Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lOK642IEBXdJFjF8Z5I3fuxOGWw.cer
File: lOK642IEBXdJFjF8Z5I3fuxOGWw.cer (raw, json)
Hash identifier: s8CmcBPu2lLBeOV6SB6jAeKQXNFIEx4CKO5U6rrZQTA=
Subject key identifier: 94:E2:BA:E3:62:04:05:77:49:16:31:7C:67:92:37:7E:EC:4E:19:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B2E42D3F28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/lOK642IEBXdJFjF8Z5I3fuxOGWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jun 2022 16:00:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212177
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768332349224 (0xb2e42d3f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 7 16:00:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94e2bae3620405774916317c6792377eec4e196c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0a:92:08:14:37:d0:a7:0c:c8:e2:97:15:c1:
5a:c0:99:9a:5b:8a:ca:95:75:49:59:4d:d3:98:0f:
4b:49:6e:e1:4e:2c:b2:5d:a2:45:a4:d0:2b:e7:e3:
26:19:96:c0:1d:4a:28:3d:58:ff:de:f0:8f:55:cb:
d1:2b:4c:83:65:5c:ba:0b:6c:f8:30:ca:5f:3b:1e:
64:61:57:c4:63:c7:0d:cc:10:bb:f9:59:10:e5:0a:
8e:0e:81:67:d2:e7:58:1a:ca:00:10:7f:f0:29:a8:
96:dd:84:5c:50:a8:50:82:66:3a:24:fb:86:bf:76:
28:a2:08:5b:c1:1d:ac:09:06:c4:e0:93:4e:63:63:
14:c0:01:25:58:9d:45:2b:bd:a4:f4:09:7a:49:ff:
88:34:b4:a0:32:91:47:a3:5f:70:c3:86:e2:35:d5:
33:3a:fa:df:c5:b1:88:27:f2:de:31:14:9c:7e:88:
d1:d5:37:cc:a5:cf:fe:d3:dd:0f:2e:b8:51:4b:16:
d5:92:64:1d:99:46:de:9d:db:e3:ba:8d:d1:8a:59:
0c:99:d2:9f:0d:59:6a:38:7d:e5:30:3c:ca:0a:f1:
80:d6:f6:bc:fa:86:dc:56:3d:1e:9c:3c:8f:65:d1:
14:47:75:65:c3:b0:02:71:94:02:06:fe:ec:7a:38:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:BA:E3:62:04:05:77:49:16:31:7C:67:92:37:7E:EC:4E:19:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/lOK642IEBXdJFjF8Z5I3fuxOGWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212177
Signature Algorithm: sha256WithRSAEncryption
23:44:84:8d:1a:5b:4f:88:a7:57:84:ca:21:75:99:8c:e5:e7:
f1:e4:90:ce:40:80:54:66:f8:b1:f1:1f:02:18:1f:e4:67:4b:
e7:90:9a:24:19:f6:7c:69:79:74:88:b5:64:00:b6:00:cb:be:
57:55:e9:eb:a3:7e:40:42:34:c7:46:04:d4:a6:f7:1f:81:51:
70:e2:2d:7c:35:07:8f:dc:78:7a:06:c5:3c:6a:8b:84:95:3d:
a8:5b:e6:67:a3:97:08:9c:5b:5e:0a:d0:49:3e:f8:48:fc:99:
aa:37:d3:2f:b3:94:14:67:7b:fe:8f:a4:91:97:9d:75:53:48:
83:b7:bb:f3:79:97:76:99:2c:f1:74:dc:17:f2:69:da:8d:d2:
5b:0b:62:01:fc:90:f9:fe:69:98:0c:fc:38:89:5d:17:32:a8:
de:48:47:f3:82:95:ae:5c:b3:21:a4:3b:03:52:cd:dd:06:77:
c0:16:e2:72:47:80:1d:d8:08:4d:ae:ef:ce:14:76:b7:9d:72:
f6:11:c5:c8:23:be:15:ca:fe:5d:47:2d:2b:24:98:c8:0f:5d:
39:de:7b:4e:56:52:c7:ee:24:3e:3e:5c:50:91:37:d6:c7:55:
a9:2c:f6:6d:39:cb:c7:e6:24:26:e5:86:90:0f:cf:11:5e:90:
90:58:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:05 2025 by rpki-client