Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
File: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer (raw, json)
Hash identifier: ZfVj6fTaIdikVk1ngO5QxJ+DHC+tcYG9q+/yEUoThUA=
Subject key identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421443D0E17AE095A543589402DAAA20A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214243
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3d:0e:17:ae:09:5a:54:35:89:40:2d:aa:a2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:de:1f:e9:79:b7:3d:81:66:38:cc:37:77:
d2:b5:cb:ff:bc:22:af:db:d7:59:e0:13:42:55:61:
51:5e:c4:55:13:95:76:d6:e1:35:8d:bf:e2:76:58:
0a:28:34:e7:91:e5:c4:a8:a4:44:9c:cc:d4:ce:58:
0f:4d:b7:e7:29:04:10:c0:ce:17:de:e7:2d:e5:2d:
e0:f3:33:fb:2e:a2:44:1f:8c:bd:ba:60:5f:9a:1a:
d0:e1:68:49:d8:5a:98:2c:8c:9b:d8:e5:3b:d0:ee:
34:64:b8:20:e8:f1:cf:8d:d3:5b:2b:43:ce:3f:7f:
b6:ed:c4:ac:0e:ca:64:dd:9a:36:71:c7:a2:01:87:
e4:0e:c3:05:6d:f2:6f:be:49:e2:48:bc:fd:aa:e7:
e1:55:89:aa:60:af:ef:96:09:e9:ce:0b:0d:e8:8c:
ed:09:be:e6:d6:75:d5:1c:8b:76:9e:00:bd:ec:3f:
49:ee:8d:90:37:3e:7f:95:94:d7:ba:be:1d:5f:fe:
42:77:f9:f1:66:cd:fb:94:ea:06:c8:9f:a1:d5:8c:
7a:12:9e:4c:06:fc:4d:19:29:a8:14:4b:d7:29:8b:
fe:18:7c:2f:aa:16:aa:38:89:ed:e8:70:69:b3:21:
a8:db:52:a3:20:a9:a3:a2:e7:03:68:9b:0f:91:a0:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214243
Signature Algorithm: sha256WithRSAEncryption
6c:84:41:ce:52:8d:c2:6d:f7:d1:61:69:bb:86:19:9d:9d:8a:
aa:6e:37:a1:6b:e0:84:f4:d5:82:70:c1:eb:c3:e8:bb:a7:4f:
1d:0f:70:90:80:d8:69:68:9c:ab:78:ad:ad:87:7b:aa:2e:a5:
c1:0b:25:93:c3:b6:fd:43:56:91:ee:02:fc:88:8e:02:82:c9:
41:c7:ef:6a:8e:38:b8:6c:d7:5b:d2:b3:3c:f7:0a:6e:d2:eb:
8e:ec:c9:12:3c:b4:0c:f9:ef:4d:be:52:bf:93:60:98:7f:a3:
6f:14:73:69:e1:74:1a:92:1d:03:2b:1d:39:6d:9e:47:77:65:
f9:37:af:3d:e8:fc:8a:bf:c1:2e:22:2c:52:8d:e8:1e:53:95:
2b:26:6c:74:40:ce:c3:bb:cf:ca:55:2a:0e:ea:1e:37:87:52:
3b:75:14:e1:df:0e:f3:64:21:94:d1:b2:63:06:5b:e7:54:c7:
fa:11:c3:6b:6c:2e:c6:7f:30:66:99:f1:35:ab:63:b0:21:44:
23:d3:6a:40:83:81:61:68:37:7b:8e:6c:75:8c:b3:7d:db:51:
35:84:01:0c:45:66:da:19:06:1c:74:8c:fc:35:bc:9d:a0:7e:
f7:26:f9:54:1c:0d:93:86:d4:cf:09:7c:92:e9:05:f1:0d:9b:
15:99:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:40 2025 by rpki-client