Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
File: oDavImaRg7om8jl2Uw40mzRlGWg.cer (raw, json)
Hash identifier: ud+QMV6slkrGOxi/74GXHuq7lVG6n0vmN1P8Mx+EdXg=
Subject key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BE4A48055D45039D46727997DB8A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30910
IP: 2a00:ff20::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e4:a4:80:55:d4:50:39:d4:67:27:99:7d:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a036af22669183ba26f23976530e349b34651968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:d1:a2:f2:ae:a9:d4:79:18:f4:b7:eb:93:
b4:aa:87:09:2f:c7:1e:84:58:03:e7:40:3f:21:81:
db:03:9d:48:93:44:2f:95:cb:78:61:8d:99:9c:b3:
a5:79:b0:03:4b:a0:64:af:54:f9:11:98:d0:49:cd:
a9:37:62:86:62:9f:54:b7:55:9a:4f:74:52:ea:80:
12:6f:54:de:86:06:83:62:a3:f4:5e:64:7e:1e:14:
db:9f:65:88:49:9f:a0:91:d8:49:54:1a:6f:c9:d6:
98:ce:2b:3e:25:ab:cc:ee:6c:ea:d3:47:16:8e:63:
6e:e5:1b:12:15:8e:4b:4e:7c:52:6d:19:e3:1d:4f:
25:f6:06:f3:d4:6d:86:76:e2:42:c4:b5:a3:0a:5f:
6b:8f:48:af:9a:a1:63:86:75:36:6d:a6:b2:a8:fd:
6a:65:c6:b0:cb:2e:aa:a1:20:41:ff:e2:15:f5:3e:
59:e4:3b:84:48:29:a5:6b:e4:c1:e2:ba:a7:68:a7:
f6:35:3d:9b:69:c7:e4:e5:03:5e:8b:df:27:90:1f:
33:75:fe:f8:d6:80:46:ad:53:7f:84:2f:fa:10:bb:
03:5c:cc:c1:85:32:ce:c5:4c:c2:c7:5f:43:56:f5:
08:08:87:ff:16:2c:fe:3c:67:1e:64:51:02:89:3a:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ff20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30910
Signature Algorithm: sha256WithRSAEncryption
08:d2:1d:b8:5e:f0:16:55:68:ca:f1:05:77:b1:2f:02:a9:8b:
bb:6e:63:97:4a:10:ed:47:99:08:ee:d2:3a:8d:9f:9f:e4:95:
e4:7e:a6:c2:fd:a3:fe:71:b7:f1:2d:93:25:e8:4e:86:47:06:
07:41:b5:38:f7:8d:cc:0e:b6:9e:6e:60:53:90:43:52:00:f7:
20:98:8d:d5:77:eb:f8:d2:03:39:5f:31:93:33:30:8e:b3:c7:
f2:fb:fb:78:18:60:b4:63:a9:47:14:51:8d:18:10:90:89:b7:
05:d7:fa:68:f2:0f:cb:a0:de:37:f1:48:0a:48:1c:1f:64:c7:
74:47:97:9b:e1:37:c5:cf:a4:b5:08:b9:bc:6d:d7:b1:48:79:
9c:dd:cc:e7:35:d9:85:6b:e0:91:af:5a:46:5c:d9:91:dd:46:
3c:85:6c:1f:7c:e3:d2:38:04:32:36:8b:21:ad:22:1a:14:e4:
38:81:c5:74:3e:20:7d:b4:1f:21:13:24:91:72:6e:ea:fe:bc:
c0:ee:5c:d7:9a:d8:2a:89:29:41:3f:fc:ae:ea:e5:d2:d1:74:
e6:cc:c8:d5:85:52:35:d7:1f:f4:dc:bf:69:e9:6f:66:2b:42:
5b:f4:0f:78:78:5b:7d:3c:8f:7a:f7:b6:47:ef:b0:d3:20:34:
5c:b2:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:57 2025 by rpki-client