Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
File: siZANRqyGg3HqqFfq1sRCXdxSjw.cer (raw, json)
Hash identifier: GnjFz2Ym/ANhtcFQqesCOnirUEbb2S1gWFYR0L2KB3I=
Subject key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E92041104949BF5DB6A4A353C3D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215231
IP: 2a14:2ec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e9:20:41:10:49:49:bf:5d:b6:a4:a3:53:c3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:27:3e:d2:9d:c9:a9:16:41:6e:2c:bb:6a:
ae:1a:49:cf:4d:3e:bb:7f:1a:82:da:19:9c:c5:ec:
24:28:a1:5b:68:ee:ce:ff:78:12:53:07:ce:53:12:
3a:fd:9a:6c:2d:36:84:a3:e0:fb:bc:6f:ce:e6:89:
78:2e:c5:a9:26:ba:36:11:d8:67:03:4a:2b:77:f1:
84:a5:74:eb:46:2e:63:04:77:69:fe:db:a5:e8:50:
73:5b:4a:7f:07:9b:79:03:4f:8e:20:97:93:9c:62:
c2:09:5b:44:59:9b:65:c5:30:76:52:1a:9f:17:e1:
e1:f5:98:10:84:52:7b:de:c9:1d:1e:e2:e5:e3:a4:
21:ad:5a:1a:2f:35:3e:85:c7:ef:36:7d:75:b6:00:
37:0d:ac:c6:2e:48:b2:eb:77:b6:a7:ff:b6:5b:b6:
d3:83:26:b0:08:ff:52:a4:e4:b8:c1:0c:38:78:71:
10:77:a7:6a:86:84:1f:ae:0a:f6:e0:42:41:f5:dd:
6f:f4:8e:0c:c4:d3:43:94:e8:8e:28:f0:5a:bf:05:
a2:4c:42:c2:b2:94:f0:9b:d9:b0:1c:5e:3c:f4:1c:
8c:24:7b:a3:7c:c4:fd:1e:f7:66:1a:f9:5e:83:82:
04:36:cd:c1:1b:3c:11:19:10:e8:ee:4b:85:c5:08:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215231
Signature Algorithm: sha256WithRSAEncryption
2e:55:26:35:7b:db:39:ad:90:78:5b:99:f2:e5:c8:7e:c3:ed:
a1:25:2e:73:c0:3f:ef:6a:12:1e:fb:4a:d8:39:b7:36:7e:0c:
ce:3c:2e:f8:53:f7:b3:f4:8b:18:1f:ba:8d:d4:9f:15:72:61:
6f:0e:83:a7:03:19:d5:7e:43:9f:70:86:f2:90:58:a1:b6:ee:
0f:bd:9e:1b:c6:63:5a:76:4d:5c:61:8f:d4:c4:12:4e:c0:31:
ba:26:0e:d0:2a:34:fa:fe:76:07:c3:da:a7:5f:1e:23:ac:05:
d1:0b:02:42:9d:86:2d:d0:95:8b:6e:6d:d7:a1:30:25:8b:ee:
06:27:27:79:fc:41:cb:0f:7a:5a:8f:43:df:19:11:39:8c:46:
dd:9e:3f:81:4f:63:fd:ab:93:e0:19:93:62:0a:81:b0:87:34:
48:b9:11:27:64:52:e9:d3:23:67:00:b3:08:9c:90:78:f5:37:
89:df:15:49:54:e6:65:ea:57:c0:9c:d4:16:d3:e3:cc:4e:ad:
69:4f:31:2f:6b:cc:ee:52:6a:ec:60:cc:df:d2:fb:96:96:fd:
c5:fd:98:e4:66:b0:8a:6d:71:c8:74:82:e7:22:13:c6:1b:dc:
75:d1:38:6a:3f:b7:9c:b1:7e:b9:db:06:c4:17:6b:3f:b0:ec:
2e:be:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:43:09 2025 by rpki-client