Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.cer
File: nLQsjBNxgK4ZU7LqTr5q4b9sfh0.cer (raw, json)
Hash identifier: vsPY549OTFn+iJKxr9lppIMN0p5gQcN2UQOzpwIHVbA=
Subject key identifier: 9C:B4:2C:8C:13:71:80:AE:19:53:B2:EA:4E:BE:6A:E1:BF:6C:7E:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01830DE318977B4504BE65A4EAF1D586F4DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/9a2033-42a9-4d5c-882f-11cdfe276c35/1/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/9a2033-42a9-4d5c-882f-11cdfe276c35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 05 Sep 2022 13:42:10 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 61260
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:e3:18:97:7b:45:04:be:65:a4:ea:f1:d5:86:f4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 5 13:42:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cb42c8c137180ae1953b2ea4ebe6ae1bf6c7e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:66:6a:c3:5d:94:05:5c:e6:a0:b4:c8:56:
2b:95:c6:96:91:71:1c:ba:91:01:7c:73:1e:19:94:
a1:c5:e5:4a:cc:70:bc:c9:10:1c:f5:4c:9f:94:51:
f0:f1:87:23:08:a2:2f:94:63:8e:b8:5e:6c:6e:a0:
56:09:98:57:e4:b3:25:56:23:bf:66:5b:af:12:20:
ed:85:62:6f:0c:07:11:a6:09:1a:2f:ea:d9:f4:04:
3d:20:73:e1:0b:87:71:84:be:21:4b:f1:c9:15:53:
7b:ec:e4:e2:b0:fe:5e:0a:27:f7:cb:40:cf:89:e0:
bd:c6:64:41:77:02:5e:64:42:e4:7d:ac:17:50:20:
16:5f:40:2a:ff:53:b8:0f:6e:b4:02:b9:bb:b3:c0:
ac:d3:a7:10:7f:de:2b:80:fa:5c:23:73:96:e9:88:
f8:2e:2b:0a:cb:cd:f7:34:1f:b6:dc:d6:bc:cd:8a:
42:07:2b:64:c0:e4:40:4d:69:16:0a:97:f5:37:fe:
4f:0b:48:06:08:f1:99:91:fa:93:c3:df:b2:65:b1:
3a:8f:62:19:16:36:20:b6:64:1a:6b:fe:d9:0a:2a:
68:19:69:25:23:52:46:2f:a7:9f:cd:48:fd:78:ef:
e5:19:7b:6a:06:0a:92:f6:ed:1e:28:04:ad:bb:86:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:2C:8C:13:71:80:AE:19:53:B2:EA:4E:BE:6A:E1:BF:6C:7E:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9a2033-42a9-4d5c-882f-11cdfe276c35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9a2033-42a9-4d5c-882f-11cdfe276c35/1/nLQsjBNxgK4ZU7LqTr5q4b9sfh0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61260
Signature Algorithm: sha256WithRSAEncryption
9a:bc:95:8a:83:cd:05:cd:40:5f:75:63:61:30:af:8a:08:7d:
67:b6:b0:50:70:f2:ce:11:03:9d:3d:5b:98:f3:fb:0d:3a:a0:
c9:1e:7e:3c:b4:b6:44:73:f0:76:22:3b:c5:2d:17:c1:55:cf:
22:00:b5:a5:f1:5c:41:ee:10:77:82:bc:ab:33:27:82:33:ae:
9c:68:46:f0:3d:8d:47:7b:01:c5:16:0d:22:9b:fe:19:55:7d:
91:61:a4:b7:08:58:2a:6c:10:65:34:5a:e7:19:c5:49:c1:76:
4f:a9:c9:dd:73:c5:74:d6:f7:e3:38:2e:f3:48:b0:0f:88:33:
b7:c5:9b:b6:b4:7b:ca:d6:01:be:c9:66:21:ba:c1:ac:26:c8:
df:c5:57:97:ca:dc:92:09:32:3f:72:43:dd:77:ec:b7:c3:24:
b1:37:e7:7b:1f:5b:b0:bd:8f:d4:72:ae:3b:ee:8e:e8:1a:b0:
90:d1:26:b4:21:7f:ce:5c:66:df:8d:b0:a1:ef:ae:14:5d:4d:
ca:1a:7d:9c:27:71:36:32:8c:31:bc:1d:eb:a1:64:98:d2:b1:
31:de:1b:88:8a:44:5a:e2:2b:c8:2c:19:dc:80:ed:a4:51:d0:
8c:6a:ca:04:8e:32:39:56:79:66:0d:96:ed:e2:81:f6:12:f4:
8f:74:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:18 2025 by rpki-client