Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9aqlHJBNxjxo0loBr4iA0D2Gl5I.cer
File: 9aqlHJBNxjxo0loBr4iA0D2Gl5I.cer (raw, json)
Hash identifier: kZlTdchw+OcGYxNsg2yPtqy36Zln2iSTTWeANVxIg9c=
Subject key identifier: F5:AA:A5:1C:90:4D:C6:3C:68:D2:5A:01:AF:88:80:D0:3D:86:97:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DE94E86FE520D388C138EB868B4AB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/287f51-6470-43cf-9781-2bf701636627/1/9aqlHJBNxjxo0loBr4iA0D2Gl5I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/287f51-6470-43cf-9781-2bf701636627/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41019
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:94:e8:6f:e5:20:d3:88:c1:38:eb:86:8b:4a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5aaa51c904dc63c68d25a01af8880d03d869792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:0c:47:f0:fc:59:ea:3b:ad:bf:41:ee:c0:
c6:d2:75:b0:f9:c5:47:81:8d:c0:22:e1:c1:6b:78:
0c:04:e6:b4:78:98:30:96:71:40:c5:a1:43:93:00:
db:1f:a7:13:37:49:04:a0:19:e1:27:61:47:65:d6:
97:f5:f9:f1:f2:b5:20:ff:03:6f:b7:0c:6a:a0:72:
06:b2:ba:b6:e0:cd:6c:b6:25:43:39:10:56:38:b0:
88:31:96:bf:aa:d2:b9:64:ad:a6:fe:49:a6:4e:02:
9d:b3:80:b9:ae:41:f8:4a:eb:46:24:8b:32:27:7b:
1f:e7:f2:91:ad:66:e8:69:f5:fc:04:d6:49:90:93:
60:c9:be:26:3a:c3:cd:92:7c:40:1d:16:22:0d:a2:
ce:63:00:11:46:c5:cf:15:1a:03:e6:01:33:3c:81:
86:b1:e8:95:b5:d5:4f:cb:02:86:f8:00:d1:51:97:
2f:08:ca:5c:d5:f1:eb:c5:8e:9b:fd:df:ef:41:ab:
e7:32:c9:37:10:3f:35:18:45:f7:0e:c1:1c:72:0c:
64:3c:1a:4e:73:35:67:6d:03:79:3e:7b:05:15:e1:
3d:76:d2:d0:12:24:98:7d:82:b8:3e:c6:cc:58:f7:
67:6a:9a:47:b9:af:f7:8b:24:75:92:21:d6:c2:56:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:A5:1C:90:4D:C6:3C:68:D2:5A:01:AF:88:80:D0:3D:86:97:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/287f51-6470-43cf-9781-2bf701636627/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/287f51-6470-43cf-9781-2bf701636627/1/9aqlHJBNxjxo0loBr4iA0D2Gl5I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41019
Signature Algorithm: sha256WithRSAEncryption
32:fc:7c:f8:7e:23:a6:e3:01:2e:9b:74:9a:d8:27:b6:50:2a:
f9:a7:c3:e3:99:bb:45:36:49:fa:57:c7:97:6f:b0:17:cc:f9:
35:91:93:47:b3:8b:eb:37:4f:c8:dd:ea:4e:1d:63:19:d2:c7:
df:c8:d3:32:f7:55:85:67:cc:f8:e4:eb:a1:90:08:c6:0e:eb:
b5:da:81:79:39:a3:c4:4d:cd:1f:65:0e:00:c2:2c:b8:dc:11:
93:d5:25:8c:18:9d:fd:cd:4a:df:31:6c:d3:87:aa:e6:66:82:
ee:31:fe:44:de:28:01:6d:53:f1:2b:de:b3:c9:f8:65:ff:b1:
b2:65:65:3d:ef:46:65:d2:4a:a3:3f:d6:84:d1:52:42:9b:54:
c6:be:ea:33:74:7c:23:fb:38:95:f0:4f:87:8d:aa:26:ea:15:
28:62:6b:87:d4:32:0c:40:e2:23:1f:2a:47:df:a2:1b:4b:f1:
36:3b:17:99:d8:3d:45:22:37:18:f3:6d:da:1c:66:7b:6e:6e:
6a:76:17:54:c6:a2:52:6b:b7:54:88:a1:2c:10:61:ed:c7:6c:
1b:ab:2d:d2:f7:b5:15:50:34:8f:bd:4b:ff:ba:b7:74:87:a0:
fd:f4:cd:eb:97:8f:a9:26:30:ef:35:a1:c5:ba:24:f5:1d:9d:
5c:48:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:52 2025 by rpki-client