Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer (raw, json)
Hash identifier: b8TmZkI0UaVJSmUkcI+hCIhr3cHlcF8/IME10cBWG9Q=
Subject key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427464E8F732D6E955A19C4F485240CEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215221
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:4e:8f:73:2d:6e:95:5a:19:c4:f4:85:24:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:a6:df:5e:48:d8:82:83:91:d9:78:77:93:
69:c0:4a:03:28:bf:bb:a6:34:75:e2:b5:b2:80:61:
63:c1:7c:91:d9:9d:bc:35:89:95:d5:85:9b:69:19:
ae:af:27:46:68:62:e6:f5:a1:43:85:95:eb:19:37:
6a:6a:09:a7:e5:51:61:33:68:d9:61:44:cc:18:ea:
4a:e5:f0:c3:dc:d9:c8:9c:7e:ac:29:67:24:e1:2d:
15:31:04:e4:b3:40:9b:2e:66:cd:2c:b3:93:35:ee:
dd:6a:54:ff:68:80:8e:e1:68:97:c4:7d:63:4a:96:
b2:fc:4d:83:c1:77:69:72:34:1f:d8:85:70:db:ff:
7c:cd:7e:2a:1e:0d:2b:d9:bd:43:40:f2:8a:b2:66:
d0:f9:33:b7:27:d6:05:7d:e3:89:ba:7d:fb:a8:c2:
2f:25:ce:b1:74:80:2b:b9:5d:0a:a0:5a:ca:f3:da:
ef:79:17:c1:6d:aa:29:02:27:05:dc:02:4e:f1:e0:
bb:56:90:c1:47:84:44:f5:c0:cf:eb:b4:a5:17:16:
ac:82:a5:9e:57:77:96:2c:36:17:6c:d9:62:14:bf:
72:37:c0:2e:b9:b4:cd:99:f5:82:a2:57:41:15:ae:
f1:73:35:b1:71:9c:d0:96:d4:0b:74:ff:d6:59:2a:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215221
Signature Algorithm: sha256WithRSAEncryption
80:a5:73:17:2c:29:d1:34:9b:c9:4e:2e:d0:2a:0b:a5:85:bb:
2a:ff:99:40:71:c4:69:38:4d:21:bb:34:0c:4b:ad:d8:07:8d:
a4:68:aa:a5:6a:11:90:9b:0c:2e:88:63:e9:6b:4a:8d:60:82:
63:30:27:3b:d9:4a:8a:e8:24:00:f8:25:4a:0d:17:f7:9a:bc:
6e:a8:43:e3:92:d1:aa:4d:29:96:77:ab:44:57:71:d9:08:21:
e4:89:c9:c2:06:9d:02:95:5e:67:b4:9c:06:e6:a9:b1:74:29:
7b:fe:08:b6:5b:a2:21:69:11:dd:87:f4:e3:ff:fb:d8:38:18:
97:21:0d:c9:0c:dd:90:4a:54:d3:9a:fa:c9:88:c0:88:4d:bd:
31:53:10:8b:fc:01:c0:db:fe:82:54:0d:8b:7c:ce:23:9d:7a:
a5:c4:b5:b3:c4:d8:db:48:65:89:4b:3f:54:d2:40:d4:dc:4b:
c5:a2:25:91:1b:0e:c9:17:5a:b2:70:99:be:6d:83:1d:8e:b9:
84:af:30:28:a9:f8:20:75:7d:87:73:0f:dd:91:39:0a:24:dd:
4b:cd:04:89:e0:65:5f:5a:f5:42:86:cc:70:b0:6f:d2:27:69:
c0:ab:3f:7a:2f:66:3b:ce:a2:bf:be:39:ce:55:84:85:72:f3:
1b:1f:26:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:29 2025 by rpki-client