Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
File: Pq9YPXwbe09XMQE8iymLpQVGTlI.cer (raw, json)
Hash identifier: bm26AT6PcLi/WWFZm8d7U6FGVZBMpqCM25ilY3ubr/w=
Subject key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8CA07BAB63A1CA43ED86CCCA458937
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204067
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a0:7b:ab:63:a1:ca:43:ed:86:cc:ca:45:89:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:6e:8f:41:aa:43:b8:4b:a0:e1:fe:ea:e8:
99:bd:00:cb:ce:66:77:8a:75:fa:10:9f:2a:85:f3:
3a:be:68:77:22:16:0c:06:da:28:b2:4c:77:5f:82:
2c:57:ba:d3:e9:c4:2d:59:8b:ab:2b:e6:5f:e9:ae:
ce:a2:8d:c2:8d:34:ea:d4:59:f9:6b:5e:7b:d3:95:
35:d4:3a:93:1a:b0:de:f6:c9:a3:a0:fb:74:f2:b1:
b8:52:e9:a0:d8:21:e3:c1:ae:cd:26:c0:e1:5a:60:
72:64:8f:57:51:9b:00:0b:74:87:66:4e:20:ec:b8:
ee:44:93:ad:eb:30:5f:bd:f3:0f:ee:1b:4e:c3:14:
cb:9e:0d:07:44:d3:bf:aa:91:99:26:80:f5:95:0e:
22:12:6c:4e:e5:aa:3e:88:92:97:2b:a9:bd:1a:df:
86:8b:7b:49:28:2c:3e:a0:08:b3:ce:fe:6a:19:5d:
7a:4a:92:d4:c4:12:6b:74:02:0d:91:59:35:a9:ce:
ab:ac:fa:c4:46:04:f1:cf:5d:31:f0:9a:aa:a8:e8:
32:18:87:91:6a:2f:17:3b:fa:7d:0e:6a:1c:f0:c5:
6d:af:b6:b4:5b:99:06:f9:2d:4d:c4:cb:b9:54:51:
e0:18:16:a5:24:98:cb:98:a3:a9:21:7e:77:5a:01:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204067
Signature Algorithm: sha256WithRSAEncryption
35:e9:e1:3e:89:f9:93:27:df:96:18:e3:27:4c:90:26:b5:5e:
15:79:5d:74:04:05:dd:dc:d2:65:9b:dc:5b:11:35:4c:17:82:
44:99:3d:41:c6:c8:0b:13:c6:31:36:73:67:cf:61:a1:e2:33:
c1:d4:9c:ca:ad:59:16:5a:47:0a:c1:04:ed:d4:fd:8b:41:c0:
ec:6f:b2:05:36:f5:47:ca:3d:ac:2d:9c:9a:5e:28:12:5e:ed:
a7:0d:66:08:5a:bf:c3:f8:19:6b:b3:b2:8d:14:4f:99:8c:98:
0c:bc:6e:ba:94:79:d6:88:78:85:4f:8b:a2:08:31:68:a7:c6:
e4:7d:a1:8f:3a:b1:9a:44:fd:f5:d0:55:ae:8d:bc:ea:44:fb:
3e:27:ac:94:f8:df:be:75:2b:3e:74:da:11:c2:f2:0f:a8:67:
8d:35:b6:9b:18:a1:ee:c7:c4:46:5b:88:b8:7f:dc:6e:6a:1a:
81:bc:4e:cd:80:de:43:f4:d4:9d:c0:e4:02:f5:bb:8a:80:31:
7c:81:31:2e:a5:99:48:27:31:53:3b:79:7f:4c:e5:62:a2:a6:
e2:d0:81:36:79:67:c3:56:ba:72:4a:8a:44:d6:5c:cd:87:5b:
77:6a:66:c6:ae:f9:88:27:b9:c0:44:90:a3:cf:eb:3e:e9:b4:
86:44:d9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:19 2025 by rpki-client