Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wr5-CR2hOR8CTsDPfY428NI1d4o.cer
File: Wr5-CR2hOR8CTsDPfY428NI1d4o.cer (raw, json)
Hash identifier: ENNWWj/fp6MYjh0RZpNqf9shR6bbcrjyV7o3rbPC6t0=
Subject key identifier: 5A:BE:7E:09:1D:A1:39:1F:02:4E:C0:CF:7D:8E:36:F0:D2:35:77:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421CBC88993B26C634F529DD03747344B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/5ABE7E091DA1391F024EC0CF7D8E36F0D235778A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 12:16:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50104
AS: 210537
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:cb:c8:89:93:b2:6c:63:4f:52:9d:d0:37:47:34:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:16:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5abe7e091da1391f024ec0cf7d8e36f0d235778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:40:bc:8d:8f:6a:35:9a:95:61:98:aa:62:
c4:fe:77:77:be:d0:77:36:aa:ff:1f:57:e2:59:7c:
a6:37:9e:43:a8:03:0c:b0:68:0c:d3:74:9d:03:76:
ed:c6:d9:84:76:61:8f:ec:4e:18:c9:ca:ae:e2:85:
db:81:e2:ae:15:7a:39:b7:a4:2f:f8:15:df:56:da:
31:e5:f5:eb:99:71:04:8c:52:bb:c7:26:0d:bc:95:
83:e3:48:1a:b5:4b:9c:ae:73:d3:08:b2:1c:3a:bb:
81:56:1b:11:b6:27:37:31:5f:97:8a:86:78:40:0d:
cd:75:37:54:56:e9:c2:32:e6:ce:25:56:45:a0:55:
fb:c3:38:ca:7d:7b:f3:d5:5f:ab:72:9e:a9:c3:73:
52:25:13:62:ff:f1:5d:a2:94:5a:5e:95:b8:39:cc:
d2:fa:12:92:b7:70:a9:64:f9:3d:40:ea:77:a5:f6:
4c:1b:11:f9:d6:9b:99:11:08:8e:d1:ca:41:7f:72:
b0:6e:ce:94:51:c2:ea:57:92:08:8d:ab:6c:26:22:
44:16:6e:47:a3:07:43:77:b2:d1:8c:b1:58:15:2a:
a5:42:cc:a7:0f:62:23:76:15:69:ea:7d:7c:3b:06:
30:ca:d2:98:73:ff:84:68:1a:8e:34:6d:c0:56:69:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:7E:09:1D:A1:39:1F:02:4E:C0:CF:7D:8E:36:F0:D2:35:77:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/5ABE7E091DA1391F024EC0CF7D8E36F0D235778A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50104
210537
Signature Algorithm: sha256WithRSAEncryption
1b:5e:e9:ae:b8:25:f4:dc:56:13:93:84:b0:ab:b1:65:a2:b6:
8c:0a:f7:fc:ab:6e:d0:82:5d:c7:03:e2:97:6a:e8:0b:14:a7:
4f:eb:36:76:87:d6:db:27:68:15:ea:0d:ee:a1:32:ab:77:ec:
c3:8d:8f:50:76:59:cb:a3:8f:75:46:fa:dd:48:1a:17:7a:2f:
41:f3:03:d5:9f:b6:08:78:fd:29:a2:d6:72:99:4f:96:f8:c7:
da:cb:c0:ab:d7:fc:da:ea:3b:39:91:f1:bc:78:79:1b:e8:b6:
cd:8f:e4:b9:58:80:67:79:1a:ba:c2:06:48:b8:40:8b:12:df:
90:b1:de:15:b8:e2:e3:7d:2c:53:4b:44:34:19:f5:0c:b5:d8:
11:95:6f:c3:ba:7d:f7:5e:b7:82:1b:98:07:15:cd:cb:c3:98:
e5:8a:de:65:cc:8c:85:d9:8c:6e:ad:11:e2:0e:2e:26:37:0b:
7d:e8:8b:58:f6:69:6d:d5:8a:9c:fd:39:bb:dc:48:bc:67:ee:
e9:15:4e:f9:22:28:9b:26:fb:79:d9:ca:4d:d6:e7:ec:2f:09:
c9:91:8f:e3:15:66:b1:44:e6:88:af:c8:9c:56:ac:c4:45:e8:
c2:bf:69:3e:c0:a9:44:81:7b:60:5d:70:e1:3b:ca:0e:72:c7:
1d:a1:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:08 2025 by rpki-client