Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer (raw, json)
Hash identifier: sDSvFnrb1jGIRFnopF4wT2H1Js+muCpXIAoWLyIh/kI=
Subject key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D605D952EFDE3CAF81CA6FCA3B7B61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212948
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:05:d9:52:ef:de:3c:af:81:ca:6f:ca:3b:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:e8:62:8d:e7:96:42:30:47:98:cf:3f:85:
ed:b0:f1:3c:0b:d4:e9:16:f2:5c:dc:ed:b8:4c:b8:
24:c6:56:95:83:8d:30:13:84:2e:e7:32:16:ee:38:
8d:83:59:c7:d1:50:23:ba:cd:bc:0f:ca:1f:68:16:
52:07:4d:9a:1a:8d:83:3e:36:00:81:48:a3:32:03:
92:04:ac:2c:7d:2a:bb:7f:cc:00:74:82:89:88:d9:
87:cb:68:0c:d7:0e:30:3e:a5:ce:fb:43:6e:78:a2:
e6:94:6f:f5:2c:ac:77:a0:39:f1:e4:19:80:7b:cf:
b9:3a:a3:1d:04:fd:4c:bc:68:47:78:cb:0a:a3:de:
cf:9a:41:fb:41:8c:1c:d3:b8:2c:17:92:94:fc:d2:
5b:b6:d3:23:8e:b5:e6:5b:b8:8c:0a:b5:b4:b3:3e:
c2:85:78:5d:1a:28:8c:d5:09:20:b7:d6:a4:ee:61:
1b:22:58:f0:bf:f5:b2:c3:18:7e:31:fb:00:c4:64:
03:be:02:e4:e3:86:7e:b7:52:3b:f8:c4:7d:ed:cb:
26:86:2d:70:b8:53:20:68:8b:a5:aa:b6:fe:b8:d5:
48:0b:6e:44:32:a0:b1:97:01:dd:da:6e:73:bb:45:
25:ec:4a:aa:0c:1f:b9:a9:64:d0:0c:1f:27:51:6a:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212948
Signature Algorithm: sha256WithRSAEncryption
2e:44:7e:84:a3:24:1b:f6:81:03:58:bf:31:f9:c4:d3:b4:87:
be:b2:c5:33:2d:03:0d:54:df:95:74:e7:78:eb:96:16:62:5f:
36:64:43:ab:a2:1a:2c:6d:a3:d9:c6:30:89:79:70:ec:ae:35:
5f:b4:8d:36:68:94:0a:4e:11:8a:2e:4c:45:6a:67:66:25:6d:
91:bb:94:a8:fa:52:be:e0:21:28:f4:5f:36:44:6b:81:77:e6:
46:a7:ff:bb:f7:cf:2e:ef:83:44:56:d0:0f:d1:0a:10:04:79:
31:a9:f0:65:96:98:5e:24:40:df:92:73:aa:53:43:39:37:63:
7a:17:96:80:61:32:27:65:0d:06:41:a2:72:37:dc:be:14:61:
34:25:c1:c2:98:99:46:15:3b:56:64:04:d1:d8:72:b8:2b:bb:
6d:ab:04:42:be:b5:18:04:87:97:06:b7:ef:b6:00:85:58:76:
e9:47:9f:e9:b4:90:62:58:45:45:1a:78:ab:84:20:32:25:6a:
f9:92:ec:97:0f:63:30:99:79:c9:c4:8b:6c:6c:7c:a6:9e:c9:
dd:9f:2a:25:c2:09:ff:7d:c5:d2:dc:1d:e2:47:6e:a9:18:f5:
3d:e4:3b:88:61:81:be:e0:62:a9:82:da:16:1f:75:ba:e4:22:
d7:53:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net