Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Be-7RKK7h6NdFKcPs3daPQuuYFA.cer
File: Be-7RKK7h6NdFKcPs3daPQuuYFA.cer (raw, json)
Hash identifier: sOT1Rd1WmWjOHCh82VQPCFwD4pDmih5EijJnevntAks=
Subject key identifier: 05:EF:BB:44:A2:BB:87:A3:5D:14:A7:0F:B3:77:5A:3D:0B:AE:60:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2738BC9F99661543B0160BB20FCDD5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/15/05EFBB44A2BB87A35D14A70FB3775A3D0BAE6050.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/15/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:36:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216462
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:73:8b:c9:f9:96:61:54:3b:01:60:bb:20:fc:dd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:36:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05efbb44a2bb87a35d14a70fb3775a3d0bae6050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:3e:2c:63:b7:3a:e9:9a:d9:0c:9e:33:cb:
08:d4:07:d9:33:dc:6a:74:76:b4:18:1b:e8:31:6f:
fb:f3:48:11:f8:30:bb:4a:bd:4a:66:73:e2:48:5a:
11:65:97:95:a2:65:5f:ef:9f:d3:57:ed:57:2a:67:
e1:f3:d6:b7:12:9c:cd:cd:a2:75:fd:f3:0e:78:c7:
ba:ca:30:d3:5a:5b:9b:56:31:40:c4:c9:4b:23:ae:
c7:2c:a7:b7:82:ec:61:e2:de:bf:d1:1b:87:2f:c7:
6c:7d:5e:a1:63:ef:a9:62:65:e9:4d:29:91:44:df:
93:73:d5:70:8f:71:10:3e:e4:a9:93:86:68:00:ec:
ea:b0:5c:e8:83:f6:5e:8e:c9:8e:85:36:ff:0e:bb:
31:7b:5f:53:60:c5:ef:a0:70:ec:62:f1:31:26:45:
e9:35:e1:d0:a6:2f:e1:64:97:a8:8f:c2:a9:be:59:
65:f8:e3:32:70:12:3b:b3:d5:af:ec:76:aa:83:01:
08:15:b7:03:e7:80:9f:82:6e:df:21:13:a7:22:3d:
ca:1d:da:3b:d7:ce:54:d3:0a:c5:35:63:64:00:ce:
ee:5a:fa:3f:47:a7:c4:01:4e:a7:f1:cc:10:99:78:
5c:86:d2:25:b2:83:e4:06:c0:21:f4:cf:a9:a8:1c:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:BB:44:A2:BB:87:A3:5D:14:A7:0F:B3:77:5A:3D:0B:AE:60:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/15
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/15/05EFBB44A2BB87A35D14A70FB3775A3D0BAE6050.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216462
Signature Algorithm: sha256WithRSAEncryption
a4:eb:e6:88:2f:80:12:3f:4b:c5:41:24:7d:b7:a0:d8:f0:d1:
cf:d6:88:f6:f4:e5:fc:39:9e:7b:87:01:53:57:b1:92:38:bc:
6c:e9:45:a9:21:23:cd:85:aa:03:fe:89:1d:ec:f9:87:cb:a8:
7d:ff:63:1d:04:ef:8c:e3:ca:0c:b3:af:27:14:74:e8:c7:00:
19:44:3f:b0:c8:6c:ff:04:ff:47:cc:d0:68:a0:2f:56:69:52:
e3:86:5e:ae:27:0d:87:da:71:f1:b0:1f:15:d5:70:02:56:c8:
d3:bf:ce:88:68:a1:50:ae:dc:35:ee:72:08:85:b2:a3:ca:61:
a0:69:4d:65:df:8a:25:c9:d5:5b:a0:58:f7:69:71:e4:75:ad:
c9:0c:7b:d5:d8:01:d7:dd:8b:84:55:96:51:62:c3:c3:f3:91:
05:02:2f:43:89:ee:78:7f:ca:19:ea:f8:c2:d4:61:4e:e4:d6:
f4:3e:d5:8d:73:c7:ad:4d:93:ba:d8:0b:a4:55:5a:11:b8:e1:
2a:d2:5e:97:87:d1:c6:87:5d:9e:a7:72:37:1b:a7:bb:45:6c:
69:f6:84:c1:c4:52:62:9b:9e:50:3a:18:be:1d:14:ae:d6:ff:
4d:b5:a6:74:2a:1d:b0:66:f7:5a:f0:f2:e7:f4:91:a9:b4:e8:
aa:6c:77:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:17 2025 by rpki-client