Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tK6r-xWeXQBxcN6nVus2JF3u3cI.cer
File: tK6r-xWeXQBxcN6nVus2JF3u3cI.cer (raw, json)
Hash identifier: LfJWO5yxQrWrcTxK7dVvsZIKYXp44sgzL6v/kPW0/Fw=
Subject key identifier: B4:AE:AB:FB:15:9E:5D:00:71:70:DE:A7:56:EB:36:24:5D:EE:DD:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B3DB9E3E05
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/f9bda6-5268-4ab0-a7d9-66f127391a62/1/tK6r-xWeXQBxcN6nVus2JF3u3cI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/f9bda6-5268-4ab0-a7d9-66f127391a62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 02 Jul 2022 02:29:54 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 204225
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772483726853 (0xb3db9e3e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 2 02:29:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4aeabfb159e5d007170dea756eb36245deeddc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:b3:0c:36:74:9b:e8:83:fe:b2:c9:73:e9:
ad:1f:fc:6e:72:50:67:6a:7f:04:da:13:09:3b:0d:
ef:5c:e4:ba:ce:6c:18:e9:7c:02:0a:e2:b4:7a:11:
b9:fd:c5:5d:e6:be:b2:4c:57:4b:90:69:f8:a2:55:
9a:da:fc:8d:03:3c:f3:13:54:70:6b:72:4c:aa:54:
eb:aa:49:c0:14:12:79:52:fc:11:9b:10:a6:91:84:
a5:a7:ff:79:39:66:22:7e:b0:08:b5:db:ae:cb:41:
7b:11:12:eb:14:02:42:c5:6f:98:56:c2:52:a5:60:
0a:d5:97:60:11:96:2a:87:99:60:6d:53:8f:08:fa:
7f:50:16:8d:8e:25:3d:e3:f6:50:37:b0:f6:dd:3e:
74:4a:ce:b2:b3:ee:c3:92:20:8b:94:5c:b6:bd:92:
e3:db:0b:6f:d2:7f:0f:5d:fa:fa:49:84:c3:03:34:
92:00:fb:89:87:5a:3e:d8:7d:f1:2d:4b:3c:0e:93:
fc:82:43:fa:47:b2:1b:68:fc:0a:2d:ab:db:14:61:
bb:b3:a5:67:0b:1c:8d:8f:76:93:c8:ec:01:91:2b:
4b:76:fa:10:04:45:3b:c4:b8:24:f3:ed:90:a7:bf:
c1:c6:0e:d1:a7:62:e0:e8:a2:1d:d0:9c:d3:a5:14:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AE:AB:FB:15:9E:5D:00:71:70:DE:A7:56:EB:36:24:5D:EE:DD:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/f9bda6-5268-4ab0-a7d9-66f127391a62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/f9bda6-5268-4ab0-a7d9-66f127391a62/1/tK6r-xWeXQBxcN6nVus2JF3u3cI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204225
Signature Algorithm: sha256WithRSAEncryption
2c:09:2a:eb:2e:8b:aa:07:20:00:64:0c:16:a8:6e:11:64:a4:
80:4a:4a:90:6f:0a:01:9d:36:9c:f1:67:1a:ae:ff:89:af:84:
33:6a:32:21:00:0e:88:20:b8:6f:1d:f4:4b:6a:1e:34:7a:04:
de:0d:0f:70:82:cb:0f:22:7d:03:3f:a8:21:5d:02:6e:ca:3f:
04:3c:0f:6b:7e:dc:b1:e3:b3:0e:cf:1c:fe:7b:40:a0:43:98:
51:30:d6:d7:20:d4:4f:1b:02:dc:d0:e9:63:d3:26:8e:65:78:
60:03:36:19:36:ba:04:82:ef:2f:e9:13:9c:31:7c:bd:9a:e2:
7d:72:fc:14:c8:70:76:d8:c8:95:c9:56:c5:d8:98:c8:a5:8d:
ed:82:66:41:8d:a0:57:51:97:4c:26:ca:90:d5:af:5e:2d:8c:
ee:4b:0a:02:ec:b5:e0:41:9f:50:65:eb:f3:7a:75:e3:5a:61:
57:a7:aa:f3:9c:7c:00:8e:ae:8b:77:4a:ed:fc:05:d5:89:dd:
f9:16:92:da:9d:92:09:a9:8f:27:84:c0:76:60:1a:82:84:1a:
19:6f:67:30:dc:77:d2:86:da:c3:2e:89:62:6c:4c:d9:b8:ee:
89:a7:2a:73:37:33:6a:b4:ca:b7:1c:02:97:04:c2:74:54:5d:
fb:b7:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:41 2025 by rpki-client