Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
File: Zur1u0vnZQbp7F5pTYtYUKmOciM.cer (raw, json)
Hash identifier: mKkMnOofvcwX1wEV/qxA5M9wxzKfUENCjL2EdHOmjVU=
Subject key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423691D503965EFEB730B4D55E8B6D934
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13210
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:1d:50:39:65:ef:eb:73:0b:4d:55:e8:b6:d9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:53:76:91:be:2b:39:00:02:a9:9b:56:e5:72:
6b:43:f3:39:ea:9b:2b:08:a6:c5:22:e5:1a:d5:d7:
91:dd:84:1e:d4:76:66:bd:29:2f:e7:a4:0d:20:4e:
16:42:80:43:86:a2:cf:ed:c4:41:f2:d7:c0:84:8a:
16:06:85:f3:06:6a:4d:a0:3f:b5:41:72:a9:78:1c:
29:6c:12:5c:02:e8:03:95:a9:9c:18:9d:e9:bd:10:
e1:3f:5c:9c:bf:79:90:94:a1:07:05:e2:a3:07:5e:
29:56:96:56:21:5f:6c:55:60:6e:5f:1c:07:0c:a4:
d7:b7:6a:ca:02:07:3d:04:26:8f:44:4f:05:46:41:
c5:08:55:62:d6:8b:8c:85:35:8c:14:f0:28:9e:d0:
66:24:83:0f:58:cc:cb:61:c6:e8:68:d1:a2:82:a5:
7b:3e:4f:9e:db:b9:47:55:9e:c6:f2:9c:23:f5:98:
5a:25:e0:be:be:52:a3:06:8c:90:43:7a:07:0c:39:
d6:ae:21:1b:0d:32:6a:fe:a6:fc:65:4e:0c:96:01:
1b:38:55:c4:77:70:1f:dd:cc:87:bb:ba:20:d0:ce:
26:2b:46:01:52:dd:29:57:4f:30:05:35:4e:71:47:
23:85:c4:3c:f9:c8:15:74:43:3d:d3:3d:56:31:47:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13210
Signature Algorithm: sha256WithRSAEncryption
9e:7f:9d:53:c3:c2:fa:45:70:90:d4:7a:9b:60:1d:cc:86:c9:
6b:43:d0:b0:55:0f:86:d6:2c:ca:37:58:d9:4b:7a:70:f5:4e:
01:d0:a5:69:94:07:e5:0f:aa:ab:b2:ee:1c:2a:ea:85:52:e5:
53:27:eb:1a:ba:43:b8:69:0e:c4:2f:ed:42:ed:06:01:5c:a1:
37:cb:b2:6c:83:c8:65:0b:89:21:1f:c9:8b:92:fa:d9:0a:96:
cf:52:c0:d8:35:ba:a1:78:f4:47:f8:21:9e:24:b2:5b:c2:67:
38:c8:d4:f1:20:fe:8c:5d:0f:b9:b7:9e:70:3f:d2:82:81:cc:
61:7b:54:92:f9:41:68:c7:3c:31:56:dd:b7:68:4c:b8:3e:e9:
db:2f:9c:2d:56:d6:74:59:6a:01:71:38:b7:be:fe:81:67:1e:
4e:51:88:0f:cb:e7:80:7c:9f:5b:37:3f:92:27:5f:83:1a:cd:
56:80:93:a3:d3:f0:3c:b4:5b:82:eb:77:4c:ed:cf:26:42:d7:
92:77:72:84:ac:ad:e8:a6:01:ae:3d:9e:15:88:5f:ce:06:a6:
90:ee:fc:a5:52:3b:4e:34:84:f7:fa:9e:bc:5e:de:5e:c4:f4:
35:00:34:04:a8:ed:20:cc:f4:6b:cd:87:5c:a6:d9:0f:e2:4e:
ce:f5:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:16 2025 by rpki-client on console.sobornost.net