Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
File: mNtTOItvp7HlovTGhjq3Hxz7VRI.cer (raw, json)
Hash identifier: /6n7EdidVvt21652r1uk3UdAGs5wYRM7k/L8lOnS3K0=
Subject key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7FECDA91CF4A1B77E7E06A84925DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41793
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fe:cd:a9:1c:f4:a1:b7:7e:7e:06:a8:49:25:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:7f:93:c1:96:81:41:b8:51:1e:a2:b4:91:
72:ec:43:37:c5:8e:17:b5:33:84:01:de:07:49:84:
9d:6f:67:37:c0:41:c9:f3:1e:ed:3c:81:3a:9f:cf:
c5:ec:a8:8b:50:1f:0a:e5:c5:e7:41:3d:6d:8e:36:
36:43:53:14:1a:b1:33:85:e4:bd:6b:e9:90:01:a3:
cc:c6:f7:81:e1:43:aa:e7:e8:e8:d9:56:f5:a9:b0:
da:da:55:fd:b0:01:ae:32:75:15:da:87:5c:c3:5e:
c4:8c:58:33:09:6b:eb:7e:b2:bc:28:00:fc:b5:e9:
35:5c:7c:31:00:11:8a:ea:49:4f:e8:c0:4a:3f:ec:
9a:b8:10:28:43:95:2f:35:db:52:b7:94:b0:98:b5:
92:31:f3:8e:ba:f4:83:56:0f:58:af:be:52:57:08:
26:61:72:2a:dc:83:55:6a:48:a5:92:57:cb:8d:73:
d8:e7:7f:c0:7c:6c:cf:b5:02:ec:fd:ac:8d:fe:2e:
89:f7:c9:35:3b:74:1a:e2:64:6b:48:d0:49:25:7e:
77:6e:00:46:8a:4c:7e:9c:b1:fd:e3:14:e7:9a:04:
2a:c1:46:1f:99:15:72:e9:41:50:39:0e:c5:ec:46:
86:41:00:bd:96:7c:dd:03:88:ec:20:27:9a:fb:2f:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41793
Signature Algorithm: sha256WithRSAEncryption
27:ac:0a:dc:8d:91:e9:94:a2:87:54:88:1b:e4:1c:5c:65:ac:
18:3c:cd:b5:fb:ca:98:91:24:cd:7a:e3:2b:f5:3c:9d:35:a2:
86:c4:f3:9b:37:0a:45:86:c9:ea:ea:a1:fd:a5:e8:9e:18:6d:
4a:28:55:d1:8d:67:b5:43:ca:07:12:85:bf:65:4c:0a:e6:a7:
cd:0f:d5:9f:bd:df:3f:59:39:71:71:22:d2:17:15:07:44:26:
f5:a7:c5:eb:3e:6f:3f:6f:f1:ab:59:7a:89:96:51:35:4e:2d:
24:a7:f3:0e:8e:c4:3d:13:80:c5:88:45:9b:11:34:89:9b:9d:
de:d0:c6:38:7b:34:12:f7:76:d2:6e:64:69:8c:c8:64:67:f2:
ef:cf:56:eb:e9:ef:c3:ab:35:34:b3:88:38:bd:81:92:b6:aa:
18:b1:12:10:35:9a:d6:29:22:fb:30:f0:c9:8b:6f:7e:89:0f:
b7:1c:92:f3:b4:ee:31:4b:b2:ee:54:50:05:71:cd:d9:14:d2:
93:ac:79:28:8b:1e:5d:75:34:29:3f:2f:87:e9:31:65:ad:28:
d0:fb:5b:ae:e4:f1:ea:59:6d:af:f8:51:3e:53:dd:c0:12:81:
c3:c3:43:09:29:db:d5:9f:71:31:f6:ee:04:f5:29:f7:8f:f5:
1d:f9:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:27 2025 by rpki-client on console.sobornost.net