Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1HDKxunkoagJpAZRN-zUyrOC4No.cer
File: 1HDKxunkoagJpAZRN-zUyrOC4No.cer (raw, json)
Hash identifier: 41cP2Clyh+yjv/h05rMZKGjJ6x1fMvW/rKu3F6ci8Xo=
Subject key identifier: D4:70:CA:C6:E9:E4:A1:A8:09:A4:06:51:37:EC:D4:CA:B3:82:E0:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0F12F3CB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/1HDKxunkoagJpAZRN-zUyrOC4No.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:03:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 39565
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691241172152 (0xa0f12f3cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d470cac6e9e4a1a809a4065137ecd4cab382e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:43:ce:e7:55:58:e0:10:00:50:e2:1e:01:
37:df:95:e1:45:5e:23:b7:1c:1e:ca:b1:02:c5:bd:
02:f4:0b:86:97:a7:90:33:b3:1f:a3:2e:d2:7f:86:
dc:93:98:53:4e:f0:74:1d:a5:dd:11:7d:08:3b:2a:
47:7f:51:53:6a:f6:1b:18:d2:75:d1:5a:a9:18:4e:
48:27:56:e0:29:85:54:b8:96:1c:36:4e:aa:e0:89:
bf:69:0c:8d:ed:b1:a6:30:ca:da:55:f3:5c:47:41:
11:7c:97:5f:ad:9a:a2:e7:37:32:57:79:c2:b8:58:
37:23:ae:06:f1:af:dc:96:4e:ab:dc:27:d8:ec:42:
0a:22:00:42:7f:7a:e2:2f:66:fd:8c:85:8e:d8:a3:
6a:6f:90:76:d5:15:9a:d6:aa:54:d1:92:d9:2e:ef:
60:35:b4:76:bc:c3:e4:ed:68:4d:c6:ed:0a:44:92:
6c:fa:a9:83:44:ed:bc:3b:c5:dc:99:b0:e1:6d:67:
d1:91:96:5c:5d:02:08:27:96:3f:9f:1d:ae:a7:97:
7b:e6:30:b2:6a:00:d3:82:6a:79:9f:33:bf:1d:5d:
08:8c:2e:fa:57:ad:32:6d:b5:7b:98:fd:32:0e:26:
57:fc:98:ae:3e:cd:f8:22:88:1c:d5:89:f5:6f:e8:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:70:CA:C6:E9:E4:A1:A8:09:A4:06:51:37:EC:D4:CA:B3:82:E0:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/1HDKxunkoagJpAZRN-zUyrOC4No.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39565
Signature Algorithm: sha256WithRSAEncryption
93:14:b7:4d:11:5d:23:98:9f:84:09:5e:ae:17:e7:04:fa:a2:
c7:7a:8c:ee:65:6d:1c:5f:39:c4:24:4e:80:dc:f4:5e:b3:8c:
77:2c:b7:3c:a1:15:43:41:a4:22:be:ec:da:3d:00:5c:42:b2:
9b:ac:23:82:46:b5:21:37:3b:a7:81:83:f5:1e:37:58:65:5b:
dc:fb:d1:91:02:cc:03:b2:83:e0:e2:ee:b4:b0:5f:b1:20:79:
dd:a7:da:ba:11:b4:75:d6:98:45:9c:b8:15:64:ae:b0:22:a6:
41:b8:5b:95:0b:a2:d9:c2:dd:21:66:31:22:6e:bb:ff:27:21:
9e:35:1b:10:80:bd:c9:2b:bb:87:3f:d8:cc:01:8d:67:fb:2e:
c8:18:84:45:b7:41:39:05:bd:e5:f9:22:a2:ad:4b:e8:26:35:
75:8a:e8:a0:de:dd:cb:97:5d:79:d9:fc:35:15:73:1e:71:5a:
ee:d3:5a:c7:cc:cc:45:fd:f9:2f:38:50:36:2f:62:ec:e0:26:
c3:03:62:38:30:95:98:73:b3:8c:e0:1f:e1:b9:0e:e8:ae:69:
d3:06:56:e2:ad:17:2c:0a:c9:ee:6f:5e:9a:3f:b3:3b:95:d9:
55:19:8a:a9:de:27:3c:a3:58:a3:f6:9a:94:ec:62:6d:57:b7:
38:66:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:31 2025 by rpki-client