Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer (raw, json)
Hash identifier: wRR0lWy5yjErMvT2EoKApQnkaRii6wtxF4g+8AZFWew=
Subject key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214402F75649D5EBC6E90E5C8AF425BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215514
IP: 2001:67c:de4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:02:f7:56:49:d5:eb:c6:e9:0e:5c:8a:f4:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:ed:66:14:da:84:85:b1:33:74:ae:6a:d3:
23:83:4c:63:ba:fb:bd:b6:05:d5:44:58:3a:df:e0:
56:10:39:48:0c:24:f4:58:a9:16:a0:de:35:be:55:
24:1d:2b:79:f2:6f:33:6a:51:25:f6:73:4a:a5:d0:
23:80:74:aa:15:00:7d:71:86:41:81:8e:8b:0e:c4:
1d:71:c2:64:b6:fb:4b:cb:b2:8e:22:d5:2a:04:6a:
5c:e1:f6:e7:ba:17:36:c2:a7:c8:0f:bf:1e:16:5e:
1c:d2:98:59:e0:ec:b2:2e:6b:0d:57:f1:1f:cd:0b:
0d:c1:d9:5e:98:9c:d9:33:64:47:78:98:aa:5d:a5:
9b:52:68:42:20:32:c5:c2:e4:e8:2c:96:98:25:58:
af:35:52:c4:f9:18:9b:35:f9:68:e4:5d:48:85:71:
5a:16:a8:7b:a5:6d:e9:c1:19:df:2f:ae:8d:1f:a3:
32:34:f2:22:55:89:dc:37:8e:84:ac:bf:85:0d:fb:
83:3d:c4:99:73:ef:4e:97:84:fa:a1:47:d8:34:c2:
fc:4c:4c:bd:16:1b:e9:7c:0d:68:5f:e5:42:de:46:
1c:05:43:ba:e4:f4:9f:34:e1:ea:ac:18:e9:a9:4f:
b3:43:19:81:26:96:bc:37:35:e6:4e:56:01:32:a9:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:de4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215514
Signature Algorithm: sha256WithRSAEncryption
49:fc:f8:fb:9a:bd:ff:5f:04:bf:06:b2:c5:1f:65:74:62:a1:
d1:31:6d:ba:6b:bf:e7:64:46:44:9b:77:6f:1e:06:e2:63:1b:
14:06:a2:d9:ea:85:6a:94:dc:33:a7:47:5d:d4:69:4c:97:c2:
35:bc:c5:bd:55:5e:82:a5:87:4e:88:55:a9:95:00:db:0b:70:
5c:0d:4c:6c:9e:93:02:de:d6:63:cb:74:1f:ef:2f:e2:e9:92:
93:8d:9c:bb:34:2b:8b:94:44:41:d0:ff:b2:47:68:81:2e:d9:
b7:65:47:3b:ef:ba:2b:60:7b:63:28:29:52:57:03:fb:34:f0:
bb:ab:9c:bb:26:a3:88:06:c8:e2:d0:8b:ca:13:98:ce:71:6f:
75:93:bf:3a:19:99:e0:96:8e:0d:c4:84:1c:90:7a:50:5c:ef:
cd:b3:2f:7a:09:0a:72:46:e4:b1:65:88:91:c3:1f:41:27:62:
ee:b9:c0:a6:b9:fc:33:0d:2a:3d:b0:2c:88:28:75:35:d3:0b:
fe:02:12:26:32:11:37:10:25:77:7c:f1:0b:55:84:fe:44:8b:
87:cd:5b:36:37:ab:bf:03:0d:8a:38:39:44:08:e6:ec:61:cd:
5c:f2:89:23:19:5f:34:f4:8a:b9:35:ae:eb:49:cb:62:d7:ae:
43:8b:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:49:11 2025 by rpki-client