Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d15jQRBX92l2V6cD3GX5LN5kV7o.cer
File: d15jQRBX92l2V6cD3GX5LN5kV7o.cer (raw, json)
Hash identifier: 24V1bIyxsNwhRy3nOeRrAv/dG6fAq6FaO89G4nbjDwI=
Subject key identifier: 77:5E:63:41:10:57:F7:69:76:57:A7:03:DC:65:F9:2C:DE:64:57:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195026915317A072A74C68FC761DEB1E341
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/0/775E63411057F7697657A703DC65F92CDE6457BA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 14 Feb 2025 03:03:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213430
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:02:69:15:31:7a:07:2a:74:c6:8f:c7:61:de:b1:e3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 03:03:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=775e63411057f7697657a703dc65f92cde6457ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:80:15:6c:eb:45:1b:6b:31:f6:c9:bb:e1:
c0:13:36:30:45:79:82:3e:2c:46:71:cf:22:f8:78:
70:82:53:58:b9:21:6d:40:6b:f1:fc:48:7d:d4:5d:
67:ec:4d:93:1d:74:ba:90:de:31:72:c1:14:3d:5d:
ac:3e:77:62:ed:28:1a:2b:92:e3:1d:c9:2d:52:bc:
6e:91:f9:1c:04:aa:90:b2:e8:3e:67:e6:a0:26:1b:
fd:21:2c:dc:4a:f6:ef:71:68:3c:c8:14:12:cd:56:
13:1e:9e:17:ab:9e:18:61:f7:10:c3:a2:91:86:43:
a7:a1:75:e4:a9:ff:36:27:a7:99:9e:1a:f2:7f:cc:
bc:fc:75:09:31:41:95:f1:42:14:e0:b1:90:93:59:
83:8f:6a:cc:17:16:44:68:a3:9c:2b:3e:ab:5d:9e:
0b:db:27:48:fc:9b:bd:c8:17:b3:22:05:63:77:0f:
79:6b:aa:d5:82:39:78:ab:db:c5:3f:db:97:90:a0:
b2:43:79:94:63:09:02:6b:3e:de:75:92:f7:d1:cc:
ef:0e:f9:ea:08:8f:a9:9e:1a:82:4c:11:da:d8:74:
f1:35:6f:dd:91:11:9a:7a:2f:40:10:4e:83:56:15:
cb:fa:37:b3:9b:7c:29:86:6e:a2:98:c0:9d:c1:a7:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:63:41:10:57:F7:69:76:57:A7:03:DC:65:F9:2C:DE:64:57:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/97aba9e9-eec8-495b-9e20-d6b3ccebde45/0/775E63411057F7697657A703DC65F92CDE6457BA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213430
Signature Algorithm: sha256WithRSAEncryption
8d:4d:d3:ee:f9:6e:3e:69:71:40:b0:d6:c1:e9:24:6f:26:7c:
b7:ac:4d:db:e6:c5:6d:25:7a:60:99:d1:f8:08:76:a3:4b:78:
c5:2f:96:4a:bc:5d:a9:86:19:b9:88:64:1e:4a:83:b0:4d:ca:
1f:6e:d0:99:0f:e8:5f:8a:24:f5:dc:14:ae:1f:04:e9:e1:e3:
bf:ee:f4:73:f8:af:89:b2:3e:78:4b:67:57:28:cf:f9:59:1b:
64:7a:0e:54:62:a3:6c:e7:89:f3:a4:19:fd:e4:9a:24:42:f8:
2b:4a:6b:06:70:bc:b7:b4:88:b2:3c:69:6a:1b:25:d4:5e:ad:
86:96:a0:f3:ac:d4:a0:3d:ee:37:b1:ad:f5:1c:a0:92:d1:5e:
35:b6:a9:fe:de:0c:a0:1f:4b:9e:fd:f5:80:19:52:ed:ea:ea:
78:c6:cd:9a:5b:f1:b7:f3:2a:7a:7d:39:d3:02:42:a6:24:cb:
59:54:95:49:b5:72:26:17:8b:91:bd:09:34:51:c0:5a:3b:d5:
fe:4a:7f:73:75:ed:6c:83:83:54:6c:cf:3e:c6:de:6b:9c:0f:
48:37:d0:51:57:52:c7:f5:37:b6:47:af:62:62:61:05:5d:9b:
a0:11:43:dd:4e:9a:b5:17:08:96:e0:21:df:8e:78:51:51:73:
35:2f:73:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:52 2025 by rpki-client