Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
File: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer (raw, json)
Hash identifier: k1vvLw83lPogHHq16KfybuBf74d6JyCNlTUtWsjV+H4=
Subject key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E1CC82DFE0359F23C5FE1ADE66D99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20740
IP: 193.109.4.0/22
IP: 194.29.188.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1c:c8:2d:fe:03:59:f2:3c:5f:e1:ad:e6:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:c9:c7:ff:79:7a:62:70:c9:bd:e9:5c:c1:
74:ad:40:4f:60:62:33:cf:e4:21:45:b2:05:09:01:
a6:44:0b:40:a7:2b:b6:df:d1:1b:4b:7b:a8:11:53:
06:87:63:0e:81:48:f3:c7:64:1b:4f:2d:fc:7a:fa:
3a:23:b0:fd:06:67:37:70:ee:75:c0:08:54:32:c3:
4d:41:10:cd:7d:1e:3c:e2:9f:43:5d:53:15:4e:9b:
b3:5a:fd:f5:a9:c7:77:3f:89:4b:62:07:b9:0a:75:
c0:94:f0:a3:a4:e4:56:c2:fc:5f:f9:da:e1:48:96:
d5:68:5c:be:20:2d:20:1f:b1:04:3d:ea:ff:16:93:
58:bc:97:f3:0c:1a:7e:e6:e2:03:65:50:50:0d:63:
41:ff:e9:7c:95:dd:9c:6b:bd:21:57:ea:1d:5b:5d:
1c:31:8f:35:f8:cb:b4:92:d3:e2:3c:5e:33:e0:ba:
36:46:95:b4:91:fe:df:60:84:64:be:5e:b7:58:62:
d9:e9:29:12:8c:50:c1:c9:5a:1f:30:e4:2c:29:cb:
9e:2e:a5:57:6a:75:70:90:f4:c9:fc:ca:ad:c6:ff:
66:8d:de:ae:96:20:29:e4:58:5f:2f:de:88:35:69:
e5:cc:54:87:37:39:e3:e1:20:06:02:8a:1b:34:d7:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.4.0/22
194.29.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20740
Signature Algorithm: sha256WithRSAEncryption
44:e7:54:3f:bf:20:a7:9f:95:26:86:7b:a4:fd:61:f2:91:4a:
19:e4:f6:a4:fa:04:47:b3:89:68:b6:12:b9:3d:ac:a1:65:13:
99:c5:a5:bc:ca:8f:ad:7c:81:e6:b0:94:79:b9:c1:ee:08:86:
d8:8b:61:57:bc:6c:72:b7:79:9a:54:dd:33:ac:49:4d:20:ae:
fe:b9:87:34:55:c2:16:0e:5c:2a:5c:48:25:d7:77:1f:94:90:
60:dd:95:de:6b:97:cf:5d:db:8c:b7:a2:fa:1c:c7:74:9d:cf:
19:1f:5e:17:04:e2:fb:0c:48:28:16:ed:b4:96:18:0e:94:30:
c2:b6:0a:51:3a:20:05:d2:4a:71:99:53:09:28:8b:a7:48:5f:
ca:f3:45:45:08:77:90:48:6a:37:60:68:a0:bb:92:78:f7:c6:
2f:de:3f:24:f0:1a:76:6e:93:d2:76:dd:9f:a8:9f:64:c6:31:
cd:ee:93:d0:f3:15:bd:f8:f0:f6:20:d0:a2:c7:03:80:21:9b:
01:38:7f:f3:c8:ba:5f:0b:f4:f2:13:05:0e:42:c2:f3:b6:77:
f1:19:1a:d3:98:45:fd:14:b4:b6:28:a6:96:91:73:7d:f8:d5:
5d:d5:db:ff:6b:05:a1:2b:36:90:7e:d4:e6:1e:0d:57:fa:7d:
cb:c1:35:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:18 2025 by rpki-client