Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NqXrJDWmx_yO92P8fE6WVQeXBRM.cer
File: NqXrJDWmx_yO92P8fE6WVQeXBRM.cer (raw, json)
Hash identifier: ImnWRZfQPd95wzeIARgXLFEGb7R4siY2IhwaVEl68Pk=
Subject key identifier: 36:A5:EB:24:35:A6:C7:FC:8E:F7:63:FC:7C:4E:96:55:07:97:05:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B09226128E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/926186-99a8-4ee4-90b8-1a05cdb1cb51/1/NqXrJDWmx_yO92P8fE6WVQeXBRM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/926186-99a8-4ee4-90b8-1a05cdb1cb51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 26 Apr 2022 06:42:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43224
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758366212750 (0xb09226128e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 26 06:42:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36a5eb2435a6c7fc8ef763fc7c4e965507970513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:75:8e:01:d6:d8:a2:6d:63:29:9d:7d:33:
d1:a1:66:ca:d9:42:11:71:24:1c:8f:f5:3e:d4:1b:
de:1d:bb:1c:a0:a6:ce:79:54:17:67:a6:7a:ab:2c:
b4:87:8f:58:85:42:e1:a1:cb:db:10:0c:a1:e9:81:
58:37:8d:52:b7:ad:50:1d:7d:38:41:fc:a2:d1:7a:
4a:d6:81:13:97:d6:9d:e0:f7:7c:ad:00:29:a5:a3:
95:b8:51:96:77:c3:e7:28:4c:a7:e8:4f:a4:18:5e:
e5:2e:1d:e6:31:d1:68:91:17:d1:3d:95:5b:4b:a6:
0c:23:da:45:49:78:6a:f9:4b:0d:30:b3:40:5e:11:
7d:17:d4:b6:c2:39:dd:29:3f:63:4d:81:a4:95:74:
cb:c5:43:a3:6a:22:1f:3f:2b:ec:27:51:8c:55:a1:
6b:36:2d:04:1c:e9:8c:3a:84:e7:7e:97:22:c2:75:
05:ac:d4:3f:65:93:ed:6a:ce:1b:c0:63:f2:94:2d:
ad:8b:a2:67:dd:cd:34:70:32:50:c7:92:05:12:57:
36:29:01:2f:aa:95:8c:a9:8d:ee:ca:9d:5b:a2:64:
1e:a1:ce:dc:1d:47:e5:68:b3:31:9d:b3:ae:f7:c9:
32:d2:84:5d:37:43:29:fd:6f:7e:6b:b8:05:ff:0f:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:EB:24:35:A6:C7:FC:8E:F7:63:FC:7C:4E:96:55:07:97:05:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/926186-99a8-4ee4-90b8-1a05cdb1cb51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/926186-99a8-4ee4-90b8-1a05cdb1cb51/1/NqXrJDWmx_yO92P8fE6WVQeXBRM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43224
Signature Algorithm: sha256WithRSAEncryption
8a:1b:e7:8a:51:db:c0:b6:49:5f:5d:5b:cb:cd:50:24:f3:c8:
d0:1d:67:10:66:8d:a4:4b:c1:c7:8d:94:cf:a4:72:c6:97:6e:
3c:b1:f3:6e:6e:a8:93:fb:9a:c8:cd:8a:0d:b3:3f:ce:08:f1:
84:4f:f4:2e:f7:f4:75:f3:81:8b:b4:a1:94:24:58:a4:4b:9b:
66:e9:ad:11:15:e2:3e:03:b9:54:45:35:2e:cd:d0:e8:5d:5f:
88:19:74:9d:b4:43:80:d8:6f:ef:10:e6:7a:7c:79:2e:e2:e7:
7e:ed:5c:4f:1a:e1:bb:d7:d7:74:15:f8:01:2d:8c:1b:e0:06:
38:7b:3b:ee:28:48:ba:fd:86:20:80:33:83:01:ab:cb:98:7c:
de:53:8a:1a:e4:72:6c:33:29:f7:e9:35:36:83:a2:14:b9:7a:
31:4c:ac:a1:97:72:c8:a8:0b:93:d8:04:85:c3:34:98:31:fa:
0a:55:bf:21:f9:8f:13:8b:d4:30:25:f1:d1:34:62:28:b4:f2:
ee:fe:b9:16:dc:79:31:e5:f4:8c:fc:d0:c7:7e:21:6e:7a:71:
84:db:1e:6f:19:08:23:0b:b3:b3:cf:25:5b:00:99:60:ec:e3:
41:20:43:1a:21:7d:20:a7:38:8d:b1:05:ed:94:47:ee:a1:fd:
f1:5a:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:22 2025 by rpki-client