Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
File: tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer (raw, json)
Hash identifier: Z0xYSwo80moqb1kv+dteG18dNsO4vEZChzZ8t145K4g=
Subject key identifier: B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC45174F892950B3B99C54F5F1A73F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212328
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:45:17:4f:89:29:50:b3:b9:9c:54:f5:f1:a7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:dd:15:63:ab:55:13:46:5b:2b:c4:6e:4d:
e9:23:6c:86:4f:48:fc:13:a1:e5:a9:d4:32:3a:08:
20:d9:72:a9:48:3f:b0:f7:50:17:40:14:8b:c7:8f:
18:a3:ef:57:2d:ea:2b:18:a9:04:22:c5:cb:60:08:
07:71:1f:d7:6c:ad:79:4e:0d:29:02:67:81:da:35:
bc:01:c6:97:d9:f7:dc:7d:a4:60:66:0b:ff:de:fd:
81:18:ea:5e:af:f8:44:1b:e1:d3:4a:91:64:a4:5e:
6e:fe:d0:8f:8a:c6:50:9b:53:d9:31:93:bd:c2:a9:
cd:8b:ed:7b:a8:c8:9d:07:6c:60:ef:b6:43:4a:a0:
b4:07:30:f1:1e:20:0a:3b:de:19:91:1b:e5:85:de:
0f:68:3e:9d:a2:49:4c:b8:00:85:d4:2b:da:2e:95:
bc:63:2e:71:76:70:1e:fc:9a:76:97:36:bc:cf:d2:
bd:e1:bd:2a:7c:ab:ca:89:bb:3b:df:db:b8:08:b7:
f3:6b:5f:5f:9d:b7:c4:5b:ea:74:d7:9e:8a:89:a4:
28:79:84:a9:18:f2:53:db:8e:9d:6c:be:8b:5f:4c:
f6:7d:a6:4b:fe:04:56:cb:9f:13:46:57:dd:62:9a:
c8:4b:30:94:0d:d7:74:b4:e5:13:61:0a:74:8e:12:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212328
Signature Algorithm: sha256WithRSAEncryption
61:0a:6f:02:1d:b8:23:d9:5c:39:14:3d:b0:e2:29:25:0f:72:
a9:64:23:92:75:9f:d4:8e:20:c8:0e:e7:f5:c2:f4:14:33:98:
d3:80:5c:76:27:a3:ab:06:83:db:83:11:2b:72:8a:e1:5b:53:
fe:38:4e:db:75:6f:80:b7:9b:a9:1f:7d:82:3b:f9:d8:d5:0a:
81:46:6d:23:17:2a:b2:62:c6:1f:f8:a4:87:83:c3:fc:b6:c1:
1d:03:a4:39:48:f3:b4:6e:6c:22:49:a2:17:ee:6b:49:68:f4:
e2:a7:47:30:65:c2:9a:00:af:63:78:fa:4b:42:d6:c3:3d:cb:
6f:9b:9e:e2:43:67:b7:5e:9e:3a:e0:8d:5a:74:8f:74:09:04:
3a:e0:ca:ee:39:37:4c:5a:74:ad:6a:bb:01:59:aa:63:9a:8b:
26:e1:87:cb:2b:f7:17:7b:11:46:97:34:ee:7b:8a:bf:d8:64:
9b:48:c0:4d:70:a5:6c:c3:87:39:4a:64:dd:86:78:1e:ba:92:
31:72:01:0b:2e:50:48:91:55:b1:bd:14:dc:00:b0:3f:7c:4c:
94:94:1c:5e:14:7b:32:ee:2f:91:72:ed:3d:f2:ef:12:3f:fe:
a0:50:0f:97:47:af:09:5d:f9:e2:b1:bf:60:98:a8:dd:16:78:
e9:1b:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:27 2025 by rpki-client