Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer (raw, json)
Hash identifier: 7nTRaB0uGpX2imI9g2FlVzcGYqHjx1ttnzz0UOiRGd4=
Subject key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3F082BB63A8BF4C309F845F45C21F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56766
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f0:82:bb:63:a8:bf:4c:30:9f:84:5f:45:c2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:4d:4a:df:cf:4f:bb:0f:78:19:ff:3c:e2:
9b:a8:02:b3:b2:42:5b:41:4d:a8:a1:7a:87:e0:87:
95:14:65:77:f0:c3:12:ca:85:f7:6a:c1:65:22:36:
77:e3:94:5a:24:51:69:17:67:3d:d0:1c:bd:6a:ff:
12:65:e4:c5:ee:ba:99:bd:be:ac:3f:7c:8b:8b:3a:
9b:13:bd:93:ad:6f:1c:2a:da:30:33:36:33:45:87:
d8:4b:6a:07:f6:90:d6:72:88:2a:6a:27:8a:9c:41:
73:16:cd:c7:24:43:3d:e7:7c:30:83:bd:8d:d7:0c:
3e:1a:5a:d7:9e:d1:71:0e:5b:73:32:68:38:2e:cd:
70:6b:b3:87:72:33:5f:0c:5d:67:73:75:f9:15:39:
9b:46:f7:73:b9:71:13:2e:d1:63:3b:92:5c:9d:e2:
62:f6:29:7f:84:75:7c:34:a8:e4:9d:27:a9:31:a2:
16:52:0d:43:22:64:8d:83:e7:00:16:30:fb:4f:9a:
cb:a6:4c:31:2d:ed:5c:c2:d8:9b:27:5a:f8:3a:c6:
08:bc:77:ff:37:a5:1f:59:db:29:2e:a6:3f:ca:0e:
76:4a:32:2b:d5:f7:07:91:27:49:fe:d3:35:00:a5:
f4:ab:d5:77:0d:6f:86:0f:f7:4b:dc:81:e2:44:7e:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56766
Signature Algorithm: sha256WithRSAEncryption
9c:f6:b9:8f:37:68:e7:70:4c:28:52:e3:d8:38:23:0a:81:fc:
a7:9e:1a:6b:78:c0:b5:11:64:22:21:8a:2c:4a:78:1f:a6:91:
4d:d9:e3:5b:27:a5:f8:0a:89:e0:b0:51:e1:a9:53:e4:a6:a5:
28:d3:17:82:b9:bb:d4:17:aa:4b:71:a8:5e:a7:47:f3:18:64:
46:77:98:57:bd:b5:0e:d4:69:d4:41:37:8f:9f:bc:18:3e:34:
73:dd:33:d4:7e:2c:9e:d6:72:14:e1:93:df:a8:10:ab:ce:c4:
af:bf:32:d7:19:6b:a5:e6:3e:cc:58:cb:5d:e2:63:80:45:f6:
6c:82:91:f6:80:d4:71:aa:bc:3e:1f:10:3d:64:ab:0d:ab:9d:
b0:80:c4:6f:45:5f:d7:9d:16:65:39:ef:50:6e:cc:d0:10:37:
a2:09:8a:b9:fa:93:d9:16:fe:87:5d:c9:a8:48:f1:0c:d9:26:
f0:33:ea:29:b0:97:be:24:26:8c:cb:ee:54:9c:3e:a7:1a:40:
85:eb:87:eb:9f:06:b5:7d:dc:16:9a:cd:6e:98:09:1d:ab:6c:
32:27:b3:a9:f0:ba:f5:41:92:18:03:83:31:5d:1c:40:22:90:
e5:79:5c:c4:ec:91:d2:73:d3:b5:65:d3:8d:07:7c:6a:15:0b:
53:7a:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:25 2025 by rpki-client