Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A2aKoHZPNrYhRejvN5RF4TqzxUI.cer
File: A2aKoHZPNrYhRejvN5RF4TqzxUI.cer (raw, json)
Hash identifier: FPu/hCNNsNlZYyUPn8547Lfx0pVRpXTocXxcI/NMlZY=
Subject key identifier: 03:66:8A:A0:76:4F:36:B6:21:45:E8:EF:37:94:45:E1:3A:B3:C5:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ADAF6436EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/A2aKoHZPNrYhRejvN5RF4TqzxUI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Feb 2022 21:07:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213327
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745971922666 (0xadaf6436ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 22 21:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03668aa0764f36b62145e8ef379445e13ab3c542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:6d:40:bc:55:36:e4:69:33:f9:52:fa:ea:
74:2f:11:a0:bb:59:9b:9d:fb:c4:e3:a6:89:b2:a5:
f6:73:2e:b9:b8:d5:42:7a:8a:d2:c6:21:eb:89:92:
49:50:be:94:5f:01:1a:9c:d3:0f:bc:52:c1:05:f3:
d8:cf:27:8b:83:26:1f:d0:14:eb:cc:c1:f6:df:1c:
43:60:16:22:83:c0:bb:6a:01:43:ef:0a:13:f6:64:
e4:32:cd:2d:fd:2b:e0:f7:a2:42:7a:fc:25:a8:7d:
b9:a5:47:91:14:57:15:5d:aa:1e:f2:89:a7:4a:a5:
32:9d:67:72:89:25:cf:a1:4b:d7:09:c2:39:d1:c4:
f1:85:61:d4:9b:4e:2d:92:e4:73:e0:be:ae:c1:34:
ca:42:51:12:4b:8e:79:2a:a7:4f:dc:33:d4:10:47:
d3:ea:03:ee:cb:f4:57:fc:e3:af:a4:2c:f3:33:ed:
a4:43:5d:c4:93:60:40:3b:0e:93:37:e0:7e:3f:4c:
c7:31:93:ed:5d:de:3d:1d:d5:4a:2f:52:33:23:a0:
83:4e:1e:70:fa:8e:c8:4e:fa:84:ca:ec:47:bb:de:
56:11:18:e9:b8:37:a2:cd:0b:13:11:1e:a3:ad:30:
ef:a5:62:f4:3f:a2:c2:1f:40:62:49:da:2b:2f:ca:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:8A:A0:76:4F:36:B6:21:45:E8:EF:37:94:45:E1:3A:B3:C5:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbc8e6-42b0-43af-987b-bfb87b103fc9/1/A2aKoHZPNrYhRejvN5RF4TqzxUI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213327
Signature Algorithm: sha256WithRSAEncryption
9f:42:72:fe:01:fb:36:ea:70:35:e2:cc:fc:71:4b:3f:d0:0a:
3a:67:9f:36:57:d3:35:0a:2d:cf:7b:67:36:b6:c4:46:c1:b9:
9f:e0:63:be:d7:b0:bf:f6:cd:af:f1:fe:02:6a:53:a3:3b:15:
43:27:74:a7:4a:f8:3a:0e:57:70:d3:23:a2:d5:d5:51:6e:e8:
6f:62:ed:97:d2:bd:92:9c:86:46:c7:67:1e:2a:23:91:da:db:
77:48:e1:01:df:7c:d8:ac:d2:74:67:dd:79:2d:f7:33:e5:05:
79:dd:56:bb:b8:ef:5c:38:a5:fd:e4:bb:c9:4f:eb:1f:b7:b9:
70:b0:4e:26:a0:23:1b:4b:da:29:9a:70:34:c3:99:ce:45:2b:
9d:6e:90:c2:cb:ca:db:07:5a:78:86:d9:32:78:ab:14:43:10:
27:09:9a:a6:c3:e4:0b:ba:a6:56:09:d8:ed:bd:e9:2b:eb:d8:
fa:b5:16:a7:8f:40:21:71:0d:ec:3e:cc:4b:12:6c:ac:d7:b2:
4b:ee:08:23:ba:9d:e2:0e:c7:b3:29:9b:89:b7:16:7b:af:bd:
22:26:8c:86:0f:f3:8c:8b:9a:94:b6:a9:8b:31:47:fb:99:b2:
c6:a3:36:98:67:33:81:89:eb:a9:35:03:56:c4:37:d7:78:ac:
bd:36:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:52 2025 by rpki-client