Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i90UJnygnMoHmH6ySP91hWkRpHQ.cer
File: i90UJnygnMoHmH6ySP91hWkRpHQ.cer (raw, json)
Hash identifier: dn/WhYcgZsOW0Hf9UXgic1S7G5AQWWIvTbhkl610TKE=
Subject key identifier: 8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266AE22CD3184BF08EC7641B3C071EBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205712
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e2:2c:d3:18:4b:f0:8e:c7:64:1b:3c:07:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bdd14267ca09cca07987eb248ff75856911a474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:01:20:d5:d1:7b:26:91:61:84:2e:4c:9c:
f5:31:44:fa:4f:f5:f2:9c:30:16:ca:25:8f:50:53:
07:92:f9:c3:d0:d3:ba:38:01:0a:2a:24:84:e4:53:
d3:4b:a7:9e:fc:a5:7a:6d:ef:26:4e:29:90:cf:79:
7f:18:cd:88:a2:de:9a:ec:67:43:5a:cc:53:3b:eb:
f6:fc:ce:22:71:9f:5d:60:ac:6a:38:f2:21:a9:28:
04:63:31:2b:5f:a9:07:15:25:1d:ec:6f:e1:14:c3:
b7:bf:e5:e6:9f:1f:11:b0:99:de:7f:b8:0b:4c:bd:
3e:e6:3c:72:16:d5:b9:93:e0:bb:8e:fe:13:a9:00:
53:12:1d:47:6b:f0:93:3a:20:08:39:8a:3a:75:37:
1d:99:cd:52:de:a1:d8:f0:d5:90:b8:02:7c:bc:34:
3c:57:f5:44:4c:f3:3a:96:1a:14:a1:29:b0:16:ac:
26:62:e1:69:d2:97:71:25:d8:92:bc:6a:80:0e:df:
a9:31:c1:08:0e:4d:14:51:84:7a:fd:52:5f:26:32:
76:cd:89:c9:41:2b:54:23:db:7f:f6:31:8e:4a:2b:
2f:d1:c9:21:02:b3:e8:c6:6f:e1:81:be:c2:d3:40:
fc:3e:5b:68:71:65:2c:d1:d2:17:fd:0b:ff:48:44:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205712
Signature Algorithm: sha256WithRSAEncryption
43:b8:3c:70:c1:0e:62:c5:73:14:aa:b6:cb:05:85:44:fb:bc:
75:04:14:53:af:e0:20:5a:4e:50:04:95:63:b4:23:6f:5c:f8:
63:76:c7:bf:b7:00:6d:31:26:0e:94:87:c7:0e:15:07:d6:ae:
2e:de:02:e1:88:3a:6d:8e:06:18:e3:f4:e6:5a:83:ca:24:da:
ec:e6:62:ef:39:fc:ea:04:ad:4b:0e:e5:b5:9f:89:f4:9e:d6:
dd:4a:3a:e2:e4:8f:a2:8d:41:7b:44:f4:a9:fc:bb:0b:bd:50:
0e:76:dd:8d:93:3b:01:32:f4:7a:81:4c:cb:2c:01:69:51:cd:
ac:03:51:ab:bf:46:ed:87:57:b0:81:60:01:6b:24:31:13:93:
33:29:af:b1:dd:13:4e:07:ed:ba:bd:69:68:41:0b:31:e1:aa:
77:d3:8f:5e:40:eb:93:4c:7b:a8:23:5b:0d:28:bd:3b:2b:62:
52:d8:86:a3:02:e2:d8:b0:bc:bb:03:16:98:35:21:9e:1b:ac:
e9:13:3b:6d:b1:ff:c4:cc:83:12:09:e5:77:e5:69:1e:33:6a:
f3:6d:b3:b8:fd:13:1e:0e:60:f2:68:13:42:06:ff:9d:3c:28:
51:6a:55:3c:67:c7:2a:96:04:05:c8:2c:2e:0e:68:d9:7b:8c:
37:f4:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:19 2025 by rpki-client