Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1RKC4miU56jI7u-rzBPhtV68NA0.cer
File: 1RKC4miU56jI7u-rzBPhtV68NA0.cer (raw, json)
Hash identifier: i+Gn1Kj/w4k99xg6bJcFu+5KjT1akbBJG3HXwiXZP+k=
Subject key identifier: D5:12:82:E2:68:94:E7:A8:C8:EE:EF:AB:CC:13:E1:B5:5E:BC:34:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01892538F04D4EDE3F3E52D86051CAE481B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9be59809-983c-4b75-a3a4-ecb36a44e906/0/D51282E26894E7A8C8EEEFABCC13E1B55EBC340D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9be59809-983c-4b75-a3a4-ecb36a44e906/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 05 Jul 2023 08:43:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60900
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:38:f0:4d:4e:de:3f:3e:52:d8:60:51:ca:e4:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 5 08:43:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d51282e26894e7a8c8eeefabcc13e1b55ebc340d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:15:fa:de:2e:a2:cc:4f:5f:31:16:d6:0f:
d6:ac:f6:3e:23:48:29:fd:25:18:de:86:e4:95:13:
15:a5:4f:c1:f9:b6:f5:31:03:cd:bb:ee:e0:c9:f3:
34:4c:5e:77:59:3d:66:c5:0f:1b:26:ec:f1:46:c5:
0d:d5:6b:5f:e0:3a:95:03:a6:22:53:12:ab:91:21:
da:bc:ac:cd:39:5e:21:ec:e1:2b:27:79:a4:76:e9:
79:17:fd:0c:df:d4:88:28:a4:68:5b:c9:43:5c:b3:
10:b7:75:64:ad:ea:31:b8:66:ae:cd:4f:fe:62:44:
c2:06:27:8a:48:8c:ee:e9:da:99:b0:fd:de:07:10:
e5:63:c6:9b:0b:8c:a2:13:ea:3f:59:ab:9b:11:d5:
07:75:26:ed:21:be:1a:89:b7:c1:c3:97:f0:64:f4:
04:94:64:85:94:12:f7:83:f9:23:ee:de:69:b8:da:
b0:ed:e6:aa:aa:08:f2:16:de:fe:32:09:bf:0d:40:
11:b1:ac:a6:4d:47:33:a8:b9:d4:4a:22:48:3f:73:
c0:90:62:72:f2:f0:e1:3f:ec:40:a2:47:2c:6d:48:
2c:75:9e:48:68:ce:93:be:7d:86:fe:fc:92:49:cd:
78:25:58:f8:ec:d3:16:f7:97:ad:81:2f:c0:87:9c:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:82:E2:68:94:E7:A8:C8:EE:EF:AB:CC:13:E1:B5:5E:BC:34:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9be59809-983c-4b75-a3a4-ecb36a44e906/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9be59809-983c-4b75-a3a4-ecb36a44e906/0/D51282E26894E7A8C8EEEFABCC13E1B55EBC340D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60900
Signature Algorithm: sha256WithRSAEncryption
09:1a:db:ce:93:44:85:b6:a3:bb:58:d9:57:24:5e:74:b9:63:
57:c2:d1:1d:b8:c5:c3:1e:32:7f:e0:71:eb:8a:37:b3:17:37:
d0:43:c6:89:07:e8:36:1a:57:a0:65:7c:88:bb:78:af:9e:7c:
c4:71:02:bf:05:e4:ea:3b:53:d8:c3:45:a7:d3:9f:d6:16:e0:
f9:b2:46:c9:c3:40:a8:f3:e2:66:d6:a8:8e:19:9c:6c:81:5f:
74:ab:27:fe:86:3c:93:b5:e3:ee:be:71:2e:78:2c:f4:12:44:
ae:d9:4a:bc:fb:4b:a8:6f:7d:da:b5:45:83:38:79:25:2c:bf:
ab:09:10:b0:91:9c:68:a9:22:37:d7:c1:0d:5c:12:47:a8:08:
ec:ab:5e:12:9f:d2:1c:e8:bb:ad:d0:b3:56:26:81:3d:c1:ca:
40:b8:55:4a:86:31:22:cd:ae:2d:74:86:7b:78:61:6d:25:4d:
6f:02:9d:f4:d2:6f:d5:6c:1a:b6:5c:c7:af:09:20:99:28:ed:
7d:7a:6c:fc:96:7a:0a:bb:74:48:46:d2:9c:3b:b6:65:50:12:
26:b8:83:59:ea:a9:90:77:5e:c0:17:80:76:93:e7:c2:35:66:
b8:09:04:3f:db:18:20:ca:e3:1f:0e:59:f0:ca:79:d7:41:bc:
0b:6b:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:16:15 2025 by rpki-client