Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NIliVBi_ikjvToLf2oHn5CfGuXU.cer
File: NIliVBi_ikjvToLf2oHn5CfGuXU.cer (raw, json)
Hash identifier: L5fVbEJj9fqeVpXZm/1SSEVSuqk+WNd+irHuyBORty8=
Subject key identifier: 34:89:62:54:18:BF:8A:48:EF:4E:82:DF:DA:81:E7:E4:27:C6:B9:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01882F7558A627D435ED0A186AF64E9AFFA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 18 May 2023 15:23:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199099
IP: 2a13:df80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:75:58:a6:27:d4:35:ed:0a:18:6a:f6:4e:9a:ff:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 18 15:23:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3489625418bf8a48ef4e82dfda81e7e427c6b975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:54:cd:4b:8f:4f:6f:8f:9b:c9:26:3c:80:
25:4c:50:7d:d1:f4:2d:33:77:66:66:95:dc:12:38:
50:03:e3:9e:ab:39:47:86:18:d5:2a:b8:cd:03:a6:
00:62:29:ca:f3:bb:87:9b:60:98:d3:25:48:ca:25:
86:b8:82:b0:af:98:3c:ad:62:cc:60:5a:3c:2f:8f:
dd:39:d9:a9:8e:aa:b2:98:15:9f:d7:1d:21:b4:f1:
24:11:87:03:6b:15:38:46:f4:ff:cb:73:9a:1c:65:
d3:5e:f2:67:48:ca:fb:21:5f:3a:19:20:40:52:e4:
8c:fa:b9:84:d5:2a:9f:45:63:86:a9:80:ad:b2:6e:
99:87:6f:5c:a1:88:d8:b1:f1:0b:8d:21:5d:27:bb:
92:21:f5:37:d0:a5:4e:8c:f8:f3:57:87:ca:27:b4:
c9:f3:a6:76:97:f5:f3:d9:8f:54:7e:39:ee:e4:0c:
5e:7c:a1:40:58:5c:d1:89:00:cd:32:61:7d:89:6a:
57:c6:b3:4d:3c:ea:41:cb:6f:3e:d1:e6:02:8c:cf:
a3:21:c7:d0:e9:ba:b0:93:8d:4a:f6:8c:14:31:aa:
af:23:8c:29:6c:e7:0f:a2:01:21:ca:a2:e4:ea:70:
ae:0f:07:f6:81:93:27:2c:15:72:cd:3a:36:09:24:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:89:62:54:18:BF:8A:48:EF:4E:82:DF:DA:81:E7:E4:27:C6:B9:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199099
Signature Algorithm: sha256WithRSAEncryption
40:b3:f7:0f:00:4b:41:4f:a8:a9:4c:5e:0e:a2:2b:54:ac:62:
ee:c2:ac:4e:74:aa:4c:72:78:d5:1b:f6:8d:2b:2d:f6:c9:aa:
5f:bf:9a:ee:ba:67:b2:8e:1c:9a:79:eb:e3:69:5b:a4:25:77:
00:f9:57:a3:f8:06:1c:a6:cd:79:35:77:c4:0c:48:40:3a:09:
ee:f2:61:d2:26:15:da:ab:2d:06:9e:75:13:a8:24:9a:39:2a:
99:42:3b:4c:a3:fa:f5:11:f2:bd:f0:13:b7:8e:a0:b6:5d:1d:
13:d3:dc:11:79:cb:e2:3a:d6:de:c3:4b:6d:c4:11:40:68:37:
83:96:1a:07:d5:af:c1:c3:6c:c7:67:08:ea:54:bf:88:cd:15:
f1:7f:61:0b:6b:fd:fb:58:52:24:24:36:80:5d:89:16:ae:66:
b0:5a:b7:41:62:74:67:be:db:a2:a4:53:60:6b:e9:ad:de:1e:
d8:f6:20:da:bf:3b:72:d0:03:37:64:24:49:68:d7:79:de:1a:
36:84:4f:f4:db:1c:b7:8d:2b:17:bb:b5:1a:7f:d8:6d:9e:9f:
a9:60:a3:7c:96:2a:32:9f:04:30:f4:ab:c6:d3:cc:48:b2:4a:
55:bc:f2:82:80:1c:02:df:be:1c:7c:2a:e4:df:02:60:e8:16:
c0:25:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:20 2025 by rpki-client