Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
File: 4xubYpkE1DhFESeFW1L4guvhYqo.cer (raw, json)
Hash identifier: vdBg1BV6UlrXFOKaDB+cZqh+o4F7tZcKH6iULERAWH0=
Subject key identifier: E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428272BDE8579642D220C0C5B656DB54B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209362
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:2b:de:85:79:64:2d:22:0c:0c:5b:65:6d:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e31b9b629904d438451127855b52f882ebe162aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:9b:8d:c9:e8:7f:89:57:ea:8a:59:41:80:
ce:cb:56:81:02:5c:be:13:d4:e5:1f:4b:84:77:fe:
0a:1c:7e:49:05:15:86:bb:b8:67:8e:cf:67:64:a9:
bd:d6:51:15:6a:6a:ba:d2:fb:4a:0b:8b:5c:99:81:
d6:29:c9:32:51:02:de:d3:3d:83:2b:bd:f1:3b:2f:
f4:5a:9c:b1:4f:25:b4:c1:fc:fb:b5:2d:ae:ba:6b:
e2:0a:e5:03:ac:8a:2a:a5:1a:d7:bd:8c:59:35:d8:
a5:cd:2f:ab:83:ea:ff:c6:2b:c7:1d:7f:5c:b9:fc:
84:14:d8:30:f3:7e:3b:85:9b:73:75:20:f7:7b:14:
9b:50:7a:fd:f7:1e:33:ee:70:18:a9:c2:7b:f5:73:
bc:dd:cf:7e:a5:3d:5e:34:60:4c:82:36:dd:53:07:
c5:50:cf:ba:20:1c:28:18:ae:b2:a1:af:da:9e:88:
ff:4d:3d:ad:6e:fa:e2:37:dc:51:ac:11:75:2c:f2:
1b:27:54:cb:d2:1f:4d:36:2a:d2:ce:f7:09:2a:62:
ff:dd:81:d2:9a:a8:44:04:b6:cc:ab:e4:51:d8:30:
39:8c:7a:97:44:a1:a9:b6:45:42:48:42:fd:ad:b7:
f7:ed:42:57:ba:62:89:0a:b9:79:03:4e:89:3e:6b:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209362
Signature Algorithm: sha256WithRSAEncryption
65:c7:ac:ec:f8:22:c8:75:71:cd:6b:6d:47:60:3a:f1:c5:8e:
18:96:f9:e2:2b:d4:e6:80:c0:fa:7b:83:02:bf:f1:03:64:af:
98:ed:40:e0:92:8a:e2:b6:dd:c8:70:d8:5b:8f:ed:95:a8:bf:
ec:15:eb:76:0d:24:83:a3:8e:1d:9c:4c:c1:13:44:ff:38:31:
f2:94:32:95:58:0a:12:12:b3:d9:f7:e9:2a:4b:74:4c:1d:31:
ec:55:ef:41:3e:c3:6d:46:40:b0:02:5b:22:1c:c0:37:8d:9c:
cc:ef:81:28:82:24:23:25:c8:69:a3:f7:1c:10:59:ec:1b:36:
1a:d8:4f:11:7a:bd:e2:d8:5e:67:0f:b3:45:18:0c:85:47:1c:
31:5c:56:9c:77:a0:46:13:08:6c:c9:84:be:72:6c:b4:ed:ed:
2b:a1:30:1d:91:9a:25:73:21:73:54:51:53:4c:c0:89:aa:63:
d2:a4:ed:a4:d3:e7:0f:b3:7d:2d:4d:0f:e3:0c:da:ad:d2:3a:
0c:f2:53:06:2f:7e:8a:13:e2:7c:43:6b:bb:ae:81:c5:b9:7d:
18:7b:00:c5:66:22:d6:8f:0e:81:18:d8:10:58:c3:5e:79:c4:
af:71:e0:7e:bd:f8:c2:00:8c:42:a3:26:b0:1b:9e:b1:83:b9:
9d:cb:32:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:28:39 2025 by rpki-client