Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tQunRxZxIfvaBJ8lVa67YRKYK6s.cer
File: tQunRxZxIfvaBJ8lVa67YRKYK6s.cer (raw, json)
Hash identifier: FCx/i8Irgp/Gy774yTvF2IwsGXNqQ/xmR+KIS+tRjk8=
Subject key identifier: B5:0B:A7:47:16:71:21:FB:DA:04:9F:25:55:AE:BB:61:12:98:2B:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01829119A92E95218C214FA26BE05834236E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/23d162-3f6d-414b-8c05-4ded9b226e28/1/tQunRxZxIfvaBJ8lVa67YRKYK6s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/23d162-3f6d-414b-8c05-4ded9b226e28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Aug 2022 08:09:14 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 203635
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:19:a9:2e:95:21:8c:21:4f:a2:6b:e0:58:34:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 12 08:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b50ba747167121fbda049f2555aebb6112982bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:9c:08:e1:62:6f:94:66:6b:01:ea:44:6a:
e2:6b:5a:eb:a3:b1:b2:82:ad:bb:ed:2c:41:88:1f:
fe:20:23:c6:5f:ce:39:71:ab:0b:9c:25:9e:64:80:
0b:51:ae:0d:ca:a2:4d:61:ba:a9:9c:04:34:2f:d4:
ef:91:47:fd:dd:9f:d1:b4:4a:6d:36:25:5e:1c:68:
b2:db:e0:2d:69:3c:d7:57:9e:ca:19:17:7b:23:76:
0f:95:59:72:67:7b:75:f3:33:d7:ec:6d:c2:9e:76:
ef:99:a6:80:26:97:0b:37:e9:b2:b5:1d:89:d5:f6:
7c:e7:00:9d:c4:fd:37:c3:40:25:25:be:5d:53:10:
94:4a:54:30:d4:7d:85:08:03:a7:bc:e9:d9:f4:8f:
0d:f2:9a:ad:34:7b:d0:58:47:ae:3a:10:bf:af:ad:
1c:92:09:e5:c1:db:2c:d6:66:bd:f2:1e:33:5e:2b:
8a:e1:3a:68:1f:56:a3:af:b6:53:35:bc:a5:cc:59:
48:44:ae:4c:11:89:96:63:6a:73:e1:1a:69:81:ea:
ca:b6:5c:e6:4f:e8:19:be:2e:04:97:4b:a6:bd:59:
fa:71:0d:7c:49:62:aa:2a:24:4c:80:49:a3:1e:78:
f2:c5:77:c8:00:25:2d:2f:9b:b2:fb:72:34:c7:37:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:A7:47:16:71:21:FB:DA:04:9F:25:55:AE:BB:61:12:98:2B:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/23d162-3f6d-414b-8c05-4ded9b226e28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/23d162-3f6d-414b-8c05-4ded9b226e28/1/tQunRxZxIfvaBJ8lVa67YRKYK6s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203635
Signature Algorithm: sha256WithRSAEncryption
1a:5f:39:25:f4:e2:66:ed:df:04:4d:70:43:b5:0c:cf:42:ec:
1f:55:70:00:d6:01:be:b8:b4:52:d9:74:fc:0c:f1:3c:e0:5b:
b4:bf:33:ef:1e:83:81:96:5b:b4:2a:02:9e:84:ea:05:e7:c0:
8d:0a:95:77:85:11:f6:06:9a:9f:25:87:85:65:bc:15:b5:d4:
4c:9d:6b:b2:df:0c:a4:9e:cd:63:88:f9:78:2d:2a:bc:70:e9:
60:85:1b:60:a6:71:fe:80:c4:87:da:d5:28:86:81:ce:1f:2a:
5b:68:31:b8:21:d4:83:45:4e:50:ea:94:a9:c5:6f:5a:2e:2e:
c9:56:54:a1:58:37:3a:bc:d1:8e:c9:5a:cf:0f:54:2c:f6:ef:
2b:fe:a0:e6:9c:57:c5:d4:fe:9f:65:d2:9d:3d:7f:33:32:67:
62:bf:cd:3d:24:f0:49:e0:76:1c:8e:de:03:59:d8:19:23:46:
47:68:1a:5e:b8:41:1f:1e:81:b4:94:38:df:31:38:9f:38:99:
65:7d:d2:fa:10:f7:0a:2f:71:ca:57:b8:37:63:4c:ab:36:64:
87:38:a2:b6:ad:e0:21:de:25:80:f0:d9:56:29:2a:b2:9a:fb:
86:ce:ea:91:51:49:6a:62:27:df:2f:d9:8b:7a:40:31:24:88:
41:fd:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:34 2025 by rpki-client