Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
File: cc2ljxUk2CM2224M8qKf-vLaifg.cer (raw, json)
Hash identifier: a+huqdtKChVdmcqKKTv3dtPlRDoCES1jfGP2azYacig=
Subject key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D61AB1F27661F336686C91589CCF26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13059
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1a:b1:f2:76:61:f3:36:68:6c:91:58:9c:cf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:0f:69:3b:4a:8b:b8:7d:68:89:2b:8e:d1:
e6:cd:31:d4:a1:c0:e5:68:5f:55:32:33:3c:93:32:
1c:a7:9b:34:d3:82:fe:3f:ab:7c:67:65:2f:77:c2:
65:2e:0b:d8:bc:03:a0:2e:12:5c:4d:f2:95:b0:3a:
95:5c:e5:22:4b:64:5e:86:a0:f8:2c:d6:d1:e3:92:
a8:43:0f:c0:88:12:95:36:23:eb:95:c1:28:ec:09:
4c:f8:89:60:bc:88:dd:b3:81:81:30:57:32:11:4b:
5d:95:5b:51:b3:93:c4:37:f2:e6:b4:35:b4:da:5b:
a4:06:9f:cb:55:1b:42:63:c5:80:c3:ef:ff:d8:0a:
5b:69:6d:67:85:a3:ff:98:08:94:03:25:cc:b0:9e:
62:b9:74:6d:7e:93:67:15:39:33:03:ad:a5:a5:01:
69:e9:34:9f:b4:48:9a:19:ac:dc:d0:29:73:54:a0:
a7:2d:c2:a4:54:2a:c5:9f:d6:ce:5d:a9:7a:78:e0:
29:5b:79:33:9b:3f:67:97:b8:9f:aa:58:fb:de:ad:
26:81:ae:8a:cf:54:ac:2c:e1:57:9f:f7:db:57:11:
6e:ab:7f:6b:8d:14:e1:a8:17:29:1f:f7:f9:e3:95:
da:1f:cd:29:04:21:79:c0:62:93:71:78:38:79:36:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13059
Signature Algorithm: sha256WithRSAEncryption
67:76:2c:f9:94:f4:34:67:52:75:69:32:f8:ed:43:c8:38:c8:
c2:7c:82:1f:f3:76:a6:87:10:a4:73:c4:3b:fa:90:b8:f1:8a:
b6:0d:7e:76:ad:b3:3a:91:89:36:42:5f:72:e0:91:fb:db:75:
cd:db:a6:5d:b1:35:a0:d6:3a:4e:25:29:47:7a:aa:1d:a3:b9:
d0:8c:50:eb:2e:ec:d0:4d:20:32:b6:30:13:c3:5f:01:26:34:
9a:20:97:23:25:6b:f9:64:16:d8:30:89:96:25:45:ce:4c:2d:
38:45:b1:bd:44:8f:0b:39:61:c7:bc:8a:27:f2:5f:0c:f2:e8:
62:f7:ff:b9:77:0a:15:bd:7e:ad:c2:9d:6f:c4:2b:d4:c4:1e:
62:d0:c1:d1:2f:f1:1f:9c:8e:97:db:46:8e:f1:b3:bd:4f:5e:
71:f6:38:ab:86:5b:44:c9:9c:fc:0b:e9:f6:0d:06:35:48:68:
53:d0:f5:af:96:44:8b:02:8e:83:a6:14:86:7f:f2:fb:4f:9d:
ea:3d:e7:88:a6:56:53:e4:f2:80:4c:1b:7d:5e:32:7b:3a:0e:
ce:94:54:35:02:cd:bc:6a:06:cb:a1:a6:c2:44:62:6a:82:75:
4b:ed:7f:25:58:a6:96:b6:3e:00:e9:8d:1d:0c:75:e5:1c:c3:
ff:81:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:17 2025 by rpki-client