Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.cer
File: ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.cer (raw, json)
Hash identifier: 2O0REEz9osoj3ps3H0cvdBanOL6SiG8dkcDfZDC/VrQ=
Subject key identifier: 95:A7:68:A9:5B:49:9B:D3:BD:67:C1:41:27:AB:6F:97:10:A0:3E:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB9FC1F1191F87ABD8B4E00C552E1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203945
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9f:c1:f1:19:1f:87:ab:d8:b4:e0:0c:55:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95a768a95b499bd3bd67c14127ab6f9710a03ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:62:db:a5:8a:ee:a1:53:57:37:9a:a7:f0:
49:30:ad:2e:0e:6c:73:16:82:64:40:8a:f5:cc:0d:
1a:a7:07:8d:3e:06:17:3e:54:12:6f:79:17:1f:92:
05:fe:8a:19:2b:de:92:c4:2d:a1:a6:09:3a:25:f2:
ff:01:a3:47:a8:4d:fd:ee:3b:79:ca:29:da:7f:f7:
cd:0b:2a:7a:f6:dc:ae:81:87:23:9b:8e:1d:70:34:
d1:cf:ad:ce:3f:69:5a:bb:b4:e2:03:a2:a1:29:07:
f1:c2:bf:29:06:99:cf:62:e2:e9:ab:88:95:89:9e:
41:e1:da:d3:3d:92:ec:13:48:2f:0b:97:e3:3b:df:
6e:46:74:dc:29:ce:19:08:88:3a:d5:cb:a8:a5:d5:
69:e6:50:e4:e6:f3:bf:5d:ff:bc:a7:87:5c:9a:55:
21:5e:82:ab:b7:3a:7a:d0:7f:a2:34:31:02:68:51:
67:8b:d0:4d:f3:19:5f:1b:7d:52:56:e6:b5:67:c3:
57:b8:d1:88:8e:e8:51:b6:4d:cf:87:9d:0f:ab:b1:
2a:ea:c9:f3:d1:35:77:4e:30:de:3b:64:9b:d9:23:
9a:59:eb:77:94:77:3a:2e:d6:30:cd:04:4c:12:3b:
9f:60:cd:4c:d1:c4:fb:9f:8a:fd:ff:e9:62:c3:cd:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A7:68:A9:5B:49:9B:D3:BD:67:C1:41:27:AB:6F:97:10:A0:3E:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/589d1c-7ca6-43df-b036-72cbafed75f1/1/ladoqVtJm9O9Z8FBJ6tvlxCgPsQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203945
Signature Algorithm: sha256WithRSAEncryption
6c:19:ca:f3:1d:47:fd:01:2d:2b:2f:44:30:c3:1c:31:9a:b0:
a4:ef:cd:57:a7:a9:25:c2:c8:51:c4:e7:70:58:3a:30:67:7e:
a0:c9:f3:6e:dc:bd:86:f2:ae:98:82:9e:d4:13:1f:96:63:80:
dd:36:f8:93:04:7d:2f:f7:70:a7:d0:77:06:27:a8:36:45:94:
40:30:90:57:3d:e2:47:5e:3d:1b:70:18:a5:7f:c0:6e:dc:db:
9d:3a:8d:6a:e2:9c:10:cd:28:eb:59:5e:4f:f2:c4:31:64:36:
ec:ce:c7:bb:75:4d:99:a3:80:0a:41:d7:95:ea:9e:86:06:08:
4f:b1:7d:61:79:26:cf:0a:35:11:70:99:71:7b:a9:de:1b:58:
64:59:fe:02:58:89:3e:3e:f1:2f:8a:8e:77:fb:4f:05:e2:86:
ab:04:3b:0e:da:e0:7d:d3:58:ce:8d:b3:c3:2e:46:f3:38:26:
69:3f:a2:55:43:74:1e:d4:4b:51:94:2a:b2:ea:dc:07:3b:02:
41:f4:1e:a1:85:ad:ad:ac:50:6a:89:46:9c:09:b2:4b:71:f3:
f6:38:a2:e8:b3:9b:fb:5d:7f:9f:65:85:24:5a:dc:4e:78:3c:
8b:a7:f4:ff:22:cc:71:1c:39:21:db:f3:24:d5:eb:e1:81:9a:
4b:03:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:27 2025 by rpki-client