Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TiW2dLRaT5nrVpiRo8d9E6MI_u4.cer
File: TiW2dLRaT5nrVpiRo8d9E6MI_u4.cer (raw, json)
Hash identifier: iiKcMTjvCk8mvjmMSw3lWynP29M4R8ur09G9kj/Cv+s=
Subject key identifier: 4E:25:B6:74:B4:5A:4F:99:EB:56:98:91:A3:C7:7D:13:A3:08:FE:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC60630C4F872A7D8DF8CCF723589B0B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/13/4E25B674B45A4F99EB569891A3C77D13A308FEEE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/13/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 17:15:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203105
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:06:30:c4:f8:72:a7:d8:df:8c:cf:72:35:89:b0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:15:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e25b674b45a4f99eb569891a3c77d13a308feee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:ce:89:cb:8a:67:49:08:a3:bf:67:ea:fe:
24:b7:00:bc:c5:ee:b5:67:59:4f:4b:5e:eb:3e:d0:
9c:8a:b0:71:cd:fe:3b:c6:0f:d0:1a:2c:52:05:48:
7e:98:29:5e:b4:34:a2:f2:9f:77:f0:e0:84:fa:78:
09:12:f6:3c:74:ae:a1:b1:f0:a1:92:6e:61:9c:36:
d7:ba:22:73:55:8e:05:a1:14:4a:3c:e2:e4:88:f2:
20:c4:da:cd:92:9a:59:c0:b5:99:10:20:84:49:91:
5d:8a:16:93:b4:17:7b:75:e0:c6:b0:8e:e3:13:7b:
e9:63:10:83:96:81:9e:5b:ca:fa:ee:dd:b6:2e:c3:
d6:21:01:d0:f6:2d:00:f0:7f:bb:f1:10:d7:02:8b:
0d:28:2c:32:29:c6:6b:5e:38:c6:ef:40:bb:6f:41:
98:4d:0b:58:8c:a0:31:bd:db:24:af:6f:cf:06:5c:
69:80:50:0b:1d:7e:e6:91:8f:d6:3f:83:3d:40:d6:
3d:2d:7a:4c:b1:8b:60:59:02:57:e8:de:93:86:7f:
0f:55:f3:20:76:9c:57:f8:55:c1:58:32:ed:e5:fb:
2b:7f:9f:19:91:bf:7a:d8:96:f3:31:fe:06:d2:99:
28:cb:31:2f:0a:ec:77:60:7a:13:2b:2b:da:2c:22:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:B6:74:B4:5A:4F:99:EB:56:98:91:A3:C7:7D:13:A3:08:FE:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/13/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/13/4E25B674B45A4F99EB569891A3C77D13A308FEEE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203105
Signature Algorithm: sha256WithRSAEncryption
17:0b:59:5f:a1:c2:68:af:68:1c:1f:e6:9e:02:36:4a:26:11:
f1:9c:18:3f:5a:7d:bd:0c:87:5d:3c:e0:5a:4c:5b:16:12:ad:
e3:74:f5:b0:0b:c1:d7:41:23:66:05:0b:2b:16:59:36:52:13:
d6:d0:45:a6:6a:af:f0:01:8e:01:28:8e:55:58:6d:d3:d3:60:
d3:aa:44:5e:d7:c8:64:1e:ec:e7:62:e7:3b:a7:d7:ba:5b:fb:
f2:89:08:15:a8:cd:0d:e7:58:dd:4a:24:e1:ff:8d:27:0b:a5:
7c:ec:bb:20:1f:9a:a3:7e:e7:2b:9e:7c:3c:2d:60:31:e4:50:
7a:c7:6e:09:6c:35:e7:9c:09:70:3b:08:62:64:2e:43:8e:0b:
e0:17:1c:5d:cc:0b:86:27:d7:41:3d:a4:cf:2a:74:ec:8d:ff:
1c:31:e9:ab:2c:f4:70:49:d4:d5:a5:52:ba:de:09:7c:dc:4c:
1a:e9:5b:9e:c3:f7:5b:84:dc:cb:60:e3:1d:06:7a:d5:7d:5e:
c8:61:5c:95:2d:14:e6:24:7f:7f:6d:c9:90:36:08:d4:f7:24:
d2:31:17:93:5e:e6:70:ef:3a:11:1b:bd:54:0d:f5:3f:43:d5:
12:9a:ab:4f:0d:ce:99:2e:ec:83:3f:a4:e4:6a:36:1b:e1:5c:
35:48:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:24:14 2025 by rpki-client