Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P-bRAoFQRtKqvCC81UHzOJj_51k.cer
File: P-bRAoFQRtKqvCC81UHzOJj_51k.cer (raw, json)
Hash identifier: QRDgqK0yED1j6Idmeh6WpHSABrzLmiXjuC3CAp55ots=
Subject key identifier: 3F:E6:D1:02:81:50:46:D2:AA:BC:20:BC:D5:41:F3:38:98:FF:E7:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01896849DA448EC44E8A48FA4C6C8D669F82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/4/3FE6D102815046D2AABC20BCD541F33898FFE759.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 18 Jul 2023 09:16:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 212618
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:49:da:44:8e:c4:4e:8a:48:fa:4c:6c:8d:66:9f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 18 09:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fe6d102815046d2aabc20bcd541f33898ffe759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:77:2d:91:81:d6:85:48:1c:a7:07:19:e1:
8e:55:cd:92:be:00:cb:aa:58:fe:2a:64:25:34:64:
4f:f4:d8:a6:ee:77:60:e6:40:84:9e:ab:b3:57:60:
37:c3:bd:df:9c:8e:c7:38:bc:bb:16:a1:0c:b4:6b:
27:de:07:7b:41:ee:bd:a2:96:49:86:89:6b:2f:d0:
ce:36:3b:e8:aa:61:2f:f8:57:cd:cc:a6:3e:4d:fb:
5c:7c:c1:cb:9b:02:2c:27:55:b0:d7:96:b3:31:13:
ef:69:11:ac:84:06:56:9c:68:47:49:65:8e:d4:7b:
76:3f:d7:83:41:92:bd:1e:73:c0:82:53:7c:44:45:
18:e7:87:fc:3c:9e:59:37:97:2a:73:45:5f:a1:ce:
d5:e4:61:5f:ab:98:b6:e3:5f:68:d9:e9:f8:62:80:
da:79:7a:0a:7d:82:fb:e6:ac:24:ad:1f:e7:67:89:
64:1c:84:fe:27:52:0f:a8:4b:8f:88:c2:fb:0c:66:
7d:12:c2:06:27:8e:b3:97:f6:57:2e:73:7e:54:5b:
25:69:18:62:99:0c:88:82:e8:c7:f1:a7:07:fc:75:
14:84:6a:95:6f:aa:b6:bf:16:e7:4e:5e:c5:78:b2:
f5:e6:70:35:6a:36:03:48:cc:19:76:19:8f:03:24:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E6:D1:02:81:50:46:D2:AA:BC:20:BC:D5:41:F3:38:98:FF:E7:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/4/3FE6D102815046D2AABC20BCD541F33898FFE759.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212618
Signature Algorithm: sha256WithRSAEncryption
18:a0:ed:d9:88:46:4b:ce:92:95:51:33:af:90:7f:84:0a:d8:
9d:65:8c:6b:92:a5:7e:d2:53:e1:ef:d7:97:0d:62:4f:03:4a:
22:4a:c3:1a:a2:60:cc:d2:97:de:42:cd:de:c4:82:3e:6f:48:
5b:c0:e9:52:95:6b:1c:b3:9f:14:48:84:5b:e8:4a:1b:84:4f:
09:ec:46:36:ca:26:84:1c:e6:3e:c0:7d:9b:af:78:5f:22:0a:
d3:a7:50:a8:51:a5:a7:c7:5f:0d:91:9f:95:e7:3f:d6:bb:cc:
79:df:75:b2:63:5d:73:6c:7b:2f:35:70:0c:83:38:38:f8:43:
32:1f:e9:28:1d:29:6b:7f:3c:03:0d:81:f9:a0:c5:0a:c0:c0:
72:58:46:0c:57:9a:da:62:2d:70:f0:a0:0c:ff:57:97:1f:32:
70:98:52:bd:6f:d0:79:f3:a3:46:1e:8a:ac:5d:76:8f:3e:6d:
7e:e8:7a:87:4c:2b:03:69:6c:e2:e9:4f:86:03:27:11:ce:ea:
28:75:65:0b:0f:08:4a:8a:95:fd:9c:56:64:09:45:9e:5b:c9:
f7:0f:e6:08:9f:28:8d:52:21:b6:02:84:8e:9b:ad:e4:41:c7:
cb:ce:4b:18:8c:e9:d5:09:f1:f9:d3:5e:53:29:6f:e7:34:ad:
49:cf:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:53 2025 by rpki-client