Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rxFguAPrImHBP4yK3JU9O1r7V8w.cer
File: rxFguAPrImHBP4yK3JU9O1r7V8w.cer (raw, json)
Hash identifier: 8UxEhv+Mu21L54EwEL/XkrlIp1W7aA9lMg1zU0mqwWc=
Subject key identifier: AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196204798CC2CC62BCE0FF58E6247A4B170
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 10 Apr 2025 15:18:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215548
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:47:98:cc:2c:c6:2b:ce:0f:f5:8e:62:47:a4:b1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 15:18:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af1160b803eb2261c13f8c8adc953d3b5afb57cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e3:eb:cc:25:38:8b:db:9b:c9:33:08:66:a9:
ba:c6:84:b7:e4:63:28:5c:ab:81:62:a1:84:da:e3:
ff:cd:1b:e5:f0:d7:98:be:10:18:8f:9f:46:49:ea:
91:19:ac:74:1b:5a:cc:79:5b:61:c4:9b:59:a6:63:
c2:9a:12:ed:f6:fb:b5:52:dc:28:e0:54:ad:9d:a2:
af:1e:0b:5e:1c:69:21:0f:cf:87:77:4c:ec:6f:7a:
05:a9:ea:7d:ee:97:1c:1c:e5:e8:34:4f:21:f0:76:
ac:b8:86:72:79:f5:5a:13:45:71:02:d1:9b:d4:a9:
db:40:0a:fb:cd:e6:6c:c9:3d:b2:65:a4:ad:0b:b8:
04:11:b7:e0:b2:05:37:a8:f8:96:f3:9e:c5:cf:8f:
fb:11:36:93:b7:ca:84:65:35:92:2e:6d:ed:b4:31:
65:84:63:e4:cc:a9:59:db:f0:ad:29:14:0b:f4:5b:
83:28:e1:04:31:3a:6a:19:b7:d3:dd:f1:02:f1:a8:
e9:06:05:40:cf:a8:77:36:38:fa:7d:bc:a7:78:04:
12:ea:97:76:01:6a:f1:98:ee:b1:2f:06:d5:c0:1a:
1e:1a:7f:7e:ca:3b:99:db:90:ce:61:d7:c3:c2:b4:
2b:d2:3b:1e:7b:80:8f:f0:05:94:f0:b9:48:ef:2f:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:60:B8:03:EB:22:61:C1:3F:8C:8A:DC:95:3D:3B:5A:FB:57:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f7f214-1db2-436a-95c6-643f0da849fa/1/rxFguAPrImHBP4yK3JU9O1r7V8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215548
Signature Algorithm: sha256WithRSAEncryption
20:fd:b7:83:6e:56:92:e0:6e:7d:b2:17:9c:26:9a:be:a3:d5:
5e:95:28:51:c5:da:ec:9c:77:79:ac:79:c4:42:c4:45:23:ba:
01:c9:ee:f4:8a:a7:40:b4:6f:39:70:b2:a4:af:f8:5f:21:58:
cc:ba:ad:75:dd:0c:59:f2:f4:c2:29:fb:fa:f3:18:d6:dd:60:
84:24:f4:c0:15:27:b6:89:8a:45:c7:2b:a0:7b:7f:5c:11:82:
c2:31:8a:7e:fa:48:0a:ee:f7:ab:a7:1d:0c:f6:fe:e6:31:5e:
57:07:75:27:1e:7e:96:b6:9d:0e:10:d0:67:6f:d0:24:6f:f8:
4b:92:0c:d0:b5:a5:70:4c:d8:c6:eb:06:b5:a1:77:ad:9b:ed:
bd:5e:f2:92:a7:ff:50:92:ca:17:08:49:a7:bf:41:f0:66:e1:
01:06:d3:5a:22:b6:92:52:80:01:8b:55:55:69:b9:17:8f:51:
6a:7d:06:00:9d:7c:23:d5:35:4c:6d:a1:9a:da:53:b0:88:23:
7d:de:b0:68:fc:64:71:81:e2:93:83:46:98:8b:63:83:0b:22:
fa:e3:a5:3e:86:52:e2:0d:e9:8b:f7:d6:50:75:17:d9:0e:c4:
60:01:2a:10:67:16:cf:f4:a0:69:4a:48:1e:76:21:1e:a3:f9:
5c:8d:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:01 2025 by rpki-client on console.sobornost.net