Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
File: uMaM2mX2aWLMuWg_FVDRTlYQego.cer (raw, json)
Hash identifier: g/BjaiRlwy6rYCs5Z50MD70uZviFaRvqDhlc+DNyFLI=
Subject key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5E6B0CD009ABDA6A5090E37C0A54A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216284
IP: 2001:67c:d1c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e6:b0:cd:00:9a:bd:a6:a5:09:0e:37:c0:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:09:b1:6e:76:e4:74:09:3a:85:8d:7b:36:
0d:24:b7:a7:71:ce:ab:bb:d9:ed:aa:dc:85:e7:ff:
d5:2c:6a:b8:a8:42:45:dd:d1:df:b9:5e:d2:95:88:
86:7a:18:bb:5e:c1:5c:1e:72:d8:88:f9:92:d2:35:
a8:eb:8c:f8:e8:87:c8:bd:d3:b8:8c:81:38:02:41:
58:f9:5f:ad:58:22:25:a6:80:30:6c:b7:c9:aa:7a:
ae:3e:bd:60:ad:8e:7c:f1:4c:9c:da:59:81:75:52:
3b:68:29:89:23:2e:f0:a9:e4:ba:30:8b:73:40:ce:
f6:72:98:b7:76:87:db:f5:a0:7c:69:2a:c4:28:cc:
12:a6:56:d7:a7:f4:cd:17:35:13:2f:96:b0:8b:1d:
69:81:d8:96:e4:4d:fd:f1:59:36:5a:2e:94:bb:37:
54:3f:3e:cf:f9:c4:b3:8d:fa:88:4a:9b:8f:88:98:
88:f7:2f:3a:78:e5:0c:78:2d:e4:8e:84:9e:52:b2:
db:72:ba:8f:af:4a:81:29:6f:56:66:70:ad:89:f8:
78:71:ff:65:de:ae:96:bf:57:27:c0:1a:37:52:6d:
47:4d:c1:6f:e6:c2:27:cd:17:3c:a2:9d:3b:fc:7d:
af:c7:7d:df:2b:ba:e3:25:a3:1a:72:46:d1:ba:d0:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d1c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216284
Signature Algorithm: sha256WithRSAEncryption
a3:05:34:fe:a2:55:0c:8f:7a:0a:2d:72:70:3a:9a:6a:ea:89:
a8:31:4e:96:74:2c:ad:a0:ee:41:ee:6c:17:4b:25:7c:8d:97:
e8:25:bb:0e:2c:4b:a4:3c:09:5e:66:01:18:ef:de:71:9d:40:
db:a2:45:fc:00:7d:0a:bf:76:bd:52:17:d5:78:c1:d3:f6:63:
c4:bd:04:cc:20:be:c3:a8:65:f2:f3:66:d9:5a:0e:ae:a8:64:
d7:43:73:b0:b3:0e:67:1e:5f:f3:bc:89:c0:f8:a9:f7:50:cb:
41:4c:c9:fd:8c:d1:d8:3c:57:b5:50:34:b4:bc:31:5a:91:26:
6c:24:9c:b0:d3:10:cc:fc:14:02:6d:26:4a:05:41:dc:c9:52:
c7:24:70:cf:34:8b:63:66:d8:6e:a5:a3:08:6a:48:b6:00:f7:
34:b8:25:00:14:b1:34:96:b4:0f:30:4e:94:87:97:d6:bc:83:
99:a2:48:4f:49:ab:b6:a9:ea:14:99:f1:48:98:b9:c6:8e:32:
8a:78:26:11:02:a9:5a:c1:45:ff:83:76:3c:34:c6:86:8a:20:
1a:a8:8c:f6:76:d6:93:f3:42:57:84:af:c6:f1:3b:a6:ee:2a:
2e:6b:c9:6f:5e:48:c6:72:47:fa:42:05:59:2d:0e:1c:79:59:
50:2d:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:16:58 2025 by rpki-client