Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ao7S-HEhcGSQZouk69xHpRrTsUs.cer
File: ao7S-HEhcGSQZouk69xHpRrTsUs.cer (raw, json)
Hash identifier: c4y29LBBfpsura6LeV7kDmzBw2XRqSMk76gZ8AVeMXk=
Subject key identifier: 6A:8E:D2:F8:71:21:70:64:90:66:8B:A4:EB:DC:47:A5:1A:D3:B1:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184ECEF38C5B279DBB3DE1E6421AA783152
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/cd6783-f0f4-426d-b8e0-048214ae4d31/1/ao7S-HEhcGSQZouk69xHpRrTsUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/cd6783-f0f4-426d-b8e0-048214ae4d31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Dec 2022 14:13:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 209889
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:ef:38:c5:b2:79:db:b3:de:1e:64:21:aa:78:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 7 14:13:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a8ed2f87121706490668ba4ebdc47a51ad3b14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:d7:e6:93:55:d9:8b:9a:69:5e:a3:a2:37:
33:b6:7e:20:95:7a:89:8e:ef:1a:69:c2:66:43:ea:
f4:5c:2e:59:25:0e:11:3b:63:21:24:1c:c5:6b:b2:
47:2a:8a:81:12:26:86:c8:5b:9e:62:5d:fc:55:4a:
5f:38:12:5c:41:6f:f6:4e:d4:4b:59:23:b4:75:19:
0d:3c:b6:74:ff:e0:b1:53:c6:74:7e:0c:99:06:f9:
ab:ba:a6:b2:c3:cb:4e:05:67:a9:65:a4:72:c4:00:
67:d0:9f:e5:0f:a3:b1:1b:94:0f:a5:3f:ee:6b:ce:
8a:b6:6d:f7:10:2b:cf:6c:5f:d8:7b:1c:46:eb:5d:
36:69:29:1e:ec:5c:a5:7e:0c:1f:14:f6:9b:99:c2:
6f:79:72:89:f6:23:93:2d:74:33:c9:62:17:c7:df:
b9:ab:e3:30:ca:98:0a:67:c0:fe:dc:0a:cc:2e:cd:
7f:01:69:c4:fb:f6:f4:36:0f:8c:5d:d2:b8:cd:4c:
bd:f7:e4:18:99:3e:97:18:ee:ed:c3:9a:89:c4:b5:
72:a4:bd:55:1d:06:ae:ad:aa:d2:16:ca:f1:60:95:
65:21:50:d1:0d:95:8d:a5:a5:d3:23:ce:c4:34:4e:
bc:39:86:48:62:12:21:45:33:89:05:3d:4c:14:80:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:D2:F8:71:21:70:64:90:66:8B:A4:EB:DC:47:A5:1A:D3:B1:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/cd6783-f0f4-426d-b8e0-048214ae4d31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/cd6783-f0f4-426d-b8e0-048214ae4d31/1/ao7S-HEhcGSQZouk69xHpRrTsUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209889
Signature Algorithm: sha256WithRSAEncryption
11:77:2f:4b:a0:64:16:c3:d4:0f:bc:41:d8:83:d9:2e:e7:67:
83:6f:cf:cf:b0:b0:ec:3b:52:0b:85:04:59:3c:ea:02:2a:38:
49:32:b5:6e:f3:a3:27:fe:8b:35:b2:4b:3e:80:70:7a:e4:11:
3c:7c:3f:44:8e:54:d5:05:2d:07:ad:58:22:a0:89:9b:54:e0:
67:31:08:3f:20:ce:5d:8b:2e:a1:b2:c1:04:ba:01:d4:45:8d:
ff:8f:91:d5:19:e9:45:44:4f:59:a6:48:16:f3:94:88:02:ac:
20:e8:ff:83:5c:04:9d:e9:50:43:af:aa:23:67:26:ef:46:0b:
f3:d5:89:23:d5:7a:45:55:b9:14:f2:56:ee:49:ae:84:28:38:
01:36:d7:53:a2:8c:e4:86:b8:72:a4:05:8f:0d:2d:5f:e8:1b:
8d:8d:df:22:36:1d:37:b9:8b:1a:02:3f:57:af:c7:05:ad:14:
ac:62:3c:40:3c:b7:c1:7f:5d:72:5a:a3:63:f8:38:c9:92:c4:
e8:81:97:95:5e:72:27:91:18:df:71:c0:39:25:a1:13:07:22:
8c:78:8b:79:88:34:66:75:44:a7:19:ae:1c:1a:5e:c8:f3:dd:
e9:bb:0a:1f:64:d0:41:67:dd:31:16:2a:7e:58:1f:2f:43:ab:
51:bd:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:23 2025 by rpki-client