Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.cer (raw, json)
Hash identifier: TottJVYncorwBEoKzPAjlMFLRsBwHUOz1p7AQBjZGAI=
Subject key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D944E6DBD3B22BA855DAE2C1ABA747
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200055
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:44:e6:db:d3:b2:2b:a8:55:da:e2:c1:ab:a7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:28:c3:92:e8:68:c9:94:c6:3f:10:1f:47:
0a:71:7a:14:1f:99:36:d5:ce:fc:94:ca:2a:54:48:
1e:e7:fd:4b:0b:f8:cd:b0:3a:c9:9f:f2:11:cc:93:
96:16:60:bb:29:97:a4:52:6f:2f:00:ef:77:92:6d:
9a:1b:c8:01:ec:7f:b6:ca:bc:9b:18:0e:c8:88:80:
32:16:ba:16:89:0e:54:70:40:9a:9a:53:dc:0b:56:
05:cc:9e:59:75:66:b1:37:87:5d:b6:68:fa:d8:3b:
b5:00:a1:51:dd:ed:e0:b1:0b:25:cd:5c:60:71:28:
8d:6c:b4:ee:d3:25:94:cb:fe:e4:ce:e4:be:4d:8f:
c9:3c:eb:8f:af:7b:31:ff:41:69:1c:94:14:08:97:
73:6e:f5:1a:16:b9:62:8c:a0:c6:66:9f:fc:f4:35:
45:d2:55:f0:ca:8c:71:e5:41:6c:b8:1d:f2:ae:f9:
c2:bd:6a:11:68:96:d4:aa:a8:9d:44:7c:a1:16:3f:
92:60:83:e7:2a:4d:5b:45:77:ce:26:4f:bd:4a:28:
17:59:5d:ac:26:a5:e8:6f:9d:f8:23:17:95:9a:40:
da:9e:e6:8c:41:e6:65:74:e8:8b:3d:96:96:ad:38:
d9:1f:f6:6d:f3:dd:14:6d:19:fa:b6:8c:70:1b:7f:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200055
Signature Algorithm: sha256WithRSAEncryption
87:a8:4d:ff:a2:c6:21:0a:74:1d:a1:12:0b:a2:22:21:bf:91:
7e:79:b4:da:9b:ad:73:59:a7:34:5a:94:71:b1:62:68:93:d7:
f1:28:b9:ea:ed:fb:7d:fb:0a:c1:ca:6a:81:ca:15:3c:77:7a:
a5:d5:9e:b3:c0:c5:21:c6:37:bd:41:61:ba:d7:6d:17:ea:1e:
1c:fb:20:a6:96:d9:e1:73:a2:2b:b8:67:bb:4f:8b:5c:2b:57:
01:f7:e3:04:a0:b8:79:fb:35:57:47:5f:7e:71:68:89:9b:54:
d9:5e:f2:06:22:30:36:f4:19:0e:66:cb:01:7e:18:c7:47:22:
4e:24:39:00:d1:21:eb:fa:e6:06:61:d5:97:95:73:be:95:77:
b5:90:0c:c4:3d:3a:74:21:a1:ee:00:9d:68:2b:39:17:de:bb:
72:f4:f4:e8:02:2c:2c:b0:b1:bf:18:34:5c:e2:62:ca:4f:22:
a6:f2:23:bf:77:4e:d6:6e:a9:02:9a:b2:15:b1:17:4f:42:57:
6f:54:e7:32:c6:f0:24:db:93:8f:ca:df:0a:c9:37:28:12:76:
14:53:14:83:a7:85:22:c1:e2:bf:67:fc:fb:74:91:8f:f0:39:
f6:5a:c5:b7:22:db:99:33:09:d1:06:1a:fc:a1:4d:5e:2a:cd:
a4:e2:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:59 2025 by rpki-client