Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
File: 9yjCKwJQJ1-m63NLoA55D343pVA.cer (raw, json)
Hash identifier: URfyXZhYHRf5Us8F3VWPCNsolzQsnSj3UhT1Q6GQ4LA=
Subject key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBC5131957D1CAD152CD33EAC028EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199488
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c5:13:19:57:d1:ca:d1:52:cd:33:ea:c0:28:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:d6:c6:dd:23:e8:ee:a3:85:40:fc:ad:5f:
df:aa:a0:1e:89:53:c7:ec:6c:d4:95:dc:99:dd:01:
f5:c6:d2:1f:48:12:61:d5:a1:0e:dd:6f:29:d3:59:
64:fe:1e:6e:f6:1d:81:c9:b6:99:a3:13:b0:02:62:
f4:f1:f5:1f:1c:9b:8e:e5:c6:6e:9e:1d:58:57:3f:
dd:36:1f:c7:f1:54:a0:d2:62:33:cc:a2:b7:a4:87:
25:c9:4c:30:72:ad:e6:8d:c2:30:ca:1f:1c:22:21:
8f:6c:7b:a9:ba:c8:e4:d6:6d:21:6c:90:e7:62:8c:
8e:7c:5c:00:54:a8:52:b5:e9:ee:94:f5:69:fd:f8:
72:e8:6d:61:d5:b5:b7:b8:6f:d7:f5:57:e0:1c:b2:
dc:6c:bd:06:c6:e1:7e:5f:c9:16:ca:49:3d:64:87:
ad:2d:d2:c5:da:cf:f3:83:e9:1e:d9:15:e9:80:bd:
b8:3f:1e:01:24:89:ce:cb:33:91:18:14:bd:af:e7:
20:43:b6:cc:37:24:fb:6d:42:5b:02:ed:b3:80:49:
ce:c9:61:c8:0b:a7:58:e5:c5:06:f4:77:da:32:01:
46:34:e5:f5:8d:02:0c:e4:0f:38:cf:57:8e:c3:dc:
45:03:62:53:e6:ea:e9:fa:60:b7:d9:af:5c:aa:c4:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199488
Signature Algorithm: sha256WithRSAEncryption
90:85:66:cd:6e:ab:8f:5d:7e:c4:0a:56:06:39:93:0c:0b:5b:
ac:9c:bc:2a:fd:b9:3d:91:25:cf:90:a6:37:27:4d:97:d7:b9:
74:ed:bd:26:5f:e1:ca:2c:31:a5:9d:3f:f2:0f:3c:28:4b:4f:
57:f8:5f:e4:88:53:1b:ac:0b:75:e6:7a:3f:8e:02:ef:cb:2c:
83:94:5f:14:74:32:8d:18:66:0e:bd:81:a1:9d:f0:2e:82:c5:
7a:6c:b8:46:a5:98:57:72:e6:2a:43:29:be:bd:c5:04:8e:e6:
5f:39:89:c5:62:66:f8:d4:be:5d:9c:77:c6:d1:02:92:ca:a7:
54:e9:0b:bc:78:1e:40:d4:8e:5e:d0:b0:53:6c:a1:02:ab:5f:
44:ef:9b:97:b6:89:99:27:c3:2e:4d:63:70:3e:e3:45:3f:cd:
98:47:19:08:2a:bc:a0:37:87:e0:51:28:54:d6:33:7c:3c:06:
b4:30:ff:30:40:fe:36:2c:13:83:24:6b:0f:cc:95:fc:83:6e:
19:88:3d:60:bc:21:19:06:9d:88:de:ff:8a:f1:2b:cf:ba:b5:
04:00:25:48:84:d8:fe:67:71:2b:56:dc:f1:c6:24:ad:9a:6a:
63:26:b8:77:cc:49:66:e0:36:fd:33:00:4f:1f:3d:75:f0:3c:
ad:3b:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:09 2025 by rpki-client