Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer (raw, json)
Hash identifier: Hee2WpY2ltYQ/IFr+CS0fcdboFbg0adKW+txAgdAOdA=
Subject key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5AFCE08FCF0B882B3810F3D48B873
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212896
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:af:ce:08:fc:f0:b8:82:b3:81:0f:3d:48:b8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90907cee4fac50f3753622ad21a989ae7741c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:10:c0:46:1f:de:77:ce:9e:8a:00:cd:d6:
de:85:1c:61:d8:5f:1b:2a:7f:d4:60:e3:75:68:d5:
de:f8:5d:a7:0a:8e:23:96:9d:8c:af:5d:02:76:9f:
4b:36:aa:b4:e3:18:b1:ce:cf:12:89:55:9f:a9:69:
a8:0f:ed:a4:8a:66:ab:54:30:64:d9:e6:92:cc:89:
af:f9:79:7e:26:0f:be:f8:1e:9a:ed:b0:c8:8b:7d:
36:15:59:fe:f6:d7:f0:bf:ec:d9:50:fa:b2:8b:74:
dc:3d:d2:84:15:81:4e:8c:1d:ba:6e:72:56:80:0c:
58:26:b8:d3:ac:ef:8e:2c:eb:58:e4:70:9d:be:8e:
a2:6c:87:99:75:9f:f1:3c:6c:7d:0f:34:ce:24:a9:
93:f3:74:97:69:8d:16:52:e3:71:d8:bd:81:00:41:
32:2f:22:92:cf:44:6a:97:84:9a:cd:3b:d2:d9:92:
eb:df:95:1c:f2:d3:9c:64:40:15:90:8f:cd:53:bb:
3c:26:f4:f9:e8:b3:37:de:0d:22:96:28:ba:6e:8b:
3f:e3:b0:18:95:6b:ec:78:6c:cc:73:1f:3c:11:f4:
6e:d3:32:89:81:33:a6:c6:48:21:8e:f0:a9:39:bc:
24:f3:46:3b:a9:2f:fc:11:51:25:18:b8:b0:01:fc:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212896
Signature Algorithm: sha256WithRSAEncryption
3b:fa:7c:70:95:b8:3c:c0:1f:2f:9b:d7:f0:1f:86:8d:cc:15:
11:10:52:92:cc:05:55:f4:02:03:a7:93:1b:22:9c:cd:58:ef:
70:fb:ff:7d:89:cd:7d:99:40:9a:29:9e:30:e8:cf:02:89:ea:
ea:a0:71:93:0f:59:c3:a1:35:18:e8:df:44:e9:8a:3a:d3:d0:
b1:cb:65:01:72:da:98:71:ed:f6:73:80:de:94:e2:61:63:48:
78:3f:de:e6:ff:90:87:72:5a:ed:1a:8e:7a:8f:f8:c5:80:e1:
9d:ea:8e:c5:17:93:7a:7a:39:e9:5e:3e:43:a9:6d:a5:22:14:
08:f5:72:a9:28:1b:a6:58:3d:b1:1f:fd:8d:3a:88:da:9c:83:
a5:42:8c:74:1a:64:0a:4f:9e:9b:a3:52:a5:98:9e:58:66:b8:
b6:c3:af:11:22:f1:3c:82:49:c0:1a:f6:68:62:75:6e:1f:e4:
b7:57:eb:f4:c9:dc:86:5b:d9:1d:ee:55:c9:18:03:59:6a:f7:
8e:e5:4a:f4:d7:e3:82:73:0c:6a:11:fb:35:4e:74:80:25:25:
c8:0f:cb:2e:f8:9e:63:10:f0:ec:70:9b:2d:fe:52:54:41:f9:
74:58:51:44:db:3c:c2:39:1f:e7:74:52:32:de:8f:62:b9:ae:
00:64:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:07 2025 by rpki-client