Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
File: aQMR37ZbZZViGO_0cZep65akB9s.cer (raw, json)
Hash identifier: ykMBP6GfzjbsdX15qnmV1le5CjUjsFaIOAFZ9fXbaRM=
Subject key identifier: 69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F5D5CDC5AE736106DD66755E2A27D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39830
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5d:5c:dc:5a:e7:36:10:6d:d6:67:55:e2:a2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690311dfb65b65956218eff47197a9eb96a407db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:8e:7e:da:4d:6d:25:e0:51:a7:c1:c1:13:
a3:c1:7f:1d:cd:b9:e8:ab:d0:82:4f:a0:f5:7e:32:
63:14:d4:1d:30:cb:8f:76:27:9c:a9:5a:21:f1:34:
8d:40:66:8e:69:76:29:28:db:60:0d:cb:b9:33:13:
04:03:88:79:37:c8:0f:b1:02:eb:c9:95:21:6b:84:
f9:43:67:eb:b5:83:14:11:eb:b7:2d:cd:c6:a3:02:
e4:ac:f6:d7:a9:6d:5e:26:a3:c4:fc:6e:d8:49:de:
c0:66:19:bd:21:36:97:b2:7e:9c:21:04:e3:9f:bb:
72:67:77:ed:00:5c:a2:b4:e2:00:04:f3:54:95:d6:
4a:33:47:99:d1:78:9c:31:30:01:12:22:b0:9d:e8:
ee:26:ad:1a:53:8f:cb:a1:42:17:b1:83:d3:04:19:
0e:bd:94:64:5c:11:b3:67:22:df:f8:b4:3d:77:aa:
d7:c5:db:57:05:2b:ae:1d:63:6e:6b:6d:cd:4a:7f:
33:02:d7:fb:5c:ea:22:1f:9c:29:76:93:4b:6c:36:
b1:fd:c6:9b:75:80:92:49:d6:8e:39:63:b8:d2:49:
1a:ac:cf:f4:90:9c:91:cc:75:cd:94:00:3e:7a:ca:
13:12:61:1a:d4:75:02:80:4b:e9:32:c6:0f:b3:5b:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39830
Signature Algorithm: sha256WithRSAEncryption
14:1b:41:2f:f3:b2:55:2a:ed:26:d8:08:83:a2:94:b1:0e:b3:
69:17:96:93:2f:e6:18:0a:59:ea:b7:7b:8e:25:2e:56:b7:f1:
dd:1e:be:a4:81:83:c5:1d:86:6d:f0:0d:20:72:2b:48:60:8d:
7c:4e:48:6d:0d:60:46:cc:c3:73:24:c1:1e:37:bd:1d:43:46:
bc:48:b2:2c:b9:e1:08:dd:ba:16:ed:29:22:9a:4e:b1:53:1f:
51:87:7b:8b:e3:fb:14:ca:48:88:88:dc:2d:fc:e6:e0:6f:9e:
aa:49:df:fd:a3:3a:73:a6:41:3d:90:e9:4e:ce:ff:a8:34:d0:
ac:d7:5c:30:69:b3:5d:ab:55:2c:f6:6a:d1:dc:83:bc:00:7e:
fa:ae:95:c4:f9:58:b2:c4:f3:0a:80:48:9e:2f:2d:88:ef:03:
aa:b6:ff:48:a8:9b:39:4c:9d:79:d0:35:fb:07:a0:51:67:82:
a8:47:42:b8:f9:b0:e6:da:81:cb:ec:91:59:fb:fe:67:b9:34:
e2:c1:86:63:61:f1:4d:1f:5e:11:0b:26:a5:ec:96:cf:4d:88:
74:58:00:c0:db:ed:36:28:db:e1:44:9b:4d:dc:0f:74:22:75:
52:0e:b6:d2:db:9e:99:d3:a0:38:f6:9c:d3:b0:2d:60:cf:1e:
6b:9c:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:46:04 2025 by rpki-client