Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tZXiFxdovJspQknw46U1kBecUu4.cer
File: tZXiFxdovJspQknw46U1kBecUu4.cer (raw, json)
Hash identifier: pfb7uMAhiTXkxSHU0FsVnkomaVmoLxL0Xy/r8Ag7jDU=
Subject key identifier: B5:95:E2:17:17:68:BC:9B:29:42:49:F0:E3:A5:35:90:17:9C:52:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D539B3B78270366A5A62578988BE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49198
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:53:9b:3b:78:27:03:66:a5:a6:25:78:98:8b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b595e2171768bc9b294249f0e3a53590179c52ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:83:19:6a:c3:c2:bf:60:c6:a4:e4:0e:a0:
a9:24:ea:67:75:a7:16:fc:77:3c:72:9e:cf:04:bd:
46:e7:07:a8:b9:81:4b:f2:27:e8:c8:1d:4a:11:e6:
15:6d:55:6b:ad:47:61:9b:bf:47:5d:d4:82:39:67:
11:29:a4:30:03:b3:9f:29:1a:dc:bd:26:ee:a8:73:
d0:02:7e:32:d1:11:1f:cd:d6:5f:3e:7a:30:2c:4b:
b0:97:f2:d2:98:34:cb:75:25:4f:13:06:7e:18:6d:
36:b3:1b:a5:74:51:f1:06:a5:e0:e4:e3:fb:63:a9:
4b:2f:ae:4b:b8:c2:ca:9c:a5:fd:3d:f5:f9:24:d9:
7a:c9:d7:4a:2d:3a:eb:1b:5f:48:5f:3e:8b:18:9d:
50:99:b5:bd:c2:f4:76:93:26:63:33:9b:76:10:a1:
b9:c7:fa:02:12:c5:c5:48:39:f4:7b:ce:e7:9c:96:
38:fc:c8:dc:aa:68:d7:98:ea:72:56:1c:dd:e9:5c:
4f:55:cc:79:92:7d:22:2f:a8:82:de:0d:6d:86:8d:
03:ac:de:02:bb:4e:55:7b:c5:ec:4d:00:07:c3:c9:
f7:51:1c:f6:eb:d0:71:d7:df:fb:74:79:f9:cd:51:
15:3b:e0:b0:40:64:26:18:d6:4c:15:32:7b:31:b0:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:95:E2:17:17:68:BC:9B:29:42:49:F0:E3:A5:35:90:17:9C:52:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49198
Signature Algorithm: sha256WithRSAEncryption
80:dd:6b:b0:85:9a:a5:9f:e1:c9:1a:91:95:b0:dc:a6:0a:8c:
44:cf:b3:f2:27:1a:98:a5:57:1a:5d:b6:76:6b:d4:d1:2c:61:
fd:e8:61:97:40:70:c5:f0:6c:1b:7f:60:da:08:22:5a:6d:b5:
a9:e8:9b:88:b6:f8:29:0c:86:89:d0:60:e0:8d:5c:aa:a7:61:
7b:d4:20:8d:a1:84:6e:14:21:b0:0a:f9:a0:09:19:6f:16:d7:
a2:ff:50:5f:64:d6:67:97:9d:78:41:f1:ac:e6:dd:bc:ac:05:
49:e2:58:19:fa:2d:d2:1c:3b:48:5e:13:68:c2:93:5d:20:89:
64:0b:91:21:17:d0:56:c4:5d:05:c6:bb:a6:57:e4:db:f6:a0:
57:41:2f:28:41:8e:b1:d8:e8:2e:82:c7:fd:38:83:99:55:8d:
8e:1c:f8:29:e7:f6:63:de:c8:f6:ff:7e:f2:35:8a:8c:b4:b1:
fa:dd:e1:1a:18:db:1d:c9:77:c6:ff:84:24:fc:30:86:94:a3:
fd:22:3b:d5:70:3b:6f:54:e7:46:c1:54:81:16:f2:6e:fa:2c:
c4:54:d7:87:bc:77:36:02:40:32:de:3c:dd:c3:92:bd:6f:05:
5b:73:97:c0:d6:2d:c0:07:fa:36:35:c1:82:34:03:f1:20:25:
0a:c3:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:18 2025 by rpki-client