Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
File: JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer (raw, json)
Hash identifier: 5B02ut1K+b6YCOfqyPc3Zwr5FLEI1tat70precuuUZE=
Subject key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB1E84363BDD25DA134FC80A44998
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29686
IP: 82.96.64.0/18
IP: 85.190.0.0/18
IP: 185.191.224.0/22
IP: 2001:1bc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b1:e8:43:63:bd:d2:5d:a1:34:fc:80:a4:49:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:7a:f0:9b:54:87:25:90:25:a0:d9:39:e3:
02:e5:86:0d:5a:0a:13:ea:e3:93:bf:93:50:1d:3d:
37:f4:7c:7e:26:6d:73:c9:4f:3c:6b:63:c0:16:16:
e8:f3:ab:9c:cb:38:53:c4:7e:3f:f1:9b:70:f6:c7:
45:92:2a:33:f0:db:18:e9:fa:d4:0e:89:8e:04:d4:
0e:d7:66:b1:c2:6d:9c:ef:1e:d0:55:5e:65:2e:69:
0e:e7:9d:32:35:03:04:8c:fa:e3:6f:3e:03:be:1e:
11:4d:e5:db:3b:02:f5:fd:fc:4c:24:ad:81:a4:8c:
d8:e4:a2:b0:f8:2e:5f:36:54:a0:31:4a:8e:7f:c2:
3a:04:14:0d:32:ea:9b:7b:d4:a5:8a:e8:52:20:ba:
21:01:ae:21:dc:62:2e:1b:95:a2:bb:c1:eb:b8:67:
7c:05:1e:c8:7b:bd:ce:f8:9b:87:d0:ad:67:52:8c:
51:87:04:3c:24:0d:30:da:60:21:2c:05:0d:04:30:
a9:ee:47:5f:62:61:51:37:f0:82:ea:24:b0:a2:5d:
58:ae:42:c7:c3:e3:04:e9:bf:32:3c:ce:14:41:38:
90:b4:87:e0:9e:c8:a5:8c:8d:74:41:bf:92:fb:7c:
b6:be:7a:1c:e9:16:b0:29:74:a6:83:be:d9:0f:14:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.96.64.0/18
85.190.0.0/18
185.191.224.0/22
IPv6:
2001:1bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29686
Signature Algorithm: sha256WithRSAEncryption
53:d2:e2:3e:15:d9:b6:58:eb:a8:16:8a:52:2d:7f:af:bb:64:
51:21:bc:c7:a0:1f:71:5c:78:09:39:0e:5a:c5:86:5e:cb:9c:
9f:7b:ea:ea:3b:06:5c:d0:b4:ac:d8:55:f8:6d:b8:c8:01:54:
90:66:f7:28:da:68:7d:f7:2d:bb:cf:55:9f:c2:55:7f:a1:52:
8a:ae:cb:5b:0e:51:70:a8:30:83:ea:70:11:ea:d8:4b:69:fd:
f7:64:28:6a:31:eb:15:8c:0f:c6:44:d6:c2:f8:e0:c3:0a:29:
e0:41:55:59:78:ab:9b:67:e0:df:76:5c:06:8f:b9:04:27:f4:
8e:09:f6:7f:7b:9e:ef:7f:d0:49:bc:bd:e0:55:8e:cd:88:ac:
23:5c:26:f0:91:67:40:de:90:da:d8:e5:6a:e2:c4:22:91:2e:
25:e3:09:82:d8:2f:40:f0:9e:b5:64:29:f2:f1:06:5b:9b:a6:
f7:f2:7e:2a:b0:0b:19:60:f8:b7:d0:da:9f:54:3f:43:0e:af:
49:2e:a5:87:e5:63:d9:67:4e:3a:a5:78:d8:cc:69:f6:53:0e:
34:2c:2e:32:3e:e8:56:50:7d:2b:ff:c9:77:19:62:7a:18:4e:
75:46:d2:30:4f:73:99:1c:e0:2b:3c:db:0c:0c:e4:a1:da:4a:
7c:f4:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:39 2025 by rpki-client