Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
File: RX6_qZz102gBj6f-DBEjQfXTZcA.cer (raw, json)
Hash identifier: NbLCRHyl5b1hT5hdq8VCpFowEv+RAnUJVqNqKRdhZUI=
Subject key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444DEE6663F814D39F9A11479B0C9F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214478
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:de:e6:66:3f:81:4d:39:f9:a1:14:79:b0:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:b6:3d:31:3f:93:c0:c5:15:5c:1c:48:23:
1b:9e:2e:92:8e:28:b3:71:bc:b3:bc:40:d4:67:3a:
6b:7b:55:69:31:fe:e4:c9:9f:ab:4a:fb:85:d2:e2:
de:bb:76:98:da:cf:78:1b:2f:5f:b0:ff:8c:28:42:
dc:06:76:82:c8:e0:f8:5d:fd:03:da:65:f5:46:ce:
3d:3d:f6:b0:d3:5c:f1:cf:65:6d:f9:5d:85:56:b5:
1c:29:3e:04:f7:01:96:44:1d:8e:a8:27:15:09:84:
fa:e6:97:e0:84:68:22:52:4e:23:1d:5b:98:78:b6:
22:f6:d0:33:7c:cb:3b:19:3f:10:60:13:61:e3:1e:
96:5c:5e:17:7f:c3:39:34:4d:0f:e5:2b:54:52:43:
ad:06:64:04:1f:2e:fa:26:47:0d:e1:20:ec:a4:c4:
0b:4d:85:b6:37:19:ae:8c:78:1e:00:d5:6c:6b:aa:
fa:49:5e:63:64:d5:c1:d6:1e:e4:be:8e:b7:45:c4:
83:f8:0e:15:21:c6:cd:b3:21:0b:cd:a3:81:d4:46:
8c:2c:0d:93:7a:03:be:7d:db:11:18:8c:4a:f5:9f:
8c:68:bd:71:75:ba:7d:27:b6:ce:1f:8e:37:5b:74:
b3:e4:f7:22:4d:3c:59:16:c4:ba:71:41:8d:d1:01:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214478
Signature Algorithm: sha256WithRSAEncryption
9c:19:73:8e:02:ff:1b:bb:42:82:94:7b:9f:50:61:94:f7:29:
77:59:c8:9f:f5:08:1c:aa:30:b8:97:cd:30:dc:49:12:45:eb:
39:7f:7b:4d:17:50:91:96:b7:ba:d0:a5:a4:55:80:b6:57:c5:
67:8e:fc:76:08:6b:96:e8:b6:1e:3c:a0:e2:9b:eb:db:08:4a:
87:02:a6:90:74:8a:f6:15:6b:f0:d8:4c:02:45:93:58:01:db:
b2:af:d5:29:5e:a9:0e:f1:a3:92:df:40:98:5f:be:cc:08:47:
e6:d5:a0:11:ff:ab:85:b6:d6:13:06:a8:b7:f1:c6:57:49:48:
e2:30:22:5c:66:36:e4:70:74:a4:8d:83:c8:13:0c:21:9b:3c:
37:03:77:e5:4f:73:fc:3f:86:bc:3d:74:3b:5a:03:01:c3:6f:
81:db:ce:1e:3a:f1:c3:07:19:93:e9:03:29:6e:c5:5d:71:d6:
17:b2:db:ec:bb:7e:a9:92:0d:81:83:3c:b9:3d:99:3c:f2:1d:
06:5b:c1:61:72:11:ea:62:1f:26:18:29:a4:c7:25:7e:36:c7:
2f:75:fb:58:c5:76:a1:f7:5f:a2:c8:6f:39:02:99:01:40:40:
0c:bb:18:9b:e0:11:25:ce:08:75:ee:4d:82:88:e0:75:90:d5:
7e:3a:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:35 2025 by rpki-client