Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer (raw, json)
Hash identifier: pQf3Puu9/1s7Bs1EadWnysqIQUs1+tKSzFqMzKocg9o=
Subject key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420682068ED2E24FCA343603FC8B56B8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200202
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:20:68:ed:2e:24:fc:a3:43:60:3f:c8:b5:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983ea291971990dc486f93812783fadd87ade863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:83:fc:14:77:c8:7e:2f:7f:a0:9a:04:92:
50:aa:93:ab:28:9a:0b:22:07:60:37:15:54:ae:20:
d7:f1:d4:4b:d7:04:d8:09:78:d7:8d:94:ef:1b:89:
d3:87:25:6f:de:6b:83:d1:6c:41:c7:b5:f2:2e:dd:
62:48:69:7c:a2:74:65:90:6f:90:7f:e7:ce:39:a6:
ce:b9:3f:ae:b2:e1:82:e4:83:54:a8:c4:8b:5f:a8:
e1:0c:b1:8b:d7:43:7f:08:af:dd:92:79:14:d1:13:
c5:34:61:61:c8:34:b5:18:23:7e:9d:f8:41:4d:fe:
d9:95:d6:b4:c9:c6:d4:3f:60:52:29:9d:73:9d:5d:
0e:f4:4b:4a:4d:c1:0b:23:f5:ac:4a:6e:fe:6f:3d:
65:30:85:2e:61:aa:af:89:6b:92:f4:20:03:dc:b0:
b1:66:00:60:7b:3b:d5:db:07:66:9a:95:10:07:90:
b8:20:f8:c5:26:67:d6:6e:8d:23:ee:9c:a8:b5:84:
ff:20:2f:13:65:fd:1e:c3:36:1a:34:d0:bc:f2:56:
7e:67:ac:5c:dc:f3:84:32:78:f3:ee:d7:91:0d:2b:
8c:fa:5f:7d:8c:18:7f:24:8d:5f:1e:cc:2f:60:18:
aa:d0:a6:25:55:c7:1c:d8:e3:0f:ea:d4:10:63:cc:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200202
Signature Algorithm: sha256WithRSAEncryption
73:71:9f:2d:6f:3f:53:68:22:da:35:bf:42:d0:b7:93:6f:3e:
a7:56:76:4a:ab:ed:70:48:a6:76:89:c8:3f:6d:82:bc:8f:89:
45:7c:40:24:43:01:ef:fb:e6:46:ac:45:46:c5:45:53:2a:b0:
dc:5e:c1:69:fa:ff:56:74:b4:1f:75:4a:f3:ff:06:86:89:ff:
73:50:de:bb:c2:d5:b0:2b:53:c2:21:7c:e7:37:44:85:77:29:
6a:c8:bf:11:96:72:80:f8:79:5e:d2:67:be:c3:79:ad:7b:ed:
f7:b2:37:b9:ea:3d:3a:89:4e:b1:4f:b6:6d:aa:25:7f:68:26:
27:21:16:a3:a5:c1:3a:1b:fc:46:61:4a:55:2f:82:62:9e:1e:
09:c3:ff:d4:ad:3e:e1:ec:bb:2d:41:03:bf:b3:fe:c1:89:62:
2e:b8:5f:af:ed:8c:fc:19:29:38:70:0c:9d:e6:1c:8d:c4:7c:
a6:1d:b8:21:e5:bb:48:59:ea:a6:02:70:7b:27:46:71:de:90:
be:ff:88:e3:0c:c9:a4:1c:43:b8:4a:b3:78:af:cc:5f:05:8d:
46:4b:7a:54:f6:00:ea:fd:7f:66:67:38:85:86:cb:2f:6b:1b:
ed:1e:23:34:1d:fb:08:36:ef:fa:b4:4c:da:4b:b2:a9:b0:52:
79:34:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:13 2025 by rpki-client