Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QoQFxOA4ItbqG_W6xL7BPmrS1Sw.cer
File: QoQFxOA4ItbqG_W6xL7BPmrS1Sw.cer (raw, json)
Hash identifier: hTnY9d8FrLoH7UQUZ915SCfUX60B985335d0pehgOPs=
Subject key identifier: 42:84:05:C4:E0:38:22:D6:EA:1B:F5:BA:C4:BE:C1:3E:6A:D2:D5:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AD7D0389D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/9f2cd0-3e4f-44f7-8737-de500f6f2854/1/QoQFxOA4ItbqG_W6xL7BPmrS1Sw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/9f2cd0-3e4f-44f7-8737-de500f6f2854/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Feb 2022 10:54:38 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 213357
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745126726097 (0xad7d0389d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 10:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=428405c4e03822d6ea1bf5bac4bec13e6ad2d52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:43:33:38:87:d7:f5:7d:aa:d7:a6:8f:e3:
51:10:ea:7b:ad:0e:7e:40:f3:46:da:3b:f1:75:d0:
a0:c9:46:46:17:fc:81:73:29:64:5f:5e:29:13:af:
da:40:8b:98:f0:c5:2c:31:82:ba:d3:c0:11:91:67:
d0:e0:56:88:c2:cd:d4:1e:d3:1b:c6:ec:6f:70:27:
46:b9:c8:f2:7d:28:f5:1b:b5:3d:85:e8:d4:31:8f:
02:95:de:16:68:45:fd:e4:12:56:46:7c:f9:b6:ef:
17:e5:d3:a3:01:0d:7f:a0:50:ae:77:1e:57:8a:f5:
f2:b3:59:b0:08:b1:90:f5:00:55:dd:ca:4a:53:c6:
65:db:94:ea:c7:c3:97:1e:9c:be:d2:de:72:ac:b7:
08:30:da:2c:81:67:93:9a:4b:f9:f2:71:73:fa:7e:
3f:c0:db:c5:d1:b3:68:15:cc:e2:47:7c:6b:7a:6f:
a2:03:1b:32:26:c2:25:53:00:38:fc:53:11:3c:fb:
3b:41:2c:2a:22:a6:59:e5:2c:e7:89:27:c4:f8:a2:
10:1a:69:12:9f:46:29:2a:72:38:d7:c4:9b:e3:5f:
e1:76:6b:ec:46:68:c2:b6:59:62:14:d0:f6:cd:7e:
74:02:80:fc:04:c6:23:0f:61:25:44:ae:c1:4b:e7:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:05:C4:E0:38:22:D6:EA:1B:F5:BA:C4:BE:C1:3E:6A:D2:D5:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9f2cd0-3e4f-44f7-8737-de500f6f2854/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9f2cd0-3e4f-44f7-8737-de500f6f2854/1/QoQFxOA4ItbqG_W6xL7BPmrS1Sw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213357
Signature Algorithm: sha256WithRSAEncryption
20:29:40:f2:d6:2c:6e:56:f7:47:f5:e4:68:a5:0e:b3:79:b5:
8d:27:b9:41:74:31:20:48:ce:39:0a:6e:cb:40:3f:ab:61:e4:
85:41:32:9b:de:b6:24:58:2e:c0:01:24:95:07:ce:60:39:ea:
23:4e:38:8e:f4:5a:03:b6:db:75:05:51:b9:d3:37:23:1e:b0:
42:4d:7a:4e:02:35:e8:96:70:97:5b:d6:ab:c6:95:0a:90:09:
79:37:cc:32:ee:3e:be:c8:13:72:f0:49:a8:49:87:9a:db:8d:
2c:ae:2f:bf:72:ad:ba:56:25:ac:76:02:67:46:76:12:8c:9a:
1a:26:81:94:3d:c7:8b:bf:8b:d6:99:3d:a6:62:aa:f4:be:eb:
a6:26:9c:ee:b2:a7:ce:f5:00:d3:6e:1f:d3:8c:1e:67:e7:9c:
13:86:d8:61:b5:a6:43:16:25:d8:8f:77:03:f8:b6:7f:53:6f:
72:50:e0:16:65:40:63:3d:a4:33:a2:a2:de:7d:77:49:37:26:
10:1a:c9:b1:cf:4f:6d:3f:ba:9e:22:ce:e2:73:f9:fc:38:a3:
38:45:59:e8:91:33:6a:45:ef:b0:26:18:5e:b0:c4:5e:9c:75:
80:7a:a8:40:31:4a:d5:41:87:4e:44:5b:c8:23:ba:f8:16:c3:
bd:7b:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:17 2025 by rpki-client