Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer (raw, json)
Hash identifier: 6Kck25vFlvw7MpNgQg+DgTWlNIZ1Z58EkpwQCBNQLdg=
Subject key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C48CA3F829457E1F8D29F1A6B6B26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6751
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:ca:3f:82:94:57:e1:f8:d2:9f:1a:6b:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:8a:f0:45:8c:91:7b:ea:ba:a2:4b:8b:f7:
53:c6:fe:b7:e3:e8:5e:73:a7:08:e1:b9:91:20:cc:
9f:c2:ec:67:c6:27:c9:37:2e:ec:37:a5:83:44:b4:
49:69:1e:41:19:e0:4c:6d:c6:29:dc:38:cd:0d:76:
51:a2:3e:22:2b:91:44:34:d2:95:a0:b6:a0:ca:e9:
1d:1a:76:c1:c7:be:44:e1:42:ba:f8:31:1c:95:62:
19:f9:d8:cf:b5:a2:37:65:b0:f6:51:f1:f2:fd:b2:
b1:a9:5c:d4:fd:0e:31:29:4b:16:9e:13:92:45:34:
6e:f5:d3:a6:ae:f2:54:48:16:69:f6:f5:fd:6b:04:
25:5b:a2:f5:e2:77:17:1c:84:a3:b6:20:98:34:88:
61:1f:28:b5:ef:9b:cc:23:b7:65:01:19:3d:07:35:
09:50:04:ce:25:6f:e3:d2:81:6e:7e:82:5d:06:35:
48:4f:8e:32:12:cb:1d:6f:a6:fc:a5:bc:f7:c7:cd:
90:b6:ea:a3:06:6a:f1:0b:78:92:a2:ae:99:e2:bb:
f1:30:8e:89:74:9e:09:64:4f:fd:64:0d:da:5f:51:
24:e0:83:e2:d6:a5:ea:d0:95:9a:3d:7f:21:c2:50:
18:7b:10:fa:fe:76:da:b3:1f:29:15:ee:56:fa:42:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6751
Signature Algorithm: sha256WithRSAEncryption
a8:37:38:75:5d:4b:06:8c:2f:48:e7:fa:02:b5:e6:eb:5d:e6:
4a:12:24:4d:51:95:66:c4:10:4e:0f:4e:f0:9f:26:49:73:dd:
42:8b:3d:fc:f4:6a:5e:53:22:3d:2a:de:b1:21:f9:7e:b0:ba:
62:ec:59:4a:91:fa:6f:44:7b:cf:a0:89:4b:e0:75:f4:8a:81:
9e:a0:64:07:79:d6:82:00:af:a0:ec:de:1d:be:8a:9a:63:f9:
64:45:d4:b5:bd:ec:b2:e1:a5:41:74:1b:89:a9:d8:0f:d9:3c:
0f:a6:ff:ec:40:54:28:0f:5a:65:0d:ee:f3:42:ac:2c:79:6c:
27:da:c4:20:da:6b:8b:3e:06:7d:73:77:57:5c:27:73:fc:f1:
2b:e4:19:4a:1c:b9:21:6b:27:6b:2d:97:83:07:14:cb:2f:95:
71:07:14:ec:d7:79:41:e0:1f:36:bf:74:88:09:92:b0:91:43:
4d:00:77:b5:f2:57:e2:50:d9:10:77:33:12:97:18:0c:60:f5:
d4:14:3a:0c:d5:32:6d:30:f7:90:8a:0f:f2:4b:af:79:50:49:
b2:d8:56:b4:64:38:40:60:3d:1a:dc:75:1b:e5:88:29:de:0b:
38:d7:5f:2c:d8:f0:f5:c4:4e:7f:33:25:3a:bd:d0:0b:bd:a9:
8a:1b:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:29 2025 by rpki-client