Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UXi9M04HQjJzWgEn_4WK_UoMMKY.cer
File: UXi9M04HQjJzWgEn_4WK_UoMMKY.cer (raw, json)
Hash identifier: A3cFhZzQK/YLch4a8q8aX4h2I8sLWRNPeXp/ZT128z4=
Subject key identifier: 51:78:BD:33:4E:07:42:32:73:5A:01:27:FF:85:8A:FD:4A:0C:30:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018708B1DF0ABB071A8EDD02F00C7AFC4FBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/b3359d-6bff-4148-bd20-089bad955210/1/UXi9M04HQjJzWgEn_4WK_UoMMKY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/b3359d-6bff-4148-bd20-089bad955210/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 22 Mar 2023 09:41:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2a01:9fc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:b1:df:0a:bb:07:1a:8e:dd:02:f0:0c:7a:fc:4f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 22 09:41:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5178bd334e074232735a0127ff858afd4a0c30a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:fa:6a:1e:78:62:78:47:41:2d:f7:47:2f:
9e:d9:27:63:b9:1e:1c:5a:2e:04:b4:4a:10:49:81:
a8:cc:50:04:c5:a8:fb:f4:06:25:6b:de:7c:7a:dd:
39:19:cb:7a:bb:c4:91:6a:57:60:6d:64:86:b9:a8:
7f:e5:06:e3:bb:f0:31:32:05:52:c9:97:04:9d:0d:
1f:58:74:b0:ac:a6:f2:7e:a7:e4:0c:66:69:bd:e7:
83:c0:b5:72:12:5f:42:4a:d4:c1:0e:48:8c:0d:f3:
e8:85:cc:48:fc:40:c0:74:00:91:24:0c:96:ad:9f:
49:61:40:35:78:56:fd:bd:d4:ba:4c:d8:70:dd:5b:
3c:4f:68:bf:64:c7:68:58:35:8e:8f:4a:c9:56:0b:
c9:dd:cb:af:39:19:5e:d9:32:24:31:b0:ea:63:9a:
29:0a:b7:73:5e:41:50:2f:c2:f0:fa:fb:38:02:c8:
72:36:8e:0e:df:20:c0:2d:de:fb:ed:d0:33:76:34:
19:20:fd:6a:b5:c2:16:3d:e9:b7:06:a5:3d:2f:97:
07:24:40:4c:f4:3b:a6:98:00:df:61:25:79:cb:68:
aa:d4:59:dd:b1:8c:b1:00:70:aa:fd:c4:7e:35:ba:
cd:ea:c8:ea:24:b8:60:ac:8c:72:14:8f:22:45:43:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:78:BD:33:4E:07:42:32:73:5A:01:27:FF:85:8A:FD:4A:0C:30:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b3359d-6bff-4148-bd20-089bad955210/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b3359d-6bff-4148-bd20-089bad955210/1/UXi9M04HQjJzWgEn_4WK_UoMMKY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:9fc0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:fe:d9:20:f2:27:54:2a:82:82:ea:e4:47:7f:6d:47:fe:81:
ff:c9:b3:e8:10:f7:6c:12:11:d3:48:93:6f:25:f5:27:92:27:
b2:02:75:c4:bd:ba:f7:e1:99:2b:30:d1:8c:6b:28:7d:9d:b5:
38:b1:17:83:9e:d3:90:13:9a:d6:f1:dd:52:1c:c7:e7:7c:37:
c4:e4:4c:14:35:94:ac:35:5e:ea:05:f1:3a:6a:c7:95:4d:0d:
0e:36:9d:d7:fd:d1:50:94:10:61:08:60:38:97:ed:16:8d:04:
dc:5f:f4:62:63:ac:05:9f:3a:af:dc:9c:a0:ae:f2:d1:6b:3b:
81:13:fa:c1:82:9e:3e:0e:69:d1:64:73:24:01:0c:b9:03:24:
f9:00:21:e1:30:1d:7b:c5:f6:d5:83:5a:9b:93:14:a2:54:47:
56:8d:41:2c:0b:3b:74:f5:91:ae:8d:1f:bd:a1:9f:8a:a7:cd:
9a:ff:dd:91:11:75:93:1d:0f:d5:13:8b:92:ed:04:ec:50:2c:
ae:bd:d9:dc:72:fb:4f:47:97:78:3b:e7:44:b2:ee:1f:dd:78:
75:4c:23:07:0a:19:b7:b2:be:f2:18:bf:bf:b6:64:6c:7e:d9:
10:c2:5f:64:a9:e5:6e:b0:aa:a5:87:26:de:d2:cf:be:65:37:
a8:c8:05:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:14 2025 by rpki-client