Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
File: TqcPEdltXfB9x3s-04WTOZ0_Uao.cer (raw, json)
Hash identifier: LG/Ofm5ZCmapq5i248SMr60p8n2kwgrr6x52HEXNR5M=
Subject key identifier: 4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC25217CB69DF0BF03D46951EBA134
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212022
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:25:21:7c:b6:9d:f0:bf:03:d4:69:51:eb:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:f4:e2:e9:80:03:d1:83:4e:f3:4c:f0:ad:
d9:8d:da:27:71:ca:4c:e1:ff:29:c9:68:81:8c:86:
08:d6:6a:54:85:74:13:41:a7:60:a1:ab:8d:f8:bf:
a8:bc:6f:7f:2b:e8:4f:9d:32:20:b7:ef:e5:1d:25:
19:44:07:a9:9c:5e:87:6c:3f:57:36:dd:13:f7:f7:
87:de:48:ad:f9:a6:42:fa:ea:35:d4:82:69:49:90:
eb:05:8d:69:d1:d1:7b:47:16:4c:1c:f3:20:39:6e:
c6:6f:ec:82:80:f3:ca:fe:a4:6a:46:32:56:ee:4a:
e9:2c:f4:94:f0:53:c9:db:29:b5:55:7b:d4:d4:68:
55:ca:9b:64:53:7f:ea:44:47:34:20:ef:9f:7b:be:
7c:7d:28:a9:e5:9b:c8:91:ee:84:38:4c:ec:70:1b:
e3:4f:3d:a7:98:ff:c8:ce:a4:f3:a0:0b:fc:e6:53:
c1:f4:3a:0a:7d:f2:da:cc:9f:b2:ed:3d:ba:1c:bc:
0e:05:6a:4c:ab:07:ba:a6:da:fb:2e:66:74:3e:2e:
03:39:86:25:78:f9:75:c7:7d:47:86:38:64:22:b1:
1f:17:e2:8e:2b:b0:1e:6a:d1:aa:85:78:78:ae:3d:
33:8c:09:ff:91:90:b7:68:4a:4b:be:75:47:2a:c7:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212022
Signature Algorithm: sha256WithRSAEncryption
12:1a:43:f8:76:e5:09:a9:b0:9a:1e:69:ce:26:65:de:83:a9:
58:89:fc:e4:7b:f6:4d:20:cb:58:46:94:c7:46:b1:a4:8b:f5:
1c:49:46:dc:6f:87:87:91:3a:66:9b:ae:75:4c:e8:3d:65:c2:
4f:09:1b:bf:82:51:6a:fc:5e:3f:32:1e:a4:ab:ca:2e:61:00:
bd:27:8d:08:bb:dd:43:c7:c0:7d:6b:89:09:11:82:44:80:c1:
18:44:4d:5a:f4:61:e3:37:5d:eb:c9:a5:ee:c9:c2:12:dd:bc:
e7:20:91:20:4b:0b:74:ca:33:2a:28:4d:00:21:04:89:22:f1:
71:44:c5:06:ba:8d:92:7b:cb:9b:cc:40:21:f6:11:97:6a:c7:
33:7f:46:17:ea:94:a6:63:03:d8:ac:6a:6f:9e:a7:d3:5a:e0:
e9:b5:8d:5f:91:7d:ec:51:86:88:82:82:13:26:1f:7b:d2:3a:
08:50:80:d5:f6:ca:90:f3:13:3c:f0:cd:20:7f:3b:83:9b:3c:
75:37:56:6d:a4:bf:57:2b:33:07:3b:e1:62:c6:52:9d:3b:c9:
03:4f:4c:be:04:7c:40:90:3e:c2:d0:33:3d:23:d7:56:52:0a:
3d:1e:5a:31:e8:97:d5:1a:05:ab:74:69:fc:5d:64:19:17:ef:
f4:8b:46:81
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQl/CUhfLad8L8D1GlR66E0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWE3MGYxMWQ5NmQ1ZGYwN2RjNzdiM2VkMzg1OTMzOTlkM2Y1MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO704umAA9GDTvNM8K3ZjdonccpM
4f8pyWiBjIYI1mpUhXQTQadgoauN+L+ovG9/K+hPnTIgt+/lHSUZRAepnF6HbD9X
Nt0T9/eH3kit+aZC+uo11IJpSZDrBY1p0dF7RxZMHPMgOW7Gb+yCgPPK/qRqRjJW
7krpLPSU8FPJ2ym1VXvU1GhVyptkU3/qREc0IO+fe758fSip5ZvIke6EOEzscBvj
Tz2nmP/IzqTzoAv85lPB9DoKffLazJ+y7T26HLwOBWpMqwe6ptr7LmZ0Pi4DOYYl
ePl1x31HhjhkIrEfF+KOK7AeatGqhXh4rj0zjAn/kZC3aEpLvnVHKsfzswIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFE6nDxHZbV3wfcd7PtOFkzmdP1GqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzRhMDM4
NC1hZGZmLTRlNDAtOGVmMS0zMGMwYzk4NDc2NzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNGEwMzg0
LWFkZmYtNGU0MC04ZWYxLTMwYzBjOTg0NzY3Ni8xL1RxY1BFZGx0WGZCOXgzcy0w
NFdUT1owX1Vhby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8NjANBgkqhkiG9w0BAQsFAAOCAQEAEhpD+HblCamw
mh5pziZl3oOpWIn85Hv2TSDLWEaUx0axpIv1HElG3G+Hh5E6ZpuudUzoPWXCTwkb
v4JRavxePzIepKvKLmEAvSeNCLvdQ8fAfWuJCRGCRIDBGERNWvRh4zdd68ml7snC
Et285yCRIEsLdMozKihNACEEiSLxcUTFBrqNknvLm8xAIfYRl2rHM39GF+qUpmMD
2Kxqb56n01rg6bWNX5F97FGGiIKCEyYfe9I6CFCA1fbKkPMTPPDNIH87g5s8dTdW
baS/VyszBzvhYsZSnTvJA09MvgR8QJA+wtAzPSPXVlIKPR5aMeiX1RoFq3Rp/F1k
GRfv9ItGgQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:00 2025 by rpki-client