Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer
File: aqr5hWj8JO10Jf91q9XxRRAfuqM.cer (raw, json)
Hash identifier: apbTLoT16PEFDvy9pAQFm6jy4BiKPQS/Mcq8faB4aYI=
Subject key identifier: 6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FF8F08942AF0205FE88788296A3F99E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:46:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201398
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f8:f0:89:42:af:02:05:fe:88:78:82:96:a3:f9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:46:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aaaf98568fc24ed7425ff75abd5f145101fbaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:48:38:10:74:d5:b6:c8:05:39:e8:38:8c:
a3:68:e4:62:ff:20:b9:59:d2:29:64:6f:37:8c:a4:
e2:f3:f4:21:70:db:93:28:65:29:58:2e:3c:e5:74:
6c:e1:ee:c3:70:ff:f4:0f:b1:1e:6b:9c:b8:8a:83:
6e:88:31:8a:ed:9c:85:36:10:5e:de:f4:34:0d:da:
50:89:cf:c6:43:0c:f6:55:18:7b:d0:e9:5e:c0:82:
bc:81:1a:af:52:6b:3a:90:63:39:06:5f:70:97:6d:
be:3b:b4:16:d7:69:79:45:27:bb:8a:30:54:37:23:
17:92:d0:df:21:8e:02:ab:eb:09:93:98:9b:d2:43:
6a:63:d6:4c:19:42:14:d5:4e:d6:c0:b7:93:2a:2d:
70:2f:1f:43:07:8a:e6:0a:d4:63:03:39:1a:64:f4:
99:75:e9:61:ee:93:0b:a3:95:b7:31:78:4f:50:05:
31:b9:35:36:55:c4:0f:87:a7:7c:f1:09:21:a2:0e:
17:aa:7b:9d:be:97:60:07:70:7d:df:49:1e:91:ec:
99:bf:d4:9c:69:bd:82:c0:cc:4d:6e:44:e1:c7:3f:
d8:53:02:31:ba:f2:73:81:77:df:e9:85:0c:86:f8:
33:45:02:68:03:cf:d1:5c:52:69:f1:73:fe:f0:a4:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201398
Signature Algorithm: sha256WithRSAEncryption
0e:83:41:6e:0e:9a:8e:af:65:5a:52:1d:d8:f8:33:06:dc:0b:
ed:34:a0:6b:24:44:2b:3d:38:1e:08:b3:ea:d4:27:0b:44:72:
61:79:ca:b5:05:9d:81:34:36:02:16:73:67:e0:d3:47:47:be:
11:cc:26:e3:4a:1f:7f:27:ba:ba:d2:52:80:89:de:b9:36:5a:
96:8f:f3:9c:f1:d3:d1:fd:d7:83:08:0b:43:47:e8:05:98:f9:
37:c9:0f:6e:b1:5a:aa:e1:9a:76:6e:73:8a:fa:d9:86:99:dd:
8e:7d:df:2b:8b:af:77:e1:59:27:ea:fd:24:7c:d3:b9:f9:b2:
da:aa:18:0d:fd:c4:61:a3:04:01:e1:d2:ec:65:d7:ea:6c:5f:
51:c5:25:2e:9e:a8:84:ca:bb:1b:42:4f:37:14:86:54:09:96:
4d:dc:bd:eb:53:92:ae:b8:83:12:b3:57:43:56:79:bb:32:26:
2f:94:aa:c9:22:f8:2f:a2:07:6d:b3:79:70:f5:20:28:2c:44:
6e:4a:6a:ff:b3:e5:b1:3e:45:ba:fb:c0:ab:cb:ef:e3:a2:60:
b5:66:b9:1c:4e:cf:9b:1f:1e:79:fa:b5:dd:f3:cf:69:57:a4:
68:8f:7c:3a:6f:26:17:9a:9c:a7:19:6d:dd:1a:50:a9:d6:09:
52:0a:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:53 2025 by rpki-client