Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
File: ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer (raw, json)
Hash identifier: b/X/quN0/lqFXSLK3wHPogiKYbEmXr/qAB367XUqujg=
Subject key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5FB6409FB3FB4030BE370F0502236
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50755
AS: 200676
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fb:64:09:fb:3f:b4:03:0b:e3:70:f0:50:22:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:bd:00:12:da:84:56:d7:bf:a8:05:e8:29:
93:64:e1:69:51:ca:08:f6:1a:62:9c:b9:36:78:71:
c1:9c:30:de:55:85:7d:00:89:72:fc:14:a0:e8:34:
ea:fa:6d:0a:65:92:61:f2:d4:d9:92:6f:4a:1b:4a:
95:e5:f3:ab:41:81:2f:ba:ef:21:ce:e5:bf:2f:9b:
f7:fc:9c:7c:6c:2d:b3:ca:d7:c4:7c:0d:c0:b2:cf:
2e:21:46:08:b9:73:1a:e2:a3:6b:22:80:30:b5:ef:
d8:83:cf:ff:97:9e:58:b3:21:61:65:f8:a6:f6:b3:
70:3a:7a:34:a2:d1:13:02:80:5d:88:95:d4:dd:69:
ea:2b:7d:ae:0d:1e:96:a7:ff:f2:56:93:b8:f3:9c:
e1:ac:62:d8:26:07:a6:1a:d2:de:6f:a1:00:0e:e7:
15:dd:a4:86:8c:34:3e:72:db:af:16:0c:11:07:f7:
c3:78:bf:4c:65:24:a3:7e:d7:f7:a6:8e:21:69:43:
99:7c:71:48:32:19:91:1d:87:50:a2:d6:4e:c6:e3:
2b:4b:5d:d7:9b:80:6a:57:9a:7b:4c:8f:69:28:89:
3d:14:17:44:b5:43:12:c7:07:5e:a3:bf:c2:0f:f8:
f1:15:ad:07:06:a9:34:53:6f:10:fa:df:bd:6a:19:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50755
200676
Signature Algorithm: sha256WithRSAEncryption
72:86:6f:49:be:ae:b4:19:69:46:8e:f2:4e:36:89:f5:26:09:
5b:af:2b:e4:83:b8:36:37:c3:eb:bc:69:15:f7:3e:96:6f:6c:
e0:9a:d2:10:f5:34:b5:15:97:76:3c:0a:0e:1d:2d:fb:92:e6:
70:3b:6b:35:a2:43:be:a2:11:f6:08:cf:44:31:ce:6a:b6:49:
7e:79:f6:97:5f:68:95:dc:6b:d9:22:c6:d3:33:38:4b:02:86:
81:7e:11:17:90:af:a0:65:52:20:ce:f6:26:40:ab:76:ee:4c:
fb:9f:c6:ae:fd:80:f5:59:a4:66:a8:e5:a1:52:a0:c8:02:6a:
c9:f9:12:07:10:c8:eb:e9:66:67:5c:2a:bc:b0:a5:e2:35:f0:
7a:5d:0d:d8:fc:3b:bd:80:81:37:5a:25:2f:66:f1:b5:90:3a:
53:ec:21:e1:50:5e:b0:ae:ab:c2:a8:24:52:07:05:1a:66:6c:
6f:df:40:66:3a:a8:d1:20:ca:5e:e1:dd:5e:43:c9:4e:88:3a:
c5:ab:f7:c1:a8:cc:c7:43:ff:b6:08:0d:16:e3:2f:fb:98:39:
7a:ec:9f:b5:2d:09:82:47:f0:18:ad:63:c9:44:c0:e2:8f:b6:
ef:2a:8b:3b:c8:8f:8b:93:c3:31:5f:d7:b8:1c:3f:cf:4f:17:
c0:83:31:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:58 2025 by rpki-client