Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XqDC_ZgF1JjhFmX5KTw2mpXGLcM.cer
File: XqDC_ZgF1JjhFmX5KTw2mpXGLcM.cer (raw, json)
Hash identifier: RHN2tfsLBpxBCVGoJ4pDT6kDNIWmW+Zw1GD5GUL5ew4=
Subject key identifier: 5E:A0:C2:FD:98:05:D4:98:E1:16:65:F9:29:3C:36:9A:95:C6:2D:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F4FBD0C4D7DAFCF780ACA9BC86B2F49F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/794dcae4-f54d-4264-a4cd-b681163af61e/0/5EA0C2FD9805D498E11665F9293C369A95C62DC3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/794dcae4-f54d-4264-a4cd-b681163af61e/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 06 May 2024 21:09:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215731
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:bd:0c:4d:7d:af:cf:78:0a:ca:9b:c8:6b:2f:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 21:09:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ea0c2fd9805d498e11665f9293c369a95c62dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:0e:39:b7:c4:12:e3:7c:7f:00:ba:f5:8f:
35:1f:7b:30:0b:01:04:75:f0:0a:ce:e7:9c:b0:1c:
ff:3e:60:43:c1:06:d6:32:58:ea:91:6c:39:a0:2a:
cd:96:04:b9:84:5b:4b:e7:97:f3:c7:68:9d:56:6a:
16:03:c9:3d:b6:05:1d:7e:48:1a:11:3c:f0:55:91:
f8:8f:f7:ce:76:20:11:3c:b7:e1:11:d5:07:af:26:
e6:ad:df:2d:53:80:ef:ef:ff:02:c0:1e:30:d1:a6:
a5:cc:7c:e6:4c:22:4d:b0:4d:9e:cf:e7:be:fc:0c:
60:a7:01:19:1c:4b:84:64:19:9b:57:86:ca:d5:dc:
32:82:26:13:5e:f6:98:a9:f5:29:60:ed:0f:75:6d:
46:bc:40:e5:e4:42:20:44:39:ca:5a:fb:bc:fd:41:
78:5e:79:38:42:6b:62:ac:5c:c4:73:a4:68:c3:59:
ca:04:44:2c:20:52:27:7c:cc:9a:fd:d4:3f:2a:67:
50:83:99:1a:da:5c:13:24:37:49:56:ad:dd:cc:5a:
7b:ec:ee:4d:b2:32:84:50:3c:b7:c6:eb:a3:07:59:
e5:9a:08:1f:ae:9d:75:55:5b:e9:30:d4:e0:29:61:
71:a9:a2:3d:d5:45:20:3d:25:e4:59:b9:8d:b6:a7:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:C2:FD:98:05:D4:98:E1:16:65:F9:29:3C:36:9A:95:C6:2D:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/794dcae4-f54d-4264-a4cd-b681163af61e/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/794dcae4-f54d-4264-a4cd-b681163af61e/0/5EA0C2FD9805D498E11665F9293C369A95C62DC3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215731
Signature Algorithm: sha256WithRSAEncryption
3d:82:ad:2a:00:87:f5:72:25:e7:19:ca:34:7f:12:74:03:7c:
d6:b3:b2:78:97:24:30:af:b0:9d:6d:b9:5a:a5:5a:6f:4b:3f:
75:9e:37:a1:91:f3:dd:26:80:1c:cd:fe:37:e7:6d:31:e0:7e:
82:14:58:eb:52:83:b1:6e:31:5e:d2:3a:ec:fa:ce:a8:1a:6c:
d4:e3:67:2c:8f:7a:47:0e:94:a1:b2:68:82:8e:c4:81:4e:35:
8c:40:8a:b1:de:dc:74:8c:9d:43:1f:b5:49:30:15:5d:1f:18:
b4:d4:8e:ee:75:6c:6f:c7:bf:6d:47:d1:1a:3c:46:6e:58:4d:
ae:40:e8:22:83:1b:10:86:fa:cf:ab:14:d6:04:46:85:05:d6:
74:2b:5a:fb:b0:55:c8:0f:ef:6b:55:f9:57:af:0a:44:2a:f5:
2e:14:6f:8c:75:c5:7e:75:c3:d2:be:3d:6e:e4:56:3f:93:31:
98:ae:b7:c6:43:b6:26:58:ee:7e:db:81:bf:cf:9c:02:c0:50:
02:e6:91:9f:b4:e2:d4:44:09:87:c9:ea:e6:eb:38:cb:c8:c8:
26:5a:5e:34:56:e5:84:2f:87:38:ea:d9:09:b9:5d:10:c2:46:
58:ed:b7:39:6d:ed:5a:31:71:01:ae:38:6d:7e:ff:ff:c1:d4:
74:90:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:57 2025 by rpki-client