Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aW3TxBt37bvdN9fk0CADnUAtS4U.cer
File: aW3TxBt37bvdN9fk0CADnUAtS4U.cer (raw, json)
Hash identifier: t2WVDStQI+YpmzRyLYVeJjQI8D9khHQs+XuS1hYIvAE=
Subject key identifier: 69:6D:D3:C4:1B:77:ED:BB:DD:37:D7:E4:D0:20:03:9D:40:2D:4B:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236903CD94C4A495E71A9E264D573B5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216411
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:03:cd:94:c4:a4:95:e7:1a:9e:26:4d:57:3b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696dd3c41b77edbbdd37d7e4d020039d402d4b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:d9:77:bc:ed:7b:2e:0c:d2:bb:1c:bc:a3:
2e:a8:ee:69:fa:4d:b0:c3:99:4e:b4:03:57:27:57:
2d:e8:db:62:63:74:f7:ca:8e:92:f6:fa:f0:bc:d0:
2f:e0:b6:a2:e7:f3:a4:8e:0a:e6:fa:3a:89:a0:db:
5b:d7:d5:06:2e:d6:d7:63:6a:0b:d2:71:05:13:be:
05:e0:b8:64:44:b5:d8:27:77:72:a7:65:86:75:85:
6e:34:48:63:a4:5f:26:3d:b6:76:89:07:02:bb:66:
c1:07:15:95:59:41:c6:2d:db:da:a2:91:86:09:dc:
0a:72:f3:f5:2f:ad:a3:24:a4:7f:a4:db:cf:7a:97:
b0:c4:ab:c3:4f:6f:4f:0b:77:a3:da:81:09:c0:c7:
a6:d7:39:7f:90:6d:b2:08:b5:fb:71:7a:b8:a5:6b:
e6:f8:44:0e:8a:1b:5f:d7:57:11:5d:ba:eb:28:ce:
0b:c1:5d:8c:7c:d9:c0:c9:bf:7c:6b:5c:f6:d9:76:
20:7c:0c:e4:e0:5a:9c:10:2f:99:28:62:1b:16:76:
05:d9:2d:a7:c0:0c:91:1b:a8:42:f7:14:cc:05:d5:
10:5d:bd:62:7f:bd:a0:d5:29:0b:db:e0:32:33:e7:
f3:3c:47:19:c6:8d:f3:2b:24:57:01:57:9a:f8:e2:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6D:D3:C4:1B:77:ED:BB:DD:37:D7:E4:D0:20:03:9D:40:2D:4B:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216411
Signature Algorithm: sha256WithRSAEncryption
04:80:1d:6a:58:63:06:24:5f:e6:27:3e:f7:a3:bc:d0:2e:ab:
64:00:58:71:76:91:79:d8:88:47:ad:ae:c0:97:24:38:c3:69:
59:82:5a:73:c4:81:eb:66:3d:44:3d:f3:11:ae:00:71:34:54:
6d:4e:c9:e3:dd:03:fe:16:fb:ba:17:77:f8:20:23:90:5e:b8:
cf:e9:b2:ac:1d:06:ed:e4:db:2c:1a:32:34:13:c6:24:26:8f:
1f:bf:39:ca:1e:a5:4a:9c:f8:e9:47:be:25:48:c3:a5:4a:5f:
9c:0b:41:59:ec:9c:59:25:1c:48:b6:24:49:8d:64:99:dd:10:
73:71:da:3e:da:1d:b4:a4:45:87:04:d2:93:f6:34:15:6f:62:
f9:7f:4b:b0:1a:cb:05:51:97:c5:c0:a7:00:5f:29:de:da:59:
e2:4b:14:d1:70:a9:e3:f5:ab:26:8a:c8:33:00:a0:89:76:93:
39:26:a6:32:77:62:a2:ac:f0:0e:5f:8d:37:72:55:b1:3a:90:
78:df:99:68:ee:37:f9:34:b3:f0:c4:b0:e9:35:37:ee:9b:8d:
fb:41:02:42:29:05:bd:b8:bb:95:1f:0b:b6:57:9d:b5:9d:73:
0b:59:b2:6c:3f:72:73:e4:b4:8d:59:d1:ef:89:19:c4:2a:c0:
7d:2a:f4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:35:21 2025 by rpki-client