Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
File: uksi0igKF9DVTGhsm0M_C1tYAk8.cer (raw, json)
Hash identifier: jCKX488Yp/JHNHkWHKBB4+unm8SiaH9hoXBl6anue98=
Subject key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D94385AF40B47D353B129D16228A95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204087
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:43:85:af:40:b4:7d:35:3b:12:9d:16:22:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:a8:c7:b6:60:93:43:e3:44:b8:d7:a5:a7:
52:b3:37:72:ac:d9:27:d6:1c:d4:0a:53:b8:1f:c3:
94:63:fe:4e:5d:16:74:83:46:be:62:57:12:98:5b:
10:94:ed:3b:e4:1a:21:d9:62:fe:9a:b9:00:9b:bb:
59:cb:71:b5:16:3d:6c:18:dc:4c:ab:8a:c8:be:41:
ed:04:ef:13:7a:63:fb:e7:dd:57:53:f7:4f:4c:d9:
85:43:ee:93:c0:64:39:7e:ce:ae:53:3b:d5:a1:8c:
fe:e7:e5:d8:db:41:ff:3e:51:74:cb:f4:b5:04:41:
87:4d:c1:58:7f:12:35:42:4f:7e:a9:c1:8d:ac:b1:
da:ae:65:10:9f:64:76:15:44:cf:f3:b2:88:42:f0:
bb:b9:f0:7a:5c:5b:a8:7f:f2:c2:92:5f:7c:da:ae:
ec:e3:f5:39:e4:20:fa:7f:08:dd:f9:cb:f1:04:93:
9d:d6:16:b7:79:71:10:20:0f:e5:c9:df:45:44:bd:
f9:5c:c6:b2:d6:e2:56:56:43:4f:cb:3f:3c:7a:14:
aa:39:a2:7c:4f:f6:c9:b3:fc:0b:7c:82:66:6f:85:
93:e4:53:f9:69:7d:0f:9a:1a:12:32:09:0b:4d:7a:
97:71:52:25:d3:17:64:1b:e1:90:fe:2c:a5:60:4f:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204087
Signature Algorithm: sha256WithRSAEncryption
81:a4:76:3e:96:c7:8f:e4:1e:82:63:60:23:e2:ce:2a:cd:bd:
50:c2:48:db:1e:c1:4d:9b:fa:30:2e:43:e9:da:8a:a9:24:6a:
93:ce:11:77:88:7a:9e:36:7c:1a:36:91:28:ca:e5:74:8e:94:
15:9f:71:c1:56:13:36:c9:bb:b6:32:f6:7b:e7:cd:1a:91:bc:
7c:ae:99:e1:b7:40:0b:cf:98:e7:e5:a7:40:94:89:0f:0f:39:
5d:7f:93:44:9b:9b:02:80:48:01:c9:ae:73:4f:31:a4:f4:b7:
ba:40:1d:26:f0:db:78:ae:87:72:71:ae:bc:e7:2a:31:5f:52:
99:c2:55:6c:49:1f:fd:51:d7:de:81:68:8a:84:7e:14:35:67:
4b:f6:1f:13:6e:cb:46:d0:09:da:15:b0:96:7d:8c:b6:9a:be:
3c:42:b4:65:e6:fb:94:e9:35:9e:2e:60:c0:0f:e0:fd:a2:54:
15:83:d0:cb:bf:28:c4:5c:5d:17:a5:ab:e9:97:40:01:ac:c0:
e2:a1:e4:22:48:78:47:27:9b:48:87:15:b8:ff:92:3a:ff:b3:
90:8e:3d:b0:69:0b:62:04:01:fa:cb:9c:86:40:f2:cf:23:0e:
a1:e1:a9:e7:01:e4:f6:de:43:87:da:f2:36:4b:25:b3:ef:38:
36:9f:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:39:54 2025 by rpki-client