Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
File: dmAUOBTDTSksdavNtF-BgZU07cE.cer (raw, json)
Hash identifier: bo0iwfHjd4oTEQQABpnBM3vFzvS5tWJgHgtOER7zEKw=
Subject key identifier: 76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423691A3D2815B7D0CC5BD11BE1A431CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29478
IP: 2001:67c:14c8::/47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:1a:3d:28:15:b7:d0:cc:5b:d1:1b:e1:a4:31:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7660143814c34d292c75abcdb45f81819534edc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:7c:6b:1a:b0:b3:03:fe:2a:5f:54:28:a4:
8b:b0:fb:f2:82:c7:2e:91:3a:83:dc:93:98:41:42:
2e:38:b6:46:9b:75:76:38:c1:cc:6d:57:4b:cb:25:
43:7c:75:29:da:60:85:7c:93:6f:01:61:a9:a3:78:
a5:87:3e:30:29:a3:ea:03:bd:8b:25:29:dd:a8:e1:
08:a2:74:55:a4:af:90:28:62:b2:2e:e5:52:20:97:
7e:a2:5b:8e:e3:ab:85:e4:09:59:60:29:f1:69:2a:
34:75:03:8d:14:69:81:54:ec:2b:c4:24:87:06:e2:
35:1a:6e:6b:25:57:81:c4:57:a5:cf:17:b7:41:a9:
70:4e:72:5d:af:9f:34:77:2f:b1:e5:7d:35:ca:df:
29:0d:2b:19:83:73:19:1a:be:62:e3:ff:c3:6e:51:
ac:eb:26:81:9b:f3:a9:9a:9e:55:e8:e7:49:4b:1c:
cc:cc:62:e8:f5:dd:0d:3f:86:90:6f:a4:04:98:a2:
1e:42:56:9f:85:60:67:91:16:f1:fb:7a:ae:a6:87:
1a:f4:f4:fb:d0:f3:1f:13:b4:36:01:97:b0:a7:cb:
c5:d4:e3:00:e4:b0:27:e2:f3:55:94:ce:2b:5c:08:
26:ef:40:6d:a2:bd:69:2e:52:f4:55:ae:69:23:55:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:14c8::/47
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29478
Signature Algorithm: sha256WithRSAEncryption
a7:94:c6:81:7b:a9:96:f2:08:8f:2e:da:d0:2f:23:89:85:f5:
84:88:74:3f:c2:81:aa:f8:e7:f1:19:67:f8:02:29:95:5a:06:
e5:9d:e7:57:65:ce:cd:f2:df:bd:59:d4:9c:eb:71:5d:c0:f9:
32:45:7a:9b:02:32:ff:97:e0:12:f7:fa:8c:d0:6f:e0:d0:bd:
c4:4d:cf:ec:18:61:25:99:74:40:39:84:c3:16:54:7c:ea:24:
96:1c:f6:68:84:1e:f1:b5:9b:1f:19:69:2a:bd:af:e0:b3:c4:
bf:e4:c0:50:cd:eb:d9:a0:c2:88:81:78:ea:72:2a:43:52:12:
90:93:8b:5f:28:05:e1:ad:31:11:d0:e4:f0:5a:f8:fb:d3:fb:
3e:83:a9:8f:bc:d6:4d:13:8d:da:4c:79:24:d2:9e:45:ec:05:
4f:ae:94:bb:7b:9d:ec:6c:7b:be:31:11:30:d6:e1:69:c5:06:
9d:83:c6:4b:2a:e7:01:11:f0:af:e5:80:95:0c:a9:7d:31:1e:
a0:ad:d3:05:0b:59:b3:10:65:48:4e:9d:f6:b8:e1:e3:1f:3d:
e3:d5:48:e1:14:1d:e2:08:71:9f:22:1e:43:91:b2:ba:7e:4f:
9e:20:f3:cf:80:55:47:a6:59:31:e8:8e:97:73:67:39:70:d4:
d2:da:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:05 2025 by rpki-client