Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.cer (raw, json)
Hash identifier: p+7MgtqfTmTMlP/GRP7ShHOborMQhj+b3wt2NiWSEOY=
Subject key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5BA559A893B35B0B2FB12ACC2C53A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200385
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ba:55:9a:89:3b:35:b0:b2:fb:12:ac:c2:c5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:ba:5f:92:d1:d0:7e:3a:be:e9:50:56:86:
f5:7a:a4:c3:ca:60:3f:3f:cd:3b:cc:bc:29:41:33:
7d:73:a6:43:df:a3:94:59:b6:58:d2:75:cd:56:50:
9f:f7:b1:3b:13:b4:9f:9c:8b:e6:99:57:aa:34:17:
d5:88:63:a9:82:35:20:f8:a1:16:aa:d1:f4:ba:8f:
cd:e0:5e:3d:d0:a4:6d:f7:30:3f:8b:1a:1d:51:94:
0d:11:dc:57:a3:24:89:21:07:cb:1a:ce:40:36:71:
37:51:e9:0c:a3:68:6d:ac:1b:2d:f8:7a:93:ce:7f:
66:cd:e4:6d:d1:b7:e5:3d:48:b5:5a:b1:cb:d9:15:
4c:a6:c8:41:bf:80:27:6c:71:92:99:1a:f3:d4:95:
aa:eb:6a:79:59:bc:55:b2:63:c2:4a:84:9e:c9:36:
12:5c:d0:f2:89:3f:fc:b0:38:9e:f7:57:48:a4:78:
79:f8:1b:82:2b:8f:aa:06:cc:8d:8c:f4:ab:0b:e6:
20:82:8b:5c:8b:e8:ac:5d:9c:c7:1b:34:d0:44:51:
ff:6c:de:18:a7:0b:88:d6:60:18:57:7e:1b:40:b0:
c7:6d:69:49:ed:5f:e2:0f:3b:5d:e8:ce:1e:97:d9:
b8:ed:c4:8d:bb:3b:64:ac:ad:ab:ee:3a:1c:91:74:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200385
Signature Algorithm: sha256WithRSAEncryption
77:46:be:6a:5d:c9:6a:54:fb:a7:f8:02:9d:41:3e:65:8e:b0:
23:7f:57:75:fd:8d:92:51:33:7f:e4:91:cf:56:6b:3b:e7:b1:
d8:a8:c8:46:36:37:90:63:22:b0:00:76:42:13:8f:09:2e:2c:
28:73:38:e5:63:79:63:43:ab:cf:49:b1:d9:06:8e:35:f8:db:
bf:4f:9f:4b:3f:52:9f:4e:fe:40:76:82:88:4c:40:23:b8:ce:
e4:99:61:90:01:d5:fe:e0:53:76:74:06:ad:a5:f4:82:07:f8:
ad:0d:ff:e1:06:9a:27:5a:30:b8:ec:60:70:0b:99:f1:1d:f5:
31:50:cb:8d:7b:a3:78:db:e9:e1:8a:fc:79:fb:e0:fc:4d:d7:
16:8e:0c:30:8d:30:be:d9:f3:39:be:9b:18:b1:98:70:5e:fb:
22:e2:64:b3:a3:f6:0a:68:97:b5:30:7e:7b:2a:b5:d5:61:46:
12:5e:ee:7c:ae:82:18:d5:05:0b:66:57:fc:ad:30:b3:cd:7b:
c8:50:b9:38:90:b0:71:b3:35:95:fc:3f:b5:cf:a4:40:d3:55:
e1:e1:54:41:4b:19:fa:8c:32:a4:60:48:e8:07:a8:60:b8:e8:
d4:e9:eb:13:db:27:c8:40:fd:28:32:07:3b:03:07:93:bf:5b:
c1:f5:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:50 2025 by rpki-client