Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
File: VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer (raw, json)
Hash identifier: /KOhYXmG6c7KkSp779L93CiWGH3uybNcZsO9qnVtYnQ=
Subject key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD648EA4B0CC0E75CDF11891F54C10
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60638
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:64:8e:a4:b0:cc:0e:75:cd:f1:18:91:f5:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=541678c37a1f9334314feea58325ea7940af0f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:fc:20:25:af:c4:15:f5:3a:3c:c8:0e:d8:
2d:03:4f:f0:62:22:df:9a:f3:7a:b4:97:70:d8:40:
7f:b0:f8:62:2d:ca:85:18:0a:7d:ba:22:eb:96:76:
c9:f5:9a:c3:ec:99:5c:fb:c5:ab:50:cf:9f:1f:fa:
64:83:de:4e:3a:f4:db:aa:55:75:bc:67:5e:94:e0:
c1:5f:eb:6e:93:73:c5:14:c0:ea:91:4b:f8:2d:d6:
ec:98:9f:74:83:c1:5d:df:23:0d:93:23:73:b6:dc:
70:ec:ae:bc:5b:4c:ba:1b:4e:a7:b0:20:a5:8c:1c:
43:32:25:d7:fd:b5:22:55:59:ec:6a:9f:8e:84:30:
56:94:32:a4:15:b5:a5:df:5b:19:4d:cd:b3:63:00:
69:00:81:5b:5b:86:65:45:92:e0:d0:59:f4:14:9c:
b6:6a:b3:18:36:05:64:5a:ee:f6:ba:be:6e:43:5f:
29:ab:33:8b:f8:48:de:5f:12:72:c5:64:18:87:5b:
ff:59:b9:a6:a0:64:12:06:26:b6:4e:bb:ad:15:a0:
96:ca:87:3f:0a:8e:4a:47:1b:c1:c7:72:cb:ef:bf:
23:2c:b4:30:2b:57:9d:b2:02:56:b7:21:8f:31:79:
16:70:a4:df:b8:09:2f:f3:f5:31:26:17:f0:13:f1:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60638
Signature Algorithm: sha256WithRSAEncryption
a6:a8:12:08:b2:63:e3:ee:db:93:74:7b:0d:cd:f5:44:1e:b5:
da:b6:9c:e9:af:f2:0b:eb:0f:9c:89:00:e4:67:2b:a2:32:a3:
27:1a:34:39:96:7b:d7:4e:03:06:e9:51:8f:88:cb:2e:3b:48:
dd:8d:3f:99:3c:dc:f0:3d:a0:4b:fd:2d:41:74:b9:cd:b5:be:
0e:c3:c7:21:82:f8:37:18:6a:3c:7f:ea:b1:67:e3:ce:43:db:
98:5a:a6:c6:43:87:56:12:44:b8:7e:09:74:40:7d:7c:de:ab:
74:5f:6e:4b:c9:bc:3b:e1:70:b3:e9:da:90:b4:ce:ae:ae:23:
47:7a:32:2c:72:b3:91:ed:23:83:94:bd:40:62:b8:a9:3b:8b:
63:c1:f5:4b:3c:7d:af:ce:c2:36:1c:c6:1d:28:22:07:35:bd:
02:08:0c:54:e7:70:40:ec:be:e7:fa:bf:44:3c:7d:d3:a1:cf:
94:89:97:a8:c5:95:6a:a5:b7:da:fe:3f:76:de:8a:e3:91:15:
80:01:47:ac:94:a9:a6:a0:6e:7d:b6:40:27:bf:ed:42:86:ff:
dd:99:07:82:87:d8:92:a9:32:84:3b:a0:c2:4d:ff:15:71:b8:
18:b2:2c:4a:0e:b6:75:13:b5:2c:a0:a9:5c:d5:e5:90:48:13:
d8:da:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:05 2025 by rpki-client on console.sobornost.net