Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer (raw, json)
Hash identifier: 2UlUcuhh28yVk6KhyneDgog62si8SP2EMwAN2D2iOaY=
Subject key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FCC5813478384EDFF515960F936E3C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47157
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c5:81:34:78:38:4e:df:f5:15:96:0f:93:6e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:23:17:5a:71:0d:2a:9d:c6:dc:50:7c:5e:
d2:50:6f:2a:29:d0:c7:0c:01:bc:db:a0:58:e8:24:
af:c8:f9:53:4b:55:90:70:54:b1:c1:f8:a6:33:04:
12:35:0a:a0:c5:2e:df:0a:2e:9a:b7:57:e7:d6:24:
34:f7:e0:bb:d3:27:1f:db:49:64:cf:e0:96:76:bb:
b7:40:47:c1:f2:ae:11:bf:c6:f2:cc:6f:21:1a:ed:
8f:54:33:df:cd:08:c5:bd:fe:9b:3f:96:ec:31:0d:
94:91:d4:fc:eb:41:7f:82:74:19:39:45:6c:4f:5f:
1c:9c:b0:d0:15:18:04:c2:c7:43:01:13:55:5c:89:
58:a6:35:71:25:b7:9c:d5:8e:6f:57:9e:ca:37:4d:
70:cf:07:67:86:8c:80:10:76:f6:93:b9:8b:dd:a0:
21:49:1a:9f:55:44:b7:b7:18:6c:5a:56:4c:8d:8f:
9d:ee:e3:2f:e7:3f:5e:a4:e0:f7:dd:66:8e:cc:a9:
3b:53:57:05:d1:92:53:5a:19:f7:ad:8e:25:3f:57:
45:3a:cb:67:af:0f:47:e9:6b:22:a9:e2:0a:5f:7e:
d8:9e:30:bf:c0:53:e3:58:c6:b3:e9:d4:19:8c:e1:
50:97:ee:60:6e:8b:3a:32:62:52:9e:3c:65:29:2b:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47157
Signature Algorithm: sha256WithRSAEncryption
6b:7a:09:6b:8b:9d:ed:37:98:bf:3e:3c:c4:e9:8a:c5:b8:5d:
c8:12:46:84:77:83:48:ae:2a:69:8f:07:db:10:66:e1:0d:3e:
c4:a0:9d:04:d7:79:e3:92:fc:b8:de:3d:07:95:9a:9f:2e:74:
b9:b2:b9:01:ff:a9:2e:1a:77:88:e9:d4:4f:5e:da:56:93:71:
99:e8:f8:ae:fb:be:d6:f4:22:c3:c3:56:d8:7b:cb:0a:0f:04:
f5:b8:18:88:24:f9:31:6b:1f:ce:f5:26:6d:ce:4f:70:91:c3:
f6:54:ca:5b:b9:f9:fb:80:c6:0b:11:bf:65:16:43:0f:e6:3c:
1a:0e:54:d3:4c:28:8f:0b:a0:fa:70:95:1c:3a:85:16:2f:f8:
3d:d3:b9:dc:f7:b6:79:6c:d7:fb:f4:27:b3:b6:b2:c2:1e:a2:
95:df:10:3e:a2:c0:6d:71:08:3a:1c:81:4b:1b:f1:dd:9e:cf:
69:15:cf:7f:5e:de:85:56:1b:1f:fc:f1:f4:f4:56:a7:9e:34:
19:82:1a:ed:a7:e4:c3:05:21:5e:cb:06:86:da:f3:5e:eb:a2:
a3:23:8d:30:fc:e7:7d:1c:5f:8b:b9:f6:d2:8a:e0:fa:3d:f0:
39:2e:da:c1:41:40:13:bd:aa:49:80:74:67:6d:b1:f1:b2:9e:
83:5f:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:28 2025 by rpki-client on console.sobornost.net