Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
File: nYy-lCn5RJlbPJNL2vZglrURSNQ.cer (raw, json)
Hash identifier: KHFxAPYYQtD0e2CjwNmykg1Kx5gSD9JAySrCTyfZrxs=
Subject key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C5CA64237246D9CF4825C6B90FF66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215543
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:a6:42:37:24:6d:9c:f4:82:5c:6b:90:ff:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:0d:87:12:95:fd:cd:9b:b7:25:43:47:62:
be:8f:8a:00:ac:cd:53:98:36:8a:e0:50:94:ef:05:
01:03:42:cc:33:1e:42:c9:cf:4d:dd:4c:a8:b8:ca:
d4:7c:28:28:5a:7e:38:5e:5a:38:1e:1b:64:a1:85:
ec:30:fc:36:a8:76:83:87:bb:c7:a7:c3:a8:76:e2:
2c:ad:ef:de:c7:32:c2:a4:cd:b8:ca:3c:2c:1c:a6:
7a:8e:01:5e:7d:82:d0:f6:16:c9:d3:5a:38:3f:a3:
1d:0c:39:41:ce:4c:bc:36:f7:1b:c4:0a:10:ca:b3:
03:a4:48:a5:97:b7:da:2b:c4:27:9d:f9:15:a9:71:
1a:15:34:be:c9:5d:94:71:43:b5:ab:4f:e2:84:62:
b2:80:1c:4d:f0:3a:3d:09:bf:81:b7:42:37:76:f4:
34:e3:fe:18:28:56:c3:4f:57:b1:53:87:8b:d8:48:
28:d6:3f:6f:cf:22:64:be:cb:c5:79:df:d5:34:e7:
65:53:64:68:06:df:95:59:94:1a:97:7f:ff:f7:5e:
66:35:3d:b9:63:7a:a5:ec:4f:66:46:37:51:c1:59:
17:1d:2d:01:79:58:df:37:ce:95:ab:ce:35:1b:99:
0e:0f:af:df:88:f7:a6:59:b0:c9:55:cf:6a:92:67:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215543
Signature Algorithm: sha256WithRSAEncryption
65:ba:f5:01:85:f5:94:71:a5:40:11:46:04:e2:06:f4:33:02:
fe:35:54:8d:79:89:fc:a2:10:c3:3d:2f:05:03:ea:f1:73:d3:
55:85:e1:cf:76:fe:49:5a:26:4c:c2:2a:3c:0a:3b:28:e7:48:
ff:c4:7f:02:de:4a:51:8f:07:d9:46:3b:71:9b:06:6c:59:fd:
2c:ca:70:0c:f9:94:a5:53:3d:91:20:a0:8c:70:63:28:0b:a7:
d9:84:ea:e4:ce:53:3d:12:eb:9a:18:a0:75:75:16:09:90:e8:
d9:c4:ce:76:3b:e7:7f:76:16:47:57:48:89:33:db:77:a5:8d:
91:81:e1:7a:fb:f5:8d:0f:56:03:82:c4:b6:30:d9:04:81:e7:
0a:4e:93:ea:d5:d5:ed:67:e7:a7:d1:90:27:af:c6:14:a5:f0:
3c:9b:f9:f2:e7:ae:1c:d7:a3:25:f4:ea:67:57:dd:f6:b5:45:
36:83:d0:11:fc:43:e4:19:e8:e0:d4:88:9b:c1:66:81:fe:d7:
2b:16:76:a2:90:10:09:4d:18:e3:53:f7:a5:1f:4d:ad:53:55:
b7:ef:9e:0d:4e:79:4a:b2:45:96:90:ff:ea:31:34:07:50:2b:
f3:25:c7:c7:54:7c:0d:e7:53:fe:a9:6c:c3:3b:10:55:2c:df:
fa:db:58:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:50:40 2025 by rpki-client