Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.cer (raw, json)
Hash identifier: B0RuNsUB1ehR0UxxcJZ+Xgb1TpNMzFaUiObBiqwCTfA=
Subject key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369FDD82CA6854525F0371D77B9F4CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47421
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fd:d8:2c:a6:85:45:25:f0:37:1d:77:b9:f4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:25:02:8b:c0:01:fd:0e:69:de:7b:06:4d:
d1:85:64:54:d7:1f:58:f8:7b:1d:38:50:df:20:58:
68:ee:20:f0:a8:65:88:21:f9:0b:44:1a:e8:9a:d7:
b8:a1:36:f6:2d:cc:f0:b2:00:7e:d7:6b:e2:53:98:
62:b9:94:fb:43:ae:a4:f2:5d:d3:65:b8:be:0c:18:
a0:1c:81:a4:f0:8c:25:82:4c:2f:a2:10:29:d1:49:
c0:17:98:0e:b4:5d:56:69:5a:ad:f3:52:b5:5d:a4:
25:16:29:9f:1f:39:78:fd:46:f2:cf:1d:06:a3:42:
5d:b1:7e:a5:7f:8e:b5:bc:8a:e2:ab:9e:9f:ec:e2:
42:d3:23:6c:9b:62:6e:09:d9:c1:52:4a:8c:4e:38:
42:9d:c6:37:ec:d3:cf:2f:3f:82:1d:e4:d4:5a:91:
04:d0:ec:51:e4:d3:ba:84:ea:b4:49:05:7e:7c:1b:
84:33:00:9a:93:bd:db:bd:a4:0e:08:49:f3:01:a1:
8a:51:92:19:2d:42:3f:de:e3:a9:4c:f2:ca:df:99:
a0:b6:d7:93:22:a3:f9:24:9a:83:46:9e:56:e1:21:
78:94:e4:62:c5:32:60:26:f8:c8:6d:90:8d:ff:b8:
ab:bf:c8:07:46:4d:e2:a3:96:74:b2:91:12:77:d5:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47421
Signature Algorithm: sha256WithRSAEncryption
27:5c:21:66:07:e7:00:13:29:80:6e:52:fa:9a:fe:d8:c4:6c:
ff:f3:44:ea:41:25:bc:d7:5b:73:0b:d9:54:5d:d9:90:ac:3b:
39:c6:3d:6b:55:9b:b0:8a:34:63:2d:55:75:ee:14:d3:52:f4:
aa:a8:38:0d:02:41:7a:23:fa:8f:67:ac:c1:53:f9:f6:bb:62:
59:45:b8:31:f1:23:ca:9d:81:6a:7f:aa:1f:fb:9c:77:86:78:
e7:91:2a:c4:58:b6:d1:95:d3:91:dd:3f:12:f4:64:51:89:da:
ce:76:77:7f:9d:6a:bf:08:b6:37:83:58:5d:7c:a6:7d:e6:58:
49:f2:cb:96:3b:9d:6d:b8:b6:8b:46:85:d4:15:a6:0b:88:7e:
cb:a2:c0:c3:87:52:0c:67:d3:de:12:b9:c9:af:4a:55:03:ce:
30:39:9c:93:6c:3a:aa:56:30:30:f2:a0:6f:3d:57:c4:c6:bd:
8a:c4:29:47:e9:27:2e:5a:99:c6:d4:46:9f:18:2d:80:ad:a6:
ee:cd:01:90:2c:4d:01:bc:f6:0b:cb:ba:ae:2d:4c:9a:e3:d7:
50:ef:2d:c9:de:b5:71:6c:d5:3b:9f:1e:8a:c3:0a:9d:b1:8a:
89:bb:d9:cf:8c:d5:a2:60:48:7a:99:6c:c9:4c:d0:db:d5:1a:
8b:b4:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:43:46 2025 by rpki-client