Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/STYtnw4aOKZgWlnKRpGyjuTY8kk.cer
File: STYtnw4aOKZgWlnKRpGyjuTY8kk.cer (raw, json)
Hash identifier: 3g6r8tPTVS0Fz33vsIFgPErG9+A1W+hFetDRDcN6CS8=
Subject key identifier: 49:36:2D:9F:0E:1A:38:A6:60:5A:59:CA:46:91:B2:8E:E4:D8:F2:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9D465E3B90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:01:27 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2f08::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675490446224 (0x9d465e3b90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49362d9f0e1a38a6605a59ca4691b28ee4d8f249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:7b:2e:08:e1:da:ba:1a:7a:38:5a:a8:01:
2b:6a:f1:da:7a:11:ee:4e:b0:87:ab:01:bb:0f:ac:
69:d3:18:a6:29:74:c4:7c:5b:45:3d:ed:ec:8e:4d:
c6:73:d7:14:3a:a2:fd:1f:30:3a:bf:e1:21:d8:f4:
9d:78:cd:bd:42:7d:ae:7f:6c:d1:db:41:fd:15:34:
bc:46:91:0e:cf:2c:74:7c:2c:d3:06:c9:e5:ba:00:
a7:3c:09:00:dd:85:39:74:fc:61:60:fb:e5:de:10:
b2:87:92:9b:31:2e:a3:84:ae:e6:29:95:b6:da:6e:
7a:12:56:09:e1:c2:56:09:2f:8b:6a:27:d6:73:d1:
1f:8f:d9:f0:64:d4:21:8f:19:9d:69:0a:30:8f:e7:
3f:28:c9:0d:a0:af:72:a5:94:a9:e5:a8:d1:ac:00:
1d:f5:aa:89:11:ae:11:ea:cb:19:45:08:ba:a1:91:
82:de:de:3d:36:42:60:59:80:db:c6:a6:2c:82:e1:
a3:f9:d3:a3:54:99:18:97:29:83:19:31:fa:14:aa:
23:7a:43:ed:b9:93:c4:5a:e9:08:7e:8f:b5:63:03:
eb:0e:a3:1a:81:e0:ad:db:e2:80:f5:63:da:b4:cd:
0e:b9:fc:26:60:83:e7:55:af:db:57:8d:bb:db:12:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:2D:9F:0E:1A:38:A6:60:5A:59:CA:46:91:B2:8E:E4:D8:F2:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f08::/48
Signature Algorithm: sha256WithRSAEncryption
86:26:0c:05:39:86:f7:17:35:4f:5f:42:f9:69:54:71:d7:87:
b4:a2:bf:56:18:b8:18:2a:dc:47:f4:be:67:ca:cf:c1:d2:ac:
c9:46:73:a9:59:e9:70:b2:0a:14:fa:41:65:a3:84:35:d3:bd:
ae:84:23:4c:a6:b4:e4:c7:b6:f7:40:09:66:7e:14:3a:1c:bc:
76:ba:a9:38:f1:b9:e2:9b:a1:ff:4e:26:13:ea:8f:a9:65:37:
6f:c5:f3:19:17:45:80:c3:f9:49:a3:9d:7b:46:30:98:9a:5b:
9b:08:2a:87:80:1e:fa:aa:ce:65:d9:e1:8f:b6:2a:da:f2:91:
4b:7e:17:b1:c9:81:96:2d:27:cd:ed:fe:7b:80:2d:b5:dc:5f:
66:48:c8:9b:1a:e4:34:d9:c2:0f:a5:d6:78:cd:c5:2e:46:c3:
87:af:b0:74:a3:b8:09:d6:46:5b:85:74:cb:44:51:52:4b:45:
7d:30:3b:f9:01:55:18:46:9f:69:ab:9d:98:8d:5f:0d:35:99:
2f:9a:c2:8d:12:db:45:d7:af:f9:f1:74:86:41:81:36:63:b9:
62:ea:ea:03:f2:5e:78:6a:45:0a:47:3d:ab:fd:b9:4e:57:f3:
62:31:1c:80:22:d0:c9:6f:92:c8:0d:80:5d:d1:c3:bd:8c:4e:
55:c3:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:08 2025 by rpki-client