
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.cer (raw, json)
Hash identifier: DYZU+kK2kYWKr7K+EZmhU0VWoTfEGxLPsP7xHfkouBE=
Subject key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5F972B52A46BCDBD7ECE7E100A5A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200397
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f9:72:b5:2a:46:bc:db:d7:ec:e7:e1:00:a5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0df3344513176252a2cb690bcf705d6498111f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:06:9a:66:c7:e1:57:28:ca:a1:97:f2:6e:
f0:b2:e6:e2:c6:59:8f:c1:c6:c4:cb:24:fa:ef:57:
eb:7f:43:c2:54:6b:4b:a9:0e:b6:b6:f9:58:1a:6e:
30:d7:55:61:fe:db:14:6d:7d:79:90:ac:08:cf:a7:
fd:bb:3e:54:97:2c:c1:ea:d0:f2:19:01:13:91:d2:
31:9a:9e:45:04:6e:59:5e:48:39:fe:e7:fc:c1:70:
1f:18:b7:34:14:e6:9a:71:a4:87:b6:bd:0c:37:17:
a7:ef:e7:2f:90:c8:27:85:91:78:fb:fe:60:53:a5:
f8:ed:dc:00:30:dc:cf:d5:60:a2:05:7f:2c:d9:33:
d4:45:6a:5b:4a:0d:9c:86:8f:16:d9:ce:d9:f1:3e:
dc:50:4d:c2:9a:ae:6b:b8:40:5d:3c:08:03:95:c8:
d1:7f:31:9e:83:34:c4:cf:a7:f3:05:33:67:df:63:
9a:24:3a:f6:2a:22:4f:c3:70:6b:a6:bd:59:3c:e8:
dc:ef:a2:0d:db:10:35:76:c4:42:3d:24:c2:b3:fb:
e3:29:15:b2:71:5d:17:f4:a2:bf:cb:82:fa:34:a9:
9b:00:db:a1:19:fe:04:70:e2:b7:e4:09:5b:f2:29:
c8:95:67:84:77:63:45:c2:77:64:d1:a6:fb:f0:6a:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200397
Signature Algorithm: sha256WithRSAEncryption
41:b4:a9:d5:cb:53:9b:7d:b7:85:31:02:a5:49:3e:c5:84:db:
be:ed:14:84:d5:67:62:9a:e7:2d:47:c3:2a:da:c4:79:a6:d2:
58:d8:4f:22:f4:e5:14:79:c4:86:ad:ae:4f:9e:04:d8:ca:40:
fa:bc:f9:99:91:03:5c:ae:c1:4c:25:6f:59:4a:9e:e5:bd:b9:
67:28:8d:52:f2:7c:30:5a:1e:db:d1:3f:13:ba:d0:d9:84:78:
7e:e4:ba:e9:75:1c:a5:12:f7:d5:a2:7e:14:b1:56:aa:b6:ae:
fb:ff:5d:ab:07:dd:a9:9d:6b:02:56:b5:dd:fc:b6:82:2c:91:
2a:ed:3b:56:ce:a4:1f:ef:b0:62:d4:d2:de:8e:09:43:38:1f:
1c:01:4a:bb:91:11:45:e4:46:dd:c5:cc:78:5f:87:3d:98:58:
e9:c7:94:3f:80:73:20:f6:de:8d:48:f2:d4:b3:2e:70:97:a4:
ca:06:98:11:0c:a3:56:58:3e:58:2c:5f:fa:5d:cd:3a:e6:72:
62:29:a9:91:79:b4:a1:96:6c:75:8c:6d:d8:70:4b:a7:f5:57:
80:2f:a6:df:3d:3b:f0:50:e4:57:6e:33:5c:52:33:fc:55:4a:
9a:8a:00:a5:37:02:74:6f:b7:3b:65:37:df:28:2a:3b:94:a4:
db:9c:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net