Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oDfTyEj_cf4HjQlJJZ2HF7tgt8k.cer
File: oDfTyEj_cf4HjQlJJZ2HF7tgt8k.cer (raw, json)
Hash identifier: V0SBWP+BsadMv22QJzDu56vWE2RS0dgeFoxm4TXjmDA=
Subject key identifier: A0:37:D3:C8:48:FF:71:FE:07:8D:09:49:25:9D:87:17:BB:60:B7:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0183127948FD9F73ACC0921CC4429205F1F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4/A037D3C848FF71FE078D0949259D8717BB60B7C9.mft
caRepository: rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 06 Sep 2022 11:04:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 211777
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:79:48:fd:9f:73:ac:c0:92:1c:c4:42:92:05:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 6 11:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a037d3c848ff71fe078d0949259d8717bb60b7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:a8:b0:fe:05:14:41:16:41:5e:4c:1b:14:
32:ca:fb:6e:c4:e1:91:56:9e:a9:8d:34:b1:2a:79:
61:08:c3:20:b9:a9:32:cd:aa:31:ce:43:ef:c4:2f:
c4:3c:95:f0:96:c2:ca:ca:dd:62:20:98:14:a7:a7:
11:c0:62:64:b4:ad:69:22:39:58:bb:74:e3:26:23:
9e:0c:34:9d:d2:db:74:a4:9a:5a:86:86:5e:9d:73:
39:dc:ae:ad:0b:47:65:6b:c9:cf:33:b6:b7:4b:a7:
5d:f4:b1:25:2d:0e:64:c6:c0:f1:35:8a:50:9d:34:
9f:d7:6e:e5:5b:e9:5f:c9:8d:ef:5b:d8:cd:d5:a7:
5e:cc:cd:56:e8:8a:67:13:07:74:0f:1c:7d:28:52:
2a:71:5c:ba:e0:24:09:7c:00:68:cb:25:dd:42:ad:
f0:2c:9b:71:29:fe:5f:c8:61:06:13:ac:cc:6e:19:
88:88:42:a7:08:a7:f9:74:ee:2a:31:39:9c:8e:1e:
33:66:de:c3:6a:07:83:f4:a6:d9:f6:51:87:68:d9:
2d:22:4a:07:4c:12:53:4e:6b:ae:b3:93:86:df:f1:
c8:77:20:2b:c1:29:b1:62:ee:d4:79:26:f7:1f:df:
c7:cb:f8:df:6c:90:d7:f9:03:6c:84:c4:ee:47:26:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:37:D3:C8:48:FF:71:FE:07:8D:09:49:25:9D:87:17:BB:60:B7:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/4/A037D3C848FF71FE078D0949259D8717BB60B7C9.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211777
Signature Algorithm: sha256WithRSAEncryption
31:e4:4c:b4:18:fe:bf:60:d3:01:fd:7d:98:11:2e:c3:b4:fd:
5d:d2:98:4f:34:4b:94:cc:eb:2a:4f:02:3a:41:b2:f4:b1:7e:
d0:d9:e4:e0:9c:2f:0a:44:b2:71:bf:34:75:82:4e:c3:99:8f:
0e:ef:16:44:82:fb:08:c9:74:75:f9:bc:b8:25:9d:22:ef:ca:
4f:e0:da:47:79:96:b1:48:92:11:6b:4b:ba:53:d0:ff:73:e7:
62:7b:97:de:17:84:4b:56:c7:6b:8a:0e:96:0a:ac:07:dc:e3:
7e:92:34:d7:63:e9:26:99:ff:84:30:3b:af:66:c2:de:3a:24:
1a:aa:20:f1:9f:91:da:e2:a3:ec:78:59:ee:51:90:fc:a4:bf:
2f:48:8e:cc:e7:a8:55:1e:43:9e:d7:7a:7c:f5:ca:bb:e1:d3:
e7:3e:30:66:59:ac:ea:4b:47:4b:c1:bc:5d:e0:dd:f3:bf:44:
99:87:f3:30:fe:ab:e6:80:a5:14:0f:c7:a0:b6:b2:a0:ca:44:
86:1f:e0:f1:1c:44:fa:d7:33:f0:b1:ea:dd:90:fe:8b:86:0d:
2a:cd:a5:cb:e8:8f:02:77:a0:16:78:67:6d:6e:df:bd:da:6e:
85:b8:af:77:13:c4:27:53:c4:7a:8b:ac:45:26:d4:91:52:b3:
97:ad:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 13:45:59 2025 by rpki-client