Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
File: xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer (raw, json)
Hash identifier: /X4nIACwmesMyxosLTU+ZlFuZkAul4oHzAqRyHm1vnQ=
Subject key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FB5601837B5B1D5F7769D01DB6A05ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:32:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214723
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:b5:60:18:37:b5:b1:d5:f7:76:9d:01:db:6a:05:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:32:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:5a:23:64:52:36:ab:36:87:96:2f:11:02:
7f:eb:f5:e1:05:3b:68:3e:fc:0c:4a:03:ef:3b:93:
e3:51:fb:61:59:32:70:ae:77:a6:30:02:eb:2c:e0:
cc:40:0b:20:bd:d6:6b:a5:fa:3f:cf:22:a6:17:c7:
78:78:4b:21:4d:3d:bb:23:57:95:9c:e1:02:0a:71:
c1:89:c6:6a:20:bf:bd:1c:06:52:ff:30:a8:54:25:
c7:3a:4a:6c:88:6e:95:e3:60:4d:0b:fc:b7:19:b9:
aa:6d:45:3e:cb:89:2a:39:78:c4:60:b9:3a:3b:12:
b2:18:0a:4e:3b:20:c2:04:aa:1a:a5:80:d2:44:08:
59:bd:0c:ca:21:4e:6c:38:f7:ff:b7:ea:9b:8d:3b:
0e:20:24:24:ec:f0:53:52:aa:bd:34:90:5f:cb:f1:
af:f6:be:06:59:86:9e:9e:45:51:11:7f:00:f9:75:
11:93:9f:f3:0e:25:20:f8:79:4e:1a:09:e5:7e:2b:
b0:16:9d:a0:19:b2:c0:f3:80:96:4a:51:64:1d:f7:
0a:83:4a:07:4b:fb:39:d5:67:8c:b7:03:d4:bf:e5:
99:f9:32:96:2f:9e:06:07:6f:13:f6:0f:92:10:e4:
1e:50:92:e7:b0:58:f5:06:4f:24:2f:ef:25:8a:77:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214723
Signature Algorithm: sha256WithRSAEncryption
6a:e2:ea:d9:40:be:e8:4e:8c:b3:14:7e:a4:1d:8e:04:8b:40:
69:fa:59:ac:d4:ba:1f:ce:9b:2d:ae:16:d5:97:d4:cd:1c:e2:
81:e8:ac:5c:2e:f5:8d:3e:2d:c0:0c:2b:a7:02:6d:20:de:2e:
25:fe:73:37:50:44:f2:28:b9:bc:f3:cb:ca:13:60:49:02:4c:
0c:d0:b4:08:9b:e6:9c:ba:b3:5e:c6:16:83:8e:91:34:d9:3a:
16:95:d3:3a:ea:8a:57:d5:a0:31:72:8b:5d:92:15:ee:ee:d0:
4a:04:09:2d:aa:4a:73:f8:7e:37:5e:f6:42:ce:75:10:1f:98:
83:5a:52:77:5a:28:ec:25:5a:76:3d:44:33:f8:c8:f4:80:56:
e0:e6:c5:4e:27:4a:9b:7c:bc:3f:56:c3:7e:17:a4:70:2a:b8:
e1:4b:99:54:44:2d:87:f3:9a:b2:f5:32:d4:77:71:81:14:b1:
22:b2:78:23:83:e2:df:7d:31:a1:ec:32:5e:90:20:17:fd:1d:
da:3b:da:34:22:10:2a:95:f4:a1:c3:c7:e8:82:3c:72:cc:73:
9b:a4:42:29:fb:de:94:70:54:fa:b8:ab:3f:0a:05:0e:a8:40:
c9:ee:4f:41:fc:0a:42:c0:6d:51:7f:83:05:9a:68:2c:b7:00:
d2:0e:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:53:47 2025 by rpki-client