Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OPTCXh3yYxfO-ePKcgBfH3vR2vY.cer
File: OPTCXh3yYxfO-ePKcgBfH3vR2vY.cer (raw, json)
Hash identifier: KW4dl8sfeNxNHX24ENRwMq5WpivDkceXX5xRtg4ATPs=
Subject key identifier: 38:F4:C2:5E:1D:F2:63:17:CE:F9:E3:CA:72:00:5F:1F:7B:D1:DA:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FA0F503B889EEDE441C73B788CBDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/OPTCXh3yYxfO-ePKcgBfH3vR2vY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207550
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a0:f5:03:b8:89:ee:de:44:1c:73:b7:88:cb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38f4c25e1df26317cef9e3ca72005f1f7bd1daf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:ec:e1:e5:d2:b7:53:7c:f9:fe:96:e0:48:
60:e6:3c:59:56:1a:a8:0c:a0:75:01:4d:1c:01:06:
d1:ba:e7:5d:52:f3:17:df:05:27:64:10:2f:57:ff:
b2:c4:ad:f5:a7:61:b2:00:c4:c0:98:bf:f7:92:30:
7c:b2:31:80:13:05:74:8f:d5:32:36:08:af:4e:e7:
b8:23:2c:d7:57:95:74:0b:a4:32:93:74:0e:72:ac:
70:cb:c8:b6:69:cb:8a:b9:f3:fc:13:88:96:3b:ee:
a5:38:c0:95:28:eb:8f:b5:f3:c4:78:9a:62:b7:54:
56:e4:5a:aa:de:38:26:43:7b:88:c3:14:fb:cd:e6:
5a:04:30:0b:ac:fb:6e:e4:29:42:5f:a2:d5:99:f8:
79:48:25:34:bf:20:1d:d4:12:c2:32:a6:84:3d:ea:
94:3f:da:26:14:37:e8:d4:67:38:54:32:0f:e7:16:
bb:bf:47:fd:9c:dc:14:0e:80:e3:eb:4f:4d:c2:fd:
b6:be:aa:44:bc:27:7e:79:e6:25:86:b5:16:38:09:
62:c8:98:87:3c:0f:e4:ca:dd:8e:3b:84:ff:d2:9c:
1c:41:57:a3:dd:c2:8c:b7:25:00:06:0c:56:45:d9:
4e:22:01:0e:e8:3e:14:2b:72:55:b1:8b:67:6a:cf:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F4:C2:5E:1D:F2:63:17:CE:F9:E3:CA:72:00:5F:1F:7B:D1:DA:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3428e7-15f9-46b4-b979-519f983c72b5/1/OPTCXh3yYxfO-ePKcgBfH3vR2vY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207550
Signature Algorithm: sha256WithRSAEncryption
34:dd:c8:b7:21:a6:39:9a:02:4a:da:53:0d:4f:b3:fc:a4:fb:
7c:01:77:56:5c:22:13:98:67:f9:99:b9:11:63:a0:50:9a:bd:
36:0c:01:df:c2:33:00:5d:67:80:36:06:22:9d:2f:a2:a6:14:
b6:18:d0:87:d9:8d:1f:b8:f2:e5:5f:75:1f:5c:7e:87:15:c4:
3b:35:7e:cc:c5:db:46:64:be:c4:80:ba:61:ee:dd:ba:30:53:
7a:da:1a:5c:fd:0c:dc:59:0c:26:10:bd:ee:3f:74:db:94:1a:
b5:3c:2b:6a:06:ce:c1:10:64:7d:49:33:44:3a:6a:7f:09:a5:
c2:36:8f:2b:e8:e1:a8:e6:5c:07:89:65:cd:b0:87:65:c2:49:
32:e1:eb:c1:29:d2:90:b2:3f:57:ae:a1:3c:9d:e8:2b:92:b5:
34:98:e4:e9:5f:3c:06:d6:1d:45:91:78:23:70:5f:5e:9f:90:
8c:65:b2:0a:3b:a5:14:d2:e3:c7:d5:7d:27:1d:7c:78:7b:9e:
4e:33:47:17:27:0d:2f:96:f3:bf:eb:ec:5f:4a:7c:96:e8:25:
36:b9:0d:9e:1a:17:0d:e8:58:18:67:68:4e:97:9f:a9:78:d2:
be:b4:c8:7d:e8:12:35:f6:86:58:a5:90:ec:26:19:f2:0b:f8:
82:2d:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:39 2025 by rpki-client