Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XnftadvP53fI4ldeow1Uba1torc.cer
File: XnftadvP53fI4ldeow1Uba1torc.cer (raw, json)
Hash identifier: lOIqJenhB5lbnsi2Av/fJoJf4Qx47Iu+MZqwUGZ7nmk=
Subject key identifier: 5E:77:ED:69:DB:CF:E7:77:C8:E2:57:5E:A3:0D:54:6D:AD:6D:A2:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01917A1C3A50E40A40549655B0BECD4E31D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 22 Aug 2024 12:42:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214510
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:1c:3a:50:e4:0a:40:54:96:55:b0:be:cd:4e:31:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 22 12:42:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e77ed69dbcfe777c8e2575ea30d546dad6da2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:74:9a:c2:f4:c0:ce:53:aa:9c:9a:39:09:
72:a8:f0:75:91:88:26:18:29:ed:34:fe:ac:bc:f1:
6c:67:f9:79:66:5a:a9:97:af:c2:21:aa:8c:20:21:
a7:69:53:50:68:4c:24:e5:0f:8b:90:e8:4a:6e:9a:
91:43:00:e9:42:bb:60:b2:44:5e:f7:78:8d:a9:f1:
39:97:1e:4d:72:86:33:05:f7:a2:91:95:45:da:2d:
4e:b4:df:d8:7a:5b:1e:a8:d1:c1:a8:9b:c9:b0:50:
d9:1f:7d:b2:07:60:bd:24:f3:c9:cb:5d:a2:48:be:
02:8e:47:f9:8d:19:a4:5d:47:1b:23:84:43:fd:75:
dc:b4:a5:e3:44:55:e3:50:c8:04:cc:74:5f:32:c3:
4c:a6:5c:fd:6f:28:d2:8b:6c:0b:90:f0:07:a4:0b:
62:ef:69:a9:da:d8:66:a6:62:00:96:9f:af:04:8f:
46:0e:d2:7b:0f:a5:0f:e4:de:d1:f5:b7:82:22:34:
ef:3d:ad:cd:57:3f:49:fc:9a:ee:e6:a0:bb:70:45:
e9:5a:ad:37:f0:c4:99:ca:ee:e8:fe:00:fc:6c:fd:
c1:fc:b5:01:4f:e9:21:ab:29:f4:12:4b:e9:78:95:
f5:35:57:5b:1b:53:a1:ce:be:6b:bb:49:87:25:13:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:ED:69:DB:CF:E7:77:C8:E2:57:5E:A3:0D:54:6D:AD:6D:A2:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214510
Signature Algorithm: sha256WithRSAEncryption
09:a2:63:85:a1:80:2c:80:a9:2e:10:08:5d:37:b5:ac:78:f3:
ba:0d:01:15:b2:c8:1a:3a:4d:bb:b8:10:aa:8c:ff:46:d9:74:
59:f8:63:15:77:e7:90:24:5b:08:17:9b:c7:27:a2:1e:7e:8f:
2a:d2:09:78:99:43:34:de:07:08:2f:af:c2:37:6f:a1:8d:9b:
dd:bc:a8:38:47:56:b7:72:55:65:f1:73:44:62:8d:71:c3:7b:
d6:4a:57:2e:46:a0:68:b2:48:9f:30:95:70:75:34:91:9b:5f:
44:f9:68:b9:e5:74:50:f2:4f:3a:55:9e:d8:57:1f:bd:04:8c:
81:78:8f:b0:6d:d3:77:de:fe:97:c1:1d:7a:62:e5:ab:1d:9f:
4a:26:e4:a7:29:a8:ee:ee:12:74:57:f6:b3:9d:ca:e2:10:7e:
e1:0e:9b:fd:6c:a4:36:37:1b:34:05:45:93:5d:dd:7d:a6:33:
18:6f:81:88:ae:bf:ed:7b:86:bf:b4:b7:86:f4:2a:cf:08:1c:
31:50:86:80:4a:26:c5:43:ea:b7:a3:ae:93:08:d8:c8:75:30:
e6:ef:86:62:6d:42:50:1d:cf:77:ec:b3:33:50:d2:c1:ce:7c:
ec:dd:0f:2c:81:86:4a:4f:aa:0a:46:38:69:51:e7:d7:97:29:
a8:1e:40:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:36 2025 by rpki-client