Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
File: Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer (raw, json)
Hash identifier: Bw4smFIaX5p8+Vc+FDNN486nFmj0atiNT146FagGKXQ=
Subject key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C70A4B58B33334645FE7C54E3F742
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214661
AS: 215355
IP: 2a14:67c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:70:a4:b5:8b:33:33:46:45:fe:7c:54:e3:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:95:06:27:db:73:d8:9b:5b:8f:42:e2:76:
89:87:cf:7b:eb:5d:64:58:f4:94:63:62:a6:22:a7:
a8:ef:d3:d1:a3:09:d0:d2:b7:7d:6a:f5:02:b3:e8:
84:3d:cc:22:e5:41:7d:28:22:f1:a4:46:65:dc:45:
31:e7:ce:34:61:85:a6:15:ea:44:e3:d5:4d:f6:7a:
5c:3c:6a:e9:3f:ba:39:06:46:e1:28:da:e4:b7:2f:
05:24:66:3f:01:aa:16:1d:94:b8:84:44:3d:b4:76:
ae:90:c3:f2:60:54:bf:be:4f:5d:de:1a:0a:6d:b2:
e4:21:24:f9:87:ce:6c:70:5e:a2:34:5d:97:9b:76:
bb:0c:80:d2:d7:0d:3a:9f:37:bf:8b:93:e0:54:82:
01:db:81:50:47:c5:eb:7a:94:bb:a3:4a:ed:30:23:
1c:15:56:02:a0:67:9e:a8:69:08:7e:19:dc:60:38:
43:85:22:d7:7c:6d:e7:f1:91:32:93:64:69:ec:ce:
65:a1:5e:83:1a:d3:e1:9f:6b:e5:02:71:b8:08:b5:
7e:64:ed:8e:24:20:3b:81:b4:70:20:ce:56:ce:b7:
3d:cf:ac:14:cd:6e:37:62:53:a4:7c:a3:e2:5a:d7:
05:a2:71:73:3d:a1:8c:52:09:17:fa:19:1e:6c:c5:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214661
215355
Signature Algorithm: sha256WithRSAEncryption
86:30:4d:f0:23:87:41:2d:91:31:1b:bc:f1:b0:7e:4b:40:0a:
35:d0:20:34:b9:e5:8d:eb:4d:61:72:79:e7:40:5d:6f:f4:c6:
9e:49:4f:4e:4c:e6:72:8c:86:aa:dc:b8:4c:66:ec:5e:5c:f7:
bb:28:d5:79:a2:67:c2:72:d5:9e:cf:a6:1d:87:e8:61:71:51:
91:0b:57:27:bc:5e:46:57:32:a6:1a:6d:a5:cc:df:1a:de:cc:
85:c7:74:18:b3:31:bf:84:71:ce:20:16:9a:67:e9:db:72:da:
49:89:5b:04:90:8c:9e:70:3f:09:70:65:02:99:b7:95:a5:b2:
90:89:30:61:03:9d:aa:8c:77:96:17:a1:73:5c:4e:e5:cc:dd:
60:a3:4b:52:77:b9:75:f8:e6:20:94:85:af:bd:2a:55:08:5b:
05:1e:e1:f7:8d:38:d2:f3:db:62:bb:9b:5b:e6:b1:b1:70:88:
47:3d:58:83:20:7e:f0:30:5e:9d:85:1c:5f:33:d7:af:18:b5:
98:e0:cc:a7:69:96:63:6f:9e:7b:90:e6:88:71:f9:8d:ce:c7:
30:52:02:02:59:88:5c:37:b0:ee:99:58:db:8d:c5:ed:29:50:
d6:ad:e6:e0:a2:df:9f:33:47:45:54:75:1c:87:8e:bf:fb:29:
7e:73:c9:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:48 2025 by rpki-client