bb:aa:96:62:45:de:d7:98:f7:c6:47:9f:
81:f4:40:46:70:0c:97:4b:d6:c5:09:c8:fc:9a:dd:
ff:fe:96:38:27:58:c3:ef:72:e0:12:b5:9a:43:34:
06:e8:39:4a:ec:55:17:a0:b4:1c:80:ce:35:bc:46:
c1:c8:95:9f:02:33:53:91:fd:65:90:bd:be:32:9d:
4b:24:ad:d6:a4:f2:0b:ac:c9:ff:d0:b8:e6:52:64:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48852
Signature Algorithm: sha256WithRSAEncryption
4e:18:2f:fa:42:2a:0c:cd:d1:c9:1e:83:8e:ed:cc:ae:6d:56:
90:ca:cc:2d:90:39:9a:ce:48:13:07:99:aa:12:38:c9:de:e7:
c8:20:53:d8:11:10:82:71:2d:e6:33:d0:df:93:dc:7f:f1:8b:
eb:8d:c3:47:ee:15:30:4e:58:2a:b0:d3:05:4d:e7:c6:88:bc:
2f:0e:5c:4a:fc:45:53:36:ad:80:32:aa:28:68:0d:f4:9b:77:
09:19:20:a5:93:4f:8e:b8:e9:35:f8:7b:71:34:c9:20:82:0b:
38:f6:b3:fa:67:88:60:db:78:ac:76:b7:f7:e2:15:e8:59:fc:
d6:01:dc:93:16:dc:92:b2:6b:5c:1a:b6:c3:d2:af:d0:5d:3d:
34:a8:49:4a:a5:1e:88:f9:dd:82:ae:37:9f:cd:4c:8f:02:27:
4f:91:a6:06:14:46:77:0b:fc:68:54:a0:eb:5b:23:40:a9:22:
bc:6c:31:7d:bc:a8:5a:73:0f:0b:6a:72:f5:8e:f4:ef:b5:ae:
05:fa:bb:4b:23:9d:dd:49:4b:69:35:2a:4c:3c:46:32:aa:b8:
d0:1a:40:5f:39:e4:48:52:70:4c:96:71:8b:69:f2:55:92:5a:
52:d5:98:09:fe:3f:85:c2:b2:72:d8:b9:76:0d:bc:0c:1c:48:
5a:6e:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:32 2025 by rpki-client