Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
File: wkDtrImIu1blLeEopdZaj07z8Tg.cer (raw, json)
Hash identifier: VBAn1yeUs13G2gT+hxOLqBXkMm8qGdrMO1oUw8JUWWk=
Subject key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206834087758359927C763579B6C9D85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49264
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:34:08:77:58:35:99:27:c7:63:57:9b:6c:9d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:59:56:50:4d:02:c2:81:3e:5c:e9:b0:e5:
eb:74:9d:ca:43:4a:c7:12:0f:ad:50:ff:75:a8:d0:
6b:d8:58:5f:f5:ff:e5:d6:fa:8c:c1:2d:22:92:42:
aa:95:7f:a4:52:27:6c:ba:0a:81:ba:e5:83:f2:ca:
3a:2e:db:25:33:4d:8c:46:09:80:04:02:01:9b:75:
46:a2:47:6b:f6:95:6b:a1:01:39:4d:3b:8b:ba:cd:
81:1e:1a:9f:25:e4:6d:3c:20:a1:f4:34:ea:a6:8b:
e5:e4:88:0e:09:32:66:88:b8:c1:94:ab:4a:6b:38:
7f:e5:2b:aa:c9:a5:a6:1a:57:1a:7f:1d:76:3c:e0:
17:82:05:74:9a:d0:03:14:35:f2:5f:9d:ec:d0:ef:
d1:42:f1:14:6c:9d:81:36:72:7e:99:a0:9b:5b:0d:
00:f1:99:62:7a:16:b1:e4:12:6c:bc:fd:61:c5:db:
a7:31:c5:05:8f:b7:63:ca:bf:62:ad:f6:47:25:46:
06:61:90:ae:eb:91:b0:08:89:2c:f2:0e:91:81:4e:
fe:8e:ea:94:70:be:bb:41:b9:42:9d:57:6d:cd:35:
61:bc:6c:d4:50:3f:e0:6b:84:32:a7:06:45:03:d7:
a4:64:f3:cc:a7:01:0f:38:58:39:d6:7b:31:50:91:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49264
Signature Algorithm: sha256WithRSAEncryption
45:d2:a4:10:57:a2:83:90:88:c7:44:5b:a6:98:f8:e0:ba:e9:
91:53:51:65:ee:01:7e:23:5f:bb:39:47:87:f0:39:63:31:d7:
e4:2d:fe:8f:6f:70:73:c9:1c:0a:52:72:ae:97:31:0b:0f:af:
7c:d0:a5:59:de:a8:35:39:45:ac:90:49:89:05:d6:07:1a:d7:
14:f1:25:55:7f:b7:20:72:95:85:06:ee:87:c2:80:ff:36:9f:
e8:9c:1a:1c:11:81:12:83:54:4e:b0:6a:25:a9:c1:1d:d6:2b:
1e:84:a5:e2:54:b1:b8:2b:57:f5:db:24:14:24:08:85:f6:f3:
b7:a1:5d:16:8f:5f:93:32:8f:83:fd:23:6d:73:75:14:c4:87:
d7:95:cb:83:18:6c:7e:41:f6:27:98:a9:5c:24:45:7d:e3:40:
84:ad:a4:29:b9:8f:16:5c:f5:b8:07:75:17:65:98:73:88:51:
4e:76:9e:85:b3:78:5c:ad:9e:17:4f:d8:0f:74:7a:62:7a:e8:
f4:2d:75:fb:fe:ca:12:f3:4c:03:ab:4f:3d:63:06:f0:a1:f9:
e9:2f:57:ca:af:81:b6:28:d1:a2:ae:38:68:2c:11:9c:34:98:
39:fd:3d:f3:ad:73:ac:49:5c:30:47:ba:35:88:38:dc:3b:39:
6d:1f:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:48 2025 by rpki-client