Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TNY4kUJKHyVpTrr03vCZmA57Rfg.cer
File: TNY4kUJKHyVpTrr03vCZmA57Rfg.cer (raw, json)
Hash identifier: Gbp7ZyMct/2iRykrvZi7I16R3YsZjdRoAbO98GBxpcQ=
Subject key identifier: 4C:D6:38:91:42:4A:1F:25:69:4E:BA:F4:DE:F0:99:98:0E:7B:45:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C2B6D34DF0EA3750CC597735597FBCC66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3ce88ebe-fa95-43f6-940a-a9acaa20d159/0/4CD63891424A1F25694EBAF4DEF099980E7B45F8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3ce88ebe-fa95-43f6-940a-a9acaa20d159/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 02 Dec 2023 16:47:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 197438
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:6d:34:df:0e:a3:75:0c:c5:97:73:55:97:fb:cc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 2 16:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cd63891424a1f25694ebaf4def099980e7b45f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:5a:30:bf:f4:22:d3:da:0f:f9:a2:a4:79:
4b:9f:b4:f3:f2:dd:5f:03:da:07:12:16:11:cb:4c:
5d:c9:1e:0a:f0:e6:b4:9d:ca:f7:c9:21:e0:8a:bc:
4e:4e:1c:03:f1:d3:9b:87:c9:ab:63:bd:11:d5:d6:
a3:bd:b1:80:58:eb:4b:f5:19:e5:d7:df:4d:d3:77:
64:17:38:ef:30:a3:fa:cb:0b:31:5d:70:70:21:82:
42:5c:3c:27:e8:91:f9:de:eb:da:c4:fd:85:9b:4e:
c6:21:65:c6:83:61:16:79:8f:2f:e9:b5:11:43:1b:
15:1d:12:db:9d:a2:81:69:fd:8e:2a:7d:c4:eb:6e:
96:60:be:38:2a:87:a4:f5:f2:c0:86:6e:bf:76:63:
bf:3b:0e:43:37:05:1d:1c:6c:d6:de:bc:44:b7:b5:
12:d5:e2:ce:a4:79:7a:9f:f7:70:bc:c0:d5:ad:7a:
5d:da:4b:cd:d1:7e:a8:ec:0a:fb:38:ab:59:3d:87:
18:3e:b7:7a:2a:8a:4a:96:f1:ed:c9:25:e4:f6:5e:
43:6f:60:d3:8f:a1:9e:b5:a7:57:c1:a2:9a:1a:a4:
a8:73:bb:90:36:03:bd:a3:32:81:ed:f5:f7:35:9f:
dd:cb:a8:f5:24:64:c7:c2:48:21:a0:d5:e3:fe:65:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D6:38:91:42:4A:1F:25:69:4E:BA:F4:DE:F0:99:98:0E:7B:45:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ce88ebe-fa95-43f6-940a-a9acaa20d159/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3ce88ebe-fa95-43f6-940a-a9acaa20d159/0/4CD63891424A1F25694EBAF4DEF099980E7B45F8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197438
Signature Algorithm: sha256WithRSAEncryption
a3:a3:19:a8:d5:4a:6b:ac:b1:06:34:62:4f:46:59:5b:47:16:
99:9a:23:45:52:e2:f0:03:62:0b:f2:72:7e:cb:45:16:89:a3:
ab:56:e3:56:10:f7:6b:e1:a4:53:51:a4:93:b2:0a:d1:8b:66:
ed:1d:2a:03:9b:df:0d:c6:c5:8b:55:c9:5d:ec:45:07:29:c6:
12:cc:c5:b1:ff:58:70:c7:1f:84:b8:4e:ee:a4:db:7c:a0:b3:
00:d6:e0:af:e0:14:42:82:19:1a:00:f1:7a:1f:4a:f2:d5:d6:
32:8c:61:80:5b:e5:15:5e:9f:ad:49:00:49:26:53:7a:10:ac:
13:af:30:f6:5e:4f:04:55:90:5d:f1:d1:13:32:c1:5e:ca:6e:
4d:a2:a8:08:86:f6:90:23:8a:40:8d:7b:29:86:e8:df:aa:6f:
c4:95:33:bb:b1:18:ac:c0:d0:8f:c0:9d:a2:1e:d7:e3:68:da:
6d:a7:89:99:d8:d7:99:8b:cd:54:f4:10:8c:bf:ae:d0:0a:81:
b8:84:6b:ab:36:c6:5b:92:6f:34:ac:a1:7d:d5:ac:54:3a:fc:
a4:d9:71:5e:a8:22:a8:3b:ea:dc:66:9f:86:b5:71:d0:e8:aa:
53:34:d2:95:08:04:d8:cc:c8:27:52:f3:2a:3c:30:a9:9a:53:
e8:85:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:15 2025 by rpki-client