Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer
File: qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer (raw, json)
Hash identifier: Hn2b5YuoTqbqeGAApAxYbS7CsgdxQdoxL11rP7SVjCg=
Subject key identifier: A8:F4:E6:38:D1:FE:DB:32:C5:56:ED:69:7B:D9:6D:CA:DE:9E:DD:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA678853D1E2786D2C22880CA42518
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212227
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:67:88:53:d1:e2:78:6d:2c:22:88:0c:a4:25:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8f4e638d1fedb32c556ed697bd96dcade9edd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:30:a0:ac:49:45:19:bc:ac:cb:23:73:6a:b8:
b4:de:1a:b1:99:d1:45:88:13:5e:39:d9:0f:69:f0:
4c:58:b7:49:c7:92:2d:90:96:da:b8:1b:b6:6e:6a:
1d:21:83:a5:d3:c2:02:d1:ef:cf:a6:0a:7b:7e:60:
de:0e:05:12:9d:27:ab:d5:d0:d5:d5:69:0e:7a:12:
de:76:91:11:51:4c:0c:b0:19:17:0e:ed:14:4f:5a:
15:ff:f1:55:f1:6a:8a:43:82:44:a2:ad:ef:7d:c6:
0e:41:ae:9c:e4:be:93:32:0e:b3:5f:a5:06:75:30:
fa:b0:20:0d:6a:c1:1f:2f:87:cc:9c:24:f7:d2:98:
c0:22:59:f9:0e:d4:16:f9:13:82:3b:58:6c:74:a8:
a3:3e:30:1a:82:51:fc:8a:e9:bf:79:7c:fd:f7:16:
54:23:08:27:e1:78:55:94:e0:8a:bc:1e:fc:87:86:
e1:01:ab:00:0a:5f:27:ad:d9:52:c3:ff:0b:8b:79:
b4:c5:de:27:f1:9d:e3:d5:0a:43:f6:bc:27:72:d5:
40:7c:76:f6:4f:b3:55:ad:c1:2b:3c:41:19:68:59:
f1:dd:dc:cd:6f:0e:d1:44:c6:ce:a2:86:75:91:a1:
c1:1a:a0:7c:b4:a1:96:9f:c1:50:ee:a5:09:3e:d5:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:E6:38:D1:FE:DB:32:C5:56:ED:69:7B:D9:6D:CA:DE:9E:DD:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212227
Signature Algorithm: sha256WithRSAEncryption
5b:62:97:ba:c3:7d:3a:6b:f8:1d:91:73:06:6f:77:0e:fb:27:
9f:db:66:5a:05:e2:88:93:8b:a5:d8:f1:37:2c:15:25:7b:ee:
ad:af:43:f2:b4:7d:25:e3:66:9c:bb:c8:71:de:93:10:4a:40:
fc:96:17:1a:48:75:3a:db:c3:4c:55:88:0a:d7:8f:6d:76:15:
b8:39:19:0c:25:1f:76:ab:e1:b9:be:8d:70:65:12:8d:d4:af:
1e:bc:61:bf:64:d0:a3:82:76:f2:fd:47:66:da:0b:9e:05:59:
95:18:0b:00:d9:11:90:a0:5e:e6:c1:b9:95:f7:8d:c3:fe:58:
64:ee:d1:a5:a9:b3:b0:0a:76:15:d0:e7:c4:56:e2:f7:62:b0:
7c:9b:e3:f8:e3:0c:c0:62:d8:65:fa:bf:db:cd:58:8f:2e:3a:
b1:74:f2:ff:4e:c1:42:e6:3a:e6:17:eb:fa:be:57:8c:ae:75:
ed:d8:2a:a5:7c:7b:92:66:bb:e9:8b:8f:80:ba:9e:fd:4c:ce:
6e:aa:65:b7:49:83:6f:a0:1d:6e:16:d7:3d:98:79:d3:46:05:
e4:c9:84:70:6e:69:78:98:a9:eb:93:4d:0e:8c:ba:71:5f:6e:
fa:46:d2:0f:be:e0:bd:5f:a8:ac:e1:c2:71:8a:3d:dc:98:0f:
3f:16:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:15 2025 by rpki-client