Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
File: Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer (raw, json)
Hash identifier: ErNqJvfb9DpyzmxmuLY2gkGRxFvPzb+ZOihKSWNc2yw=
Subject key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FD622674072A0F0FED57986CE8B75F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:08:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200242
IP: 2a14:6f40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:d6:22:67:40:72:a0:f0:fe:d5:79:86:ce:8b:75:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:08:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:41:20:03:57:9c:b8:c4:ae:f5:44:d0:d1:
41:93:93:9f:10:0b:d7:d6:d7:fb:ea:0d:54:69:ef:
65:c7:12:5e:f9:86:1a:e1:60:80:4f:49:fa:70:0c:
ba:e6:7d:0b:e5:9b:6e:16:e9:77:d1:a2:c0:31:3a:
3a:2e:fc:6a:bb:29:0d:cd:dc:8e:36:76:78:09:14:
56:53:9f:44:01:af:8c:89:55:0f:d2:23:bf:4c:a1:
65:4b:ad:cb:4e:18:25:90:84:a7:e2:7c:48:2d:c4:
63:8c:15:3a:ba:a5:85:de:92:14:23:8b:63:eb:8c:
dd:01:91:88:93:9d:ee:3a:47:e4:44:43:e3:9d:53:
3d:4e:00:9c:5d:ea:be:f9:f7:46:0f:5f:2d:fc:d3:
9b:cb:71:8f:20:17:41:4a:7a:8c:0f:87:9b:72:d1:
6b:80:90:db:7a:8a:53:af:4d:7a:04:c4:15:14:a5:
99:84:32:d2:73:d6:a7:f3:13:24:73:cf:97:31:9e:
de:4b:ab:40:e2:c5:40:c1:54:d8:e5:3d:7a:7a:1f:
2c:78:fa:78:be:24:76:e7:9f:93:d1:69:96:57:7d:
7c:cf:24:5d:e0:5d:65:9c:d6:33:89:7f:be:f9:46:
59:20:39:a8:c2:89:bd:98:1b:0e:f7:61:78:d4:f3:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200242
Signature Algorithm: sha256WithRSAEncryption
09:0e:f4:90:d3:52:b6:72:52:c1:aa:86:6a:6d:b2:72:36:99:
54:e3:7b:5e:6c:0f:0e:c8:e2:34:51:9d:bd:20:13:fb:55:39:
7b:d9:2a:42:09:75:fa:fa:bc:73:83:46:5e:34:43:0b:5f:5b:
f6:fe:67:f6:9a:da:6b:7f:2c:0a:c1:e6:7a:64:ba:26:1e:33:
45:2e:aa:ef:c2:39:5e:aa:10:75:43:b0:48:ac:a0:48:83:14:
98:44:eb:9e:78:38:43:a5:60:cd:e2:e6:43:54:46:f6:52:71:
82:91:d4:b3:6c:b6:8d:0d:bd:29:3a:0f:47:f4:66:1b:31:4b:
0a:2c:11:19:5c:54:e0:e8:90:08:0e:19:d9:1d:6a:d7:d3:b3:
92:ae:f7:d1:57:f5:0b:fd:d5:94:8a:98:e5:44:34:eb:82:7d:
ac:0f:bb:ac:79:44:3f:aa:b1:d4:89:a4:37:f7:9c:ab:ed:44:
25:49:52:b4:55:74:ce:89:21:01:b8:2d:a3:bb:86:7f:87:5a:
c2:c6:93:67:f9:d4:f1:a1:e9:64:e5:6b:8b:f5:f1:b5:b4:89:
e0:da:01:19:d5:31:93:3f:ed:72:5c:ad:72:fe:13:d6:6d:ee:
ee:4c:ed:e0:78:f0:4d:40:54:14:62:4b:0e:e8:79:e2:50:9e:
28:c6:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:25:11 2025 by rpki-client