Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer (raw, json)
Hash identifier: DFDaJEWRmNnIqPqim9zB+igo+9Zn5YqpsabAfRYjCeA=
Subject key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1B50B40D62C013E724C7CCC9E5459
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216010
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b5:0b:40:d6:2c:01:3e:72:4c:7c:cc:9e:54:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=954cf721c08c8e9bc5242d56196677217350455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:6d:64:2e:4e:97:da:ba:27:be:4a:54:d7:
20:7e:4a:c1:08:7c:06:13:ce:df:85:e6:20:15:66:
99:0e:95:e1:6b:7a:79:b6:df:b4:50:ba:1b:b3:16:
92:67:10:1a:fb:44:8b:9a:2e:51:ae:42:d9:4f:6a:
a1:c3:cd:21:51:83:2d:87:42:87:68:46:eb:fb:e0:
1f:82:26:c9:c8:1a:47:88:40:dc:75:25:6d:0f:2c:
21:d1:79:c0:9a:5e:48:3b:c7:b8:a6:c6:c1:ae:bb:
bf:ba:34:c0:1d:32:cf:d2:da:ce:84:6f:45:a5:cc:
2b:be:ae:56:b4:40:3e:da:c9:5a:ce:15:7c:e6:14:
a1:1f:49:54:85:85:e4:b0:3c:17:1e:7e:f9:bc:db:
06:25:a9:da:96:a2:f1:b0:e0:60:21:9c:d6:66:21:
7f:f9:d7:a7:36:2f:5e:61:7c:1b:3f:b8:4f:cb:f1:
b3:96:16:14:7f:f4:6d:f6:f5:41:21:a1:9a:81:ea:
09:62:ec:be:67:55:2f:94:6f:ab:f5:f5:65:50:78:
72:bd:e3:00:f3:60:52:8a:e2:97:21:01:02:71:f8:
27:38:d7:aa:92:00:bb:2e:db:ab:ec:59:fc:75:e8:
f5:d0:b1:2c:1d:e7:ac:da:46:09:6f:ae:a6:10:1a:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216010
Signature Algorithm: sha256WithRSAEncryption
6e:ea:ce:8a:45:92:ad:79:c5:f4:54:5c:ea:c3:70:ee:ad:f8:
41:0b:df:cf:67:23:81:06:19:5f:b0:eb:ce:6c:96:4c:20:03:
9f:3e:c7:8c:5d:87:06:2c:fb:de:33:e6:71:58:a4:0b:63:88:
60:b9:9d:f9:5b:99:f7:1d:4f:9c:56:41:ba:1a:23:5b:32:fe:
00:a7:b3:8f:8b:2d:22:29:54:20:9c:56:74:0e:90:c5:ee:b3:
2e:6e:7c:67:73:74:6d:ea:43:7a:c4:a8:66:13:e8:05:07:92:
0a:08:3c:f0:6d:60:84:e8:d2:22:f0:6b:22:a0:34:70:d5:28:
d4:d9:16:ff:12:51:da:39:6e:50:21:36:8f:c9:c6:78:8a:26:
d4:b9:ff:08:c9:db:ef:f0:08:67:a0:85:b3:98:68:cd:80:8b:
e8:39:fd:93:a9:63:3a:9d:8d:13:1d:ae:92:b5:ea:5a:85:97:
83:8f:13:1f:78:d6:d1:7b:77:87:82:33:cb:fc:e2:e6:f0:ae:
48:58:c3:7d:26:01:bb:15:6d:78:b2:b4:7c:a3:84:4f:77:ab:
94:ed:27:4b:76:9d:8f:9b:ac:f7:f0:a0:b5:a7:ee:ec:08:16:
93:fa:38:d2:28:d2:17:55:5a:f4:26:ab:43:f3:06:0b:d9:98:
80:be:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:25 2025 by rpki-client on console.sobornost.net