Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
File: s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer (raw, json)
Hash identifier: GDy7ytC9gqlkn6NZthLBslP6P3IxmjTnMAi0bb5uuss=
Subject key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942071946FC82346057FC57283F7586D48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:58:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215956
IP: 2001:67c:688::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:71:94:6f:c8:23:46:05:7f:c5:72:83:f7:58:6d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:58:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:a3:9b:cd:16:b8:9a:0b:2a:78:22:59:83:
ec:0f:af:b7:56:ca:21:88:28:f8:05:5a:c7:f5:c5:
6d:fd:5d:c0:8f:a3:94:fe:24:2f:6f:e8:73:53:83:
43:ff:27:6b:84:9c:44:63:6f:6b:92:6f:2d:6c:b3:
82:ee:16:5e:67:c7:7f:7f:23:6b:de:32:51:5c:eb:
fb:14:e1:c7:eb:d9:f8:83:82:10:da:02:86:1a:55:
f9:b8:97:6c:d0:a3:66:02:46:4d:1b:14:9e:92:8a:
9b:c3:9f:2a:ec:b6:16:67:07:76:2d:51:01:f1:eb:
72:9a:d4:2c:ef:dd:1a:69:84:64:0a:3d:cc:2b:08:
f1:e4:75:4d:d8:72:b3:44:be:0c:fe:3c:ce:ce:62:
27:63:09:c5:ab:08:04:93:78:69:20:7f:10:ef:75:
8c:8c:e5:e5:5a:80:c7:3c:e1:7a:f3:24:05:c6:06:
98:f6:a0:6b:1e:ae:24:38:6a:43:a5:38:d1:f3:75:
46:c7:44:a4:07:59:69:53:59:90:34:f7:32:83:0f:
95:5e:79:77:08:06:e8:54:8b:86:69:dd:21:45:2c:
bb:9b:9d:36:d1:19:5a:eb:b1:73:49:b4:7a:64:04:
12:ba:cf:c7:19:5d:f4:40:89:18:f5:d8:59:28:dc:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:688::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215956
Signature Algorithm: sha256WithRSAEncryption
80:8d:91:fd:f8:5b:8c:dd:43:51:6d:3c:b6:20:9a:34:d9:82:
01:bd:b6:84:06:46:61:89:1c:76:93:78:9d:1b:b1:4e:a4:0c:
2a:13:61:29:b5:e0:28:cf:32:67:1e:17:30:b4:bc:57:6f:b2:
a7:b3:41:58:36:b5:2e:95:35:f8:54:bf:3f:79:f1:7d:98:70:
62:4b:07:b0:2c:98:17:12:17:17:65:72:da:8e:8b:fa:47:2b:
ac:d2:57:f6:26:ff:fb:e0:57:9d:4b:dc:5c:ca:70:3a:9d:21:
e3:01:3e:ef:b4:15:de:93:bf:73:41:ae:4e:7b:33:6b:40:b1:
2a:aa:98:d6:95:5a:33:0f:92:c2:a5:51:76:a7:c5:71:45:8b:
09:2c:30:08:c1:87:cd:c2:99:4c:ee:d5:fb:04:df:39:a2:f0:
4f:9f:fa:e6:fe:3b:e0:97:18:1d:70:70:ef:5a:3e:d8:ed:4b:
83:ca:01:46:52:96:18:a1:d6:7f:0a:c7:47:75:86:be:03:b1:
96:1d:65:39:a3:69:26:15:7c:b3:62:dd:ca:94:1c:29:f8:3a:
be:11:9b:25:9f:84:f3:ce:42:06:34:dd:b1:7a:6b:8b:1d:1e:
d6:d1:0f:cb:a0:38:e7:e0:9f:c5:31:f9:07:05:5e:3d:e5:c4:
15:8b:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:41 2025 by rpki-client