Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oDJ15N8C_dq2UydH8YdfLeew2rY.cer
File: oDJ15N8C_dq2UydH8YdfLeew2rY.cer (raw, json)
Hash identifier: EXYULhXr4kb6/yhZu5LlZ3xn49Cgi0i7u5p8wZG6QFg=
Subject key identifier: A0:32:75:E4:DF:02:FD:DA:B6:53:27:47:F1:87:5F:2D:E7:B0:DA:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B740AC2C4D895354CE41B2B16EEB21
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/044a77-443b-41a4-a59f-e3af94d1b5d7/1/oDJ15N8C_dq2UydH8YdfLeew2rY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/044a77-443b-41a4-a59f-e3af94d1b5d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211877
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:40:ac:2c:4d:89:53:54:ce:41:b2:b1:6e:eb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a03275e4df02fddab6532747f1875f2de7b0dab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:e8:7f:3b:83:d5:c8:b5:d3:f6:2f:0f:de:
3d:bf:be:95:8f:01:58:e4:f5:04:aa:9d:3c:48:6e:
9e:a5:ef:28:ec:a3:bf:58:17:90:3e:ad:7e:e3:8b:
7c:bf:a0:93:69:c3:ef:df:db:93:ec:f0:b8:0c:51:
1e:3a:dd:eb:e7:57:be:31:3e:53:3d:54:de:1f:8c:
74:c0:74:c9:57:a9:09:8c:9c:07:d5:5b:02:6b:9f:
fc:fb:1e:b2:27:d7:41:a6:b8:f5:b9:dd:e1:45:3b:
68:02:1c:3a:15:68:f9:8f:5b:f8:fe:a7:67:8c:c3:
c3:f5:81:58:9c:e7:fa:cc:12:8c:e0:2b:c5:38:81:
02:0a:df:ab:5e:72:b9:2f:ae:cf:56:26:0a:44:44:
c9:9b:81:d3:3f:b5:ea:c9:59:a6:1d:e2:ea:aa:64:
a5:81:ca:7d:65:54:85:56:10:a3:9f:e1:0c:e1:58:
8e:61:79:ad:fa:3d:4a:9c:8f:bb:53:a4:bb:0d:64:
bd:b7:3f:58:79:6b:33:7e:48:2c:81:d2:ab:0f:6a:
cb:e3:1f:93:f0:cd:0a:40:f9:e7:a7:4a:f4:f9:16:
a8:77:b0:65:39:5b:c0:ba:6d:f4:f4:41:95:81:d8:
48:45:c0:af:6d:e0:43:bb:a8:db:81:ac:fb:0c:4a:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:32:75:E4:DF:02:FD:DA:B6:53:27:47:F1:87:5F:2D:E7:B0:DA:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/044a77-443b-41a4-a59f-e3af94d1b5d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/044a77-443b-41a4-a59f-e3af94d1b5d7/1/oDJ15N8C_dq2UydH8YdfLeew2rY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211877
Signature Algorithm: sha256WithRSAEncryption
53:04:18:38:ca:09:b1:46:e6:c1:7e:9f:8a:53:ad:34:b8:5b:
8c:f4:6e:9e:41:6b:00:6e:80:39:a1:0e:c0:74:4f:bb:bf:9d:
0a:2d:a7:be:64:b8:63:ec:ca:78:ca:11:6b:b9:22:c4:e5:b6:
eb:49:9c:91:e6:0c:d5:5e:03:69:62:be:5d:92:9b:ef:35:a9:
a5:e3:10:ba:10:17:8d:f4:07:a9:57:6d:80:2e:e2:19:06:14:
98:f4:02:00:70:7d:b1:32:80:97:7d:1b:02:63:74:3e:40:27:
a3:3f:e3:be:c1:40:6a:8f:2c:4a:9f:eb:27:d9:1a:10:d5:cb:
f9:ce:00:14:6b:97:ed:60:c3:dc:ef:5d:ad:16:06:be:21:70:
df:c8:96:92:0f:fc:5c:be:39:6b:12:a7:dc:4a:7c:b4:89:97:
bc:9b:0c:fe:bc:b8:fb:d2:c4:b6:df:ec:ec:d7:39:79:b9:21:
1c:14:8d:71:7f:5d:b0:64:73:2f:39:e8:1b:30:79:f2:69:63:
55:4f:96:0b:16:de:34:e9:71:7a:3c:b8:0c:db:36:0c:35:4e:
ca:3c:48:0f:57:7a:4a:bc:da:6d:e9:da:5e:cc:8c:3d:1d:f7:
30:e2:7b:74:18:cd:c9:13:4b:f4:f3:9c:ae:11:dc:fa:f6:2f:
d1:d3:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:53 2025 by rpki-client