Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer (raw, json)
Hash identifier: tXvIrf+zJpqx5HwWJ0NaxFyh9SJorcWzYLy1dyVUhXk=
Subject key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D962DA559739D4AC16DC6D602EBDBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214457
IP: 2001:3200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:62:da:55:97:39:d4:ac:16:dc:6d:60:2e:bd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4603c656c197461a49caa1ffd720d18beeac8076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:b3:e3:5c:5d:1f:e1:97:a6:82:08:f4:4f:
48:31:de:53:d3:3e:88:7d:39:84:86:b1:53:ca:8e:
ca:45:7b:31:cc:98:c9:c1:ae:24:27:d8:92:44:c0:
31:bf:18:a4:9b:2b:e3:68:22:95:12:d6:e8:fe:fc:
66:56:ec:d7:27:aa:f3:69:bb:8c:82:54:de:bb:ec:
66:1d:57:9b:d0:dd:86:48:de:32:bb:51:58:cd:dc:
af:42:72:ea:cb:d3:9e:0f:74:2e:64:f0:48:30:19:
56:32:59:6b:5e:96:d4:e7:b3:42:da:d8:aa:b5:38:
4a:c9:a3:f7:61:2a:fd:42:ae:f9:9b:f4:d8:8c:a1:
0e:3e:52:e3:10:d5:32:28:c0:a4:38:5f:1e:a7:05:
24:26:39:07:42:4b:c7:12:3c:c6:00:e0:f9:81:60:
8c:8a:af:94:4b:6a:b7:73:8f:f5:68:be:a4:ad:d4:
09:d6:1a:1e:68:ca:20:25:75:a2:bf:05:ad:e0:a3:
66:55:a7:07:2c:96:43:77:db:31:12:c6:02:c8:66:
8b:f3:df:cf:fa:93:0c:56:3d:d5:26:84:6b:00:2c:
30:4c:11:24:f3:8e:ff:6f:58:65:08:2b:60:6c:77:
77:f1:ef:d7:00:1e:02:ab:12:3a:83:78:34:26:ee:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214457
Signature Algorithm: sha256WithRSAEncryption
22:1a:38:c0:15:9f:76:19:69:75:b3:9f:74:73:18:f7:a6:78:
dd:48:78:c6:62:c7:ca:5d:d1:06:37:f5:bd:fa:43:c6:b9:e6:
98:6f:c2:9f:d4:a5:51:8b:5e:76:ed:c6:01:d7:7e:e2:c0:36:
dc:c2:cf:b4:2a:e9:0f:d0:e1:6a:90:51:96:2e:73:ae:99:d2:
22:4a:41:fb:e2:2e:e1:4a:8f:2a:db:29:11:df:fd:ff:b0:89:
15:3a:83:97:6e:f9:47:df:05:50:90:28:09:66:a7:2f:88:77:
09:b3:f6:b3:90:dd:47:ad:6d:d5:91:df:ab:37:9f:73:58:90:
68:d6:19:44:06:64:cf:cd:b6:6b:3e:86:97:d1:24:ab:a0:e5:
f9:9d:d0:6b:4a:00:cc:be:9d:72:7c:d4:a4:b8:a1:aa:b8:ba:
9b:7f:01:39:8d:72:2c:e5:2b:c5:33:74:30:a4:3d:f7:db:7d:
81:2d:60:6a:2a:be:87:4d:ab:8e:b0:82:c0:c6:76:02:84:46:
55:ec:56:2a:07:79:62:2c:94:f1:d2:02:b9:49:95:f2:4c:79:
cc:91:05:4e:a2:b5:3c:39:d8:37:7f:a4:dc:2d:a8:6d:03:52:
c3:16:94:40:22:e2:51:84:fd:ea:ab:5d:22:73:2f:90:a8:3f:
e7:5a:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:49 2025 by rpki-client