Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer
File: TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer (raw, json)
Hash identifier: jSqh+IDja1bnMBkJXSfJPRJOzk9muQ1xsWv1CyCE/Ec=
Subject key identifier: 4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274877FBF187636FC2BB419EE1BF475E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199742
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:77:fb:f1:87:63:6f:c2:bb:41:9e:e1:bf:47:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e05a14790665169c09e5c943eff5d825e6c8ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:32:05:43:65:ac:f3:70:2d:68:6b:5a:ba:
5f:32:ea:74:20:2a:a3:f0:2d:96:50:1f:28:29:9e:
86:41:99:22:c8:f8:b9:c3:4c:c8:66:e9:6a:3d:5e:
9f:54:86:e8:52:73:55:fa:ce:d5:5b:c1:81:f3:6e:
60:cb:90:a6:e8:46:fd:d9:c7:3b:51:21:76:bb:34:
37:6a:5e:56:be:45:08:ec:d0:93:58:62:9b:75:50:
77:47:3f:35:77:74:86:3f:7b:93:dc:c8:70:58:6a:
1c:21:19:1e:4b:97:dd:8d:d3:9b:f7:cb:ba:1d:a8:
ef:4f:8e:ac:6f:44:37:03:79:2e:d4:8c:bd:69:83:
45:a1:24:a4:01:cc:81:97:ad:51:8c:58:e2:17:11:
80:fa:20:44:78:9c:3e:7e:1f:19:bc:88:38:d0:70:
fb:af:fd:52:e4:c5:71:18:62:c4:f8:54:c0:3f:44:
9a:53:9c:54:ec:5a:7d:c5:7c:7a:ab:b0:c3:78:72:
ce:aa:66:6b:15:36:41:12:38:c5:4c:41:09:16:a9:
2f:ad:60:9c:88:99:44:8a:72:3f:fa:be:26:8b:85:
ed:8d:8d:fa:3d:18:93:1a:e0:7e:f2:77:03:0c:3f:
b0:39:20:a5:c2:32:1e:85:b5:b1:4a:f6:77:e0:eb:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199742
Signature Algorithm: sha256WithRSAEncryption
75:37:4c:ea:2a:20:ac:35:2e:2a:f1:aa:f3:f3:74:1e:7d:2f:
18:af:57:6e:e7:3f:b9:76:69:7e:10:7d:c4:2c:59:8a:60:8d:
0a:05:78:a2:b9:12:a3:1e:64:40:13:5f:1b:b2:86:ce:2a:2a:
10:d6:7f:6f:cc:99:9e:41:95:4a:c8:74:76:3e:c3:00:0e:01:
75:53:ca:92:20:2b:86:82:a7:92:4d:48:a6:e2:31:38:bd:0f:
d1:40:4f:f6:6e:d8:4e:82:53:0c:87:eb:e2:50:10:3b:3c:76:
d4:4d:b3:26:c2:1f:5c:17:fc:47:c3:7c:a9:d1:f1:05:f4:c8:
dc:52:61:e0:17:33:93:48:e1:4d:72:11:16:ef:c1:27:bb:55:
17:76:30:d8:a4:a9:81:19:2f:76:64:c6:69:74:14:df:84:d2:
0c:18:33:dd:54:36:80:7e:73:72:b3:90:79:20:46:4c:c3:45:
1b:96:33:c7:03:de:15:18:ae:b2:06:87:35:66:d6:72:cc:7f:
8c:17:b8:11:38:85:a3:d6:aa:51:7d:de:b9:18:7a:91:2e:b2:
3e:91:62:63:ea:7f:5e:11:3a:f1:46:af:2a:77:3c:54:71:19:
40:18:31:93:8a:a1:13:98:f5:9d:e1:cf:dc:4c:62:ae:3d:f1:
2f:80:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:27 2025 by rpki-client