Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer
File: v9aef9UBKJF3mCF6xh-OgrH6FOs.cer (raw, json)
Hash identifier: As6vAtVkKYsiM5xVgBax6WXmpdvhJ0Slkj5mXp4iojk=
Subject key identifier: BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1B9B2CBBD6FFA5A0B2B58C6DD7F80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47979
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b9:b2:cb:bd:6f:fa:5a:0b:2b:58:c6:dd:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:7c:c6:02:33:70:93:68:a2:a8:a2:94:3c:
90:f2:3e:c6:e9:81:05:4a:42:ed:b3:d9:b6:c7:24:
fe:b3:4a:f2:96:45:5a:aa:fa:3e:8e:79:25:cc:8c:
3f:ac:1f:70:d7:f8:5f:09:36:de:0f:a3:75:37:1f:
48:f7:1a:33:29:7a:cb:70:54:3d:f5:d2:88:46:ba:
be:4f:a8:bf:aa:4d:cb:49:c0:9b:1b:76:16:68:f8:
0e:95:4b:d2:b1:ad:a2:9e:fd:86:70:d5:a5:d2:2e:
c8:43:37:f3:38:8f:3c:4b:05:69:44:fc:9d:8f:fe:
00:e7:bf:e1:da:03:a6:e8:f1:de:23:f1:26:72:b6:
a8:79:cc:68:31:23:6a:f7:76:65:93:62:06:b7:77:
94:f2:7c:3f:ae:4b:29:de:80:28:25:ef:55:e6:aa:
4b:a0:bd:49:8b:bd:74:89:97:c4:d2:60:50:a3:64:
2f:4b:6c:75:a4:cc:c0:a7:bf:72:cc:88:c1:08:80:
30:34:62:1f:76:53:cc:b1:16:07:10:e8:66:9c:ad:
63:bc:4a:e4:b8:78:bb:b2:36:2f:05:27:ac:f5:60:
17:db:6c:2e:23:ea:82:05:b8:86:aa:f0:cf:93:09:
c5:c4:c9:a2:5b:9a:d1:7b:c8:10:e2:bc:b1:fc:13:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47979
Signature Algorithm: sha256WithRSAEncryption
a3:eb:54:26:01:72:b5:2b:e8:ec:eb:ad:85:a0:3c:e2:c5:5b:
ef:cc:0b:e0:ac:94:1d:e0:83:eb:f4:f7:da:22:60:af:50:cb:
bc:3c:01:44:74:e9:a8:95:66:64:8a:e8:a9:2b:0c:f1:da:51:
88:fd:80:82:e1:e0:25:63:55:e7:22:f2:85:06:9b:72:91:70:
57:d6:99:ac:94:ed:84:dc:d9:b9:64:80:5a:02:63:c2:b9:fc:
31:26:ae:b2:1b:da:d0:cf:e3:af:8d:7c:fd:01:a0:e2:58:ef:
5e:4a:ee:e1:f9:d0:ae:ff:ef:7d:9b:73:6f:40:98:10:5b:ba:
68:1d:04:c6:cc:7e:37:c7:33:cd:bc:b3:37:de:3a:06:94:d5:
40:e2:17:16:ac:ec:51:e6:90:51:20:d9:4d:3c:53:34:32:7b:
a3:43:7d:ef:43:86:08:41:30:fe:26:47:70:b3:c1:39:a6:b1:
eb:63:0e:b0:e2:93:14:16:32:3d:99:50:bd:55:b1:7c:88:99:
70:4e:87:3e:84:8c:19:3e:a0:16:7c:71:36:5a:86:d0:2a:01:
28:a0:ee:a9:16:97:a9:89:27:16:a3:2b:5d:ab:71:d9:22:f8:
d5:a9:f8:82:6f:4b:5d:5c:6a:5b:1a:da:ee:b5:37:03:8e:6f:
78:ac:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:47 2025 by rpki-client