Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtFg2vlmDA45ix44Sf4NQIImY_M.cer
File: VtFg2vlmDA45ix44Sf4NQIImY_M.cer (raw, json)
Hash identifier: c+yI4OFuxB4hYmYs9ar1pQ94A+LDTETo6e94SYZFhxQ=
Subject key identifier: 56:D1:60:DA:F9:66:0C:0E:39:8B:1E:38:49:FE:0D:40:82:26:63:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9E8212C216430322AECCAEFB0BC34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/40e24d-1208-42d3-b399-9de8d5cb0c7d/1/VtFg2vlmDA45ix44Sf4NQIImY_M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/40e24d-1208-42d3-b399-9de8d5cb0c7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215396
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e8:21:2c:21:64:30:32:2a:ec:ca:ef:b0:bc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56d160daf9660c0e398b1e3849fe0d40822663f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:f0:86:7d:f9:65:25:8b:e5:5d:a1:5b:a5:
0c:6d:75:94:68:94:92:09:36:c2:62:d8:17:ae:ec:
2f:61:9e:49:56:ee:7e:10:9f:29:d9:df:56:77:c3:
2d:55:38:aa:60:f2:aa:6d:98:9d:5c:de:e7:93:f5:
fe:06:61:49:87:c6:9c:9f:b7:c4:60:ad:2a:f2:96:
88:91:b2:7c:ef:32:91:a8:27:08:6b:b0:01:06:50:
42:2c:94:e2:f5:be:9d:da:e2:38:dd:72:10:17:15:
84:42:b4:ef:32:cf:ac:c8:dc:96:8f:8b:fe:ce:ad:
64:84:92:24:85:fd:74:a8:30:f2:b1:a3:33:c5:eb:
f0:78:99:c2:6b:e3:37:60:45:c6:80:eb:6f:e0:81:
26:b6:ce:c8:56:3c:88:42:45:0c:48:0d:4e:9d:23:
10:8e:06:45:11:6e:91:1a:1f:b7:0e:45:68:d4:7a:
7a:cc:a6:0a:1f:bb:e7:5e:d9:cd:68:5b:2e:64:f4:
a9:51:0c:4f:2b:de:33:3c:97:57:a7:de:23:f3:a2:
ee:f7:62:82:44:9d:7a:2e:7a:25:0d:af:c2:76:3b:
64:34:75:bb:a0:91:9c:f7:0b:a3:54:5e:33:5d:79:
1e:77:35:e2:26:d9:d2:f4:77:46:6c:09:d2:47:1e:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D1:60:DA:F9:66:0C:0E:39:8B:1E:38:49:FE:0D:40:82:26:63:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/40e24d-1208-42d3-b399-9de8d5cb0c7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/40e24d-1208-42d3-b399-9de8d5cb0c7d/1/VtFg2vlmDA45ix44Sf4NQIImY_M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215396
Signature Algorithm: sha256WithRSAEncryption
81:22:98:53:b0:33:be:8b:b3:9e:30:da:2b:9c:ac:b8:ca:d6:
7e:36:52:cc:2a:06:81:a6:94:b5:2e:bc:de:d1:45:39:80:a8:
4b:b9:48:66:6a:3a:01:36:a7:d7:c3:b2:5f:63:9f:84:a5:07:
30:e3:75:09:b4:35:e8:50:1b:64:38:cf:f4:89:e1:58:5b:b3:
18:be:c9:c6:ef:ea:3a:35:5e:3f:80:57:87:ea:bb:ca:3a:d1:
f9:7e:4d:da:8e:e2:d0:b9:66:ae:2a:d4:f6:05:c0:c3:93:48:
0f:e2:17:05:a9:29:b2:8d:1d:8c:a6:41:49:c7:b5:d8:b7:67:
99:30:2c:03:4f:9b:f3:38:4f:44:f6:78:9b:47:a9:2d:a9:c3:
72:a8:2a:0c:90:cf:64:04:bb:d6:a1:90:da:81:1e:54:96:41:
f5:80:48:bd:83:b7:b1:5f:7c:32:23:48:eb:76:16:b2:64:33:
2b:c8:02:d9:f7:de:f4:2d:75:e1:fe:2b:b4:46:aa:0c:42:d7:
a2:dd:59:38:a2:89:9a:52:1d:ca:80:0d:b1:f2:f2:29:d1:c7:
da:1f:b2:6a:e5:1c:3c:37:85:3e:f6:6c:bb:6d:1d:69:a1:d9:
a2:3e:14:2e:64:f1:52:91:c7:d3:76:29:17:e2:9d:a7:a9:22:
01:85:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:56 2025 by rpki-client