Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
File: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer (raw, json)
Hash identifier: jopNQnWGPoop2CdRukfl6Nz4xYJWkKc4h9z3DfXbMrQ=
Subject key identifier: 6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD795F8CDBAE485F30ADEF5E8074D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211767
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:79:5f:8c:db:ae:48:5f:30:ad:ef:5e:80:74:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:cf:b0:eb:3b:77:3e:b1:60:f1:f8:e9:b7:
79:3d:56:0c:4c:b0:5f:d7:16:3e:7a:c8:af:2b:14:
f1:66:16:42:f3:50:7d:5f:4b:da:b2:85:c2:93:3c:
8f:40:05:17:8c:f1:25:0d:75:eb:cc:8a:7b:5c:17:
a0:74:c0:b9:2b:fd:c8:1b:0b:f6:71:95:3a:6a:f4:
bb:cd:36:a6:80:0c:58:72:66:b2:4a:2f:68:7c:77:
f2:a3:3c:be:2b:31:56:ce:cb:ad:04:b7:2f:20:93:
e1:86:53:6b:9f:bf:e8:a9:82:2c:d9:47:2a:9f:c2:
87:52:07:fe:80:df:7a:ef:0b:b0:7d:29:1d:3e:19:
df:36:f8:65:45:5f:66:ff:ac:06:67:ff:12:5f:bc:
57:4e:ef:e3:1a:12:57:65:57:ed:70:2c:92:26:c1:
a5:82:d8:17:6c:45:a3:c5:43:9f:a4:10:39:6a:64:
cc:5b:c9:8e:52:37:c3:75:66:ea:87:4d:6a:ed:69:
59:0d:d1:48:fa:f2:37:3c:de:79:62:24:46:e0:86:
cb:2b:19:24:2b:2d:f1:07:97:b8:02:45:e1:7d:ea:
30:a3:f5:a0:ce:5d:ac:f0:89:ad:47:f1:ba:cf:da:
f1:5f:05:83:66:ba:f5:c2:d3:fa:18:e1:64:79:e1:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211767
Signature Algorithm: sha256WithRSAEncryption
12:36:61:c8:61:e3:7a:2c:31:c5:b1:32:fb:60:23:bf:2c:75:
36:61:37:f9:9e:84:cf:f2:fb:50:4f:d1:f6:0e:c9:66:46:fd:
86:fc:99:b7:44:63:1e:76:22:bc:c3:52:9c:f8:3b:84:4f:eb:
23:a9:6a:b0:ba:85:9a:5a:d0:71:9c:fa:3d:6e:a4:aa:44:76:
a3:5e:43:3c:63:65:83:80:4b:21:8c:7c:a2:98:a1:01:6a:a5:
74:e8:7d:0a:cd:cf:ad:61:d6:42:49:a8:f7:46:4e:46:62:bd:
94:99:c1:bf:2b:ba:e8:7a:77:09:4c:bf:53:81:5e:bb:4d:74:
3a:da:46:48:4b:75:66:d2:5d:d0:68:06:48:26:ff:08:40:ff:
fc:54:f2:84:2e:17:e3:67:06:80:28:d7:e6:b4:11:77:7c:58:
2a:9a:af:b1:d5:ce:d2:e3:39:cf:b7:6f:0c:7e:df:ec:7f:fc:
30:82:8e:83:ac:3e:1a:94:7b:4e:7b:25:e7:44:43:35:67:46:
0b:37:cf:7e:11:48:f9:02:6c:a8:81:5e:b6:17:00:96:81:37:
c8:52:c5:51:1e:51:a0:5c:98:c6:a2:a7:61:88:08:11:82:0f:
34:4b:92:97:0d:5b:f8:44:3c:7f:11:62:07:8f:e1:06:83:eb:
75:58:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:53 2025 by rpki-client