Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
File: UDCmlphoVt51uCLWrpX-ATE4IK8.cer (raw, json)
Hash identifier: JZ0bHG1JEuDzIBQp/Ll5P1PLlXeD/Vk/ZIW9zPp5IXA=
Subject key identifier: 50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521A97C7BB5A7066A06CBCA60EC754F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205403
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a9:7c:7b:b5:a7:06:6a:06:cb:ca:60:ec:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5030a696986856de75b822d6ae95fe01313820af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:ca:f2:c1:20:a4:86:20:71:fe:00:00:e9:
bd:37:c8:f2:61:17:ab:cc:df:04:57:11:f1:c3:6f:
c9:11:e2:18:a4:8f:5d:e2:10:07:49:35:73:39:3d:
45:c1:5e:8d:9d:06:2e:74:bb:6a:a2:d3:fc:e0:e6:
5c:ee:77:cc:6e:df:e9:9c:55:e3:91:8b:43:74:d2:
2c:f1:bb:53:4b:16:f5:a3:a6:b6:f1:49:18:97:f9:
01:87:8d:18:bf:42:27:aa:b2:6b:76:35:ab:ae:15:
57:df:ef:78:a3:0d:6d:10:33:01:bd:d4:46:28:d4:
78:f6:c4:7b:60:80:15:0e:6f:28:db:88:53:8c:55:
d3:ca:5a:24:17:a2:ac:5d:fb:ea:7d:b0:44:bf:21:
9b:d2:d2:69:25:06:f6:ef:e9:5c:78:16:63:8f:83:
64:99:b9:75:4b:e8:2f:17:34:fe:e9:5a:2f:dc:a2:
50:97:f0:56:09:1a:f8:96:8a:64:03:ab:1a:29:47:
55:05:e1:cb:d5:f6:6f:1b:1b:46:d2:e0:5b:ed:9b:
ae:f4:16:1c:ca:7e:70:a7:72:5a:d6:7b:4f:0d:91:
9a:00:d1:37:3a:49:2d:2a:40:7f:62:d0:92:76:55:
2a:4f:8f:19:71:c5:1a:42:57:b4:d4:be:61:4b:52:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205403
Signature Algorithm: sha256WithRSAEncryption
af:2d:45:7b:32:58:41:c4:a3:04:aa:ff:24:dd:d6:14:4d:30:
d2:99:48:17:d2:14:a0:56:58:88:aa:2f:a6:1d:96:2b:7f:81:
1b:63:28:ef:c5:cf:68:66:bc:a7:51:75:5c:0a:79:3b:10:a0:
68:bb:e3:f2:8f:c3:3b:4e:7e:b5:bf:f6:ef:f2:2a:82:b6:ac:
4c:1a:36:b2:8a:19:ef:bf:9a:92:7f:f4:73:e1:db:b8:d7:f6:
06:b8:85:8d:bb:b2:58:b9:12:d3:4d:7a:df:71:55:a7:f6:45:
05:56:19:fd:07:c3:12:60:60:d9:32:52:f6:08:6d:8e:6a:ac:
59:be:37:98:ec:c3:7f:d2:5d:24:2f:5e:57:3b:87:96:f6:09:
28:2f:dc:3b:ea:c3:fc:c0:5c:50:8e:4b:c5:7a:be:88:f7:87:
71:80:00:56:70:2e:78:9b:a8:78:29:9a:4d:b7:17:67:51:3c:
7b:16:34:24:3b:75:e5:ee:57:f8:0a:32:57:47:b5:d8:f9:f6:
b5:d5:45:9c:33:c5:56:bc:2b:47:da:27:bc:0c:3c:0b:c0:23:
5d:79:25:6b:46:2d:ab:95:a1:15:86:0d:77:fb:59:15:04:92:
70:f9:72:df:c6:6c:7b:85:40:79:1c:84:f8:ed:d5:b4:70:49:
6a:ee:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:21:32 2025 by rpki-client