Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
File: VICpFlHjeO69hx0K3WleZ3v1DS4.cer (raw, json)
Hash identifier: yira8D79tdVCeHHe6W6CQTCteGjMhqea40kh+AlekVk=
Subject key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421440E97D8586C465EC520DF6AEED9B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213037
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0e:97:d8:58:6c:46:5e:c5:20:df:6a:ee:d9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5480a91651e378eebd871d0add695e677bf50d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:8c:98:c1:e0:ed:27:8e:6b:79:88:6f:82:
4d:6d:f9:28:73:d0:fe:e2:65:85:e0:92:18:7f:17:
74:e6:d7:12:d2:de:a3:53:b5:00:b1:52:84:2a:c4:
92:7e:15:d3:e9:dd:84:ee:ab:1f:de:04:db:36:97:
41:85:79:39:e1:80:25:5d:55:c8:56:35:a4:4a:94:
16:96:7a:81:f6:c1:8d:5b:a0:38:d4:ec:e6:4b:83:
51:8d:89:71:8b:a6:9e:07:2b:ce:e5:a0:9d:fc:a9:
a1:69:ad:5b:17:9d:9b:11:51:c5:88:54:04:3c:0a:
c4:99:a5:e6:61:9b:cc:53:20:e7:4c:7c:7c:fd:58:
29:24:78:d6:ff:c3:92:c4:4a:8b:f4:be:4d:13:d0:
6e:6d:52:e3:98:ed:66:1f:ee:12:ad:28:85:d8:93:
f0:23:8b:8f:ca:76:fe:6c:ae:09:e9:9f:15:93:e7:
88:91:78:a0:8e:d3:bb:84:94:ef:1f:f1:e2:88:04:
f8:9d:a7:03:d5:6c:bd:2c:b3:27:56:86:57:0d:60:
3d:1b:25:dc:99:df:99:0b:af:78:77:f7:5d:ff:55:
64:cf:9d:91:ed:d2:7e:82:0d:2e:95:e6:2e:df:d1:
a6:dd:76:eb:e4:34:f4:02:d2:5a:6d:26:0f:4f:7c:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213037
Signature Algorithm: sha256WithRSAEncryption
05:40:5b:ce:36:31:79:bb:d6:b0:98:0a:4c:47:29:3e:52:5c:
2c:6f:2a:e8:61:51:e5:da:77:c6:03:a1:86:10:2d:99:31:58:
ad:3c:7a:82:9e:83:76:70:51:28:c3:51:51:f3:10:b0:3d:74:
6c:29:30:5a:d9:f9:ca:7c:ce:97:82:f1:e4:80:48:6d:ec:03:
42:e4:85:62:8b:8c:01:c0:5d:24:bb:00:fc:d0:3e:3f:84:84:
e9:49:63:9a:b0:97:fa:13:fc:95:3c:2d:b4:e2:c0:fa:13:ef:
da:84:e4:ff:42:30:c5:eb:10:b0:48:08:d8:10:b9:ed:65:74:
cf:a1:8e:f9:46:da:59:98:a5:47:15:00:5a:2b:9e:86:08:72:
7c:d3:b1:2a:86:0e:59:43:65:7d:2f:ff:95:e5:14:fb:20:9b:
92:81:f8:84:ec:83:e0:0e:d3:4d:32:bf:16:0c:e4:19:20:10:
53:ea:2b:94:56:0e:ce:fc:5c:c3:f5:b5:9a:3f:ae:a5:fc:5b:
ef:4f:90:2c:83:e6:bb:4d:83:41:ef:b0:b9:9f:6a:ee:72:97:
87:04:ba:d8:ad:37:fc:39:e9:44:75:9e:50:46:53:3b:6b:c9:
40:c6:c2:ea:b1:fb:e2:bc:e3:58:d1:0f:f2:ce:3a:00:5a:9a:
d3:12:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:36 2025 by rpki-client