Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
File: RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer (raw, json)
Hash identifier: qEDAFsHUPS6+OGIg6o5iuid6e56RSnWqMaFmIWYnFtY=
Subject key identifier: 44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B20CA47C61332137081263D4CA852D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216073
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0c:a4:7c:61:33:21:37:08:12:63:d4:ca:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:59:dd:d5:15:98:26:24:59:22:be:e5:7f:
d0:13:8c:e5:bf:a8:a9:a1:ba:bc:68:4c:7f:03:ab:
c0:c8:0a:1e:dd:f8:e9:47:87:6e:61:e0:11:01:86:
b1:44:83:3f:61:39:ea:a7:8f:5d:66:08:27:3f:7d:
e2:2d:e0:0e:f0:8e:86:85:05:5b:42:64:19:51:19:
0e:2e:04:14:26:49:9e:e1:69:ec:f0:2c:f0:36:1f:
01:60:60:ca:9b:4c:63:d6:12:2d:88:c8:42:03:45:
8a:a0:9f:12:1d:7d:ea:4b:71:72:53:d5:09:b9:ae:
6f:ef:6e:21:75:89:41:f4:d2:7a:a0:45:ef:f2:e5:
32:86:cf:82:ba:9b:84:1a:12:a0:55:56:8d:3b:64:
40:c5:3e:f6:d8:59:0b:87:07:ec:c0:e0:54:da:0d:
d5:65:da:e0:7f:f8:7e:12:07:83:79:a6:19:e1:c8:
ac:7f:2b:25:9e:3a:67:b8:37:72:d1:91:c6:44:52:
5e:d6:64:2b:f2:da:f2:d9:03:b7:59:ca:5f:40:67:
41:ca:79:a8:b0:aa:a2:15:e6:17:d4:84:a0:55:52:
4b:29:1c:2a:80:f7:a2:4e:23:ab:78:00:51:3e:d2:
5b:5a:18:db:89:99:c7:82:0c:b9:71:8b:7a:c2:03:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216073
Signature Algorithm: sha256WithRSAEncryption
60:da:91:00:09:b3:ef:81:91:fe:0f:db:3a:72:93:95:ef:55:
b0:3f:e2:95:46:3c:58:1d:3f:57:09:e3:f0:6a:ee:cd:d7:f5:
44:2b:12:6f:3b:68:31:1e:77:2c:a3:b6:f6:6b:4b:62:d6:44:
ec:a2:4d:24:06:ad:39:23:88:3e:5b:97:47:06:04:d6:f3:ba:
2d:33:34:ac:97:d8:5c:33:6c:63:bc:83:eb:75:16:11:79:c2:
f0:7d:cc:42:14:76:84:3a:93:76:0d:e1:08:a4:09:b5:69:45:
08:3d:99:3c:5d:8b:c6:1a:fa:f0:53:db:ac:a0:d6:84:b3:a0:
9c:06:e4:e1:de:b9:fb:0e:77:2a:1d:5d:7d:27:51:ca:fe:63:
d8:e8:a4:a5:b0:8e:c1:09:28:f4:a2:4a:9e:7b:84:9a:1f:1b:
eb:5c:c7:3a:b0:51:46:88:f1:6b:8a:95:4f:e0:b1:cb:ea:e2:
e0:ae:fb:ca:6f:1b:54:0f:9f:a4:ab:b1:6a:7b:1a:c5:d5:43:
95:d7:1e:41:02:e7:c1:21:b8:26:b8:0f:bd:11:6e:00:5c:da:
0e:90:80:59:75:2b:3b:d1:1d:0f:54:1d:d8:91:81:eb:16:aa:
cc:1d:6a:2c:4d:58:5c:97:a7:53:72:20:ea:8d:f7:cb:a7:88:
41:83:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:12 2025 by rpki-client