Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer (raw, json)
Hash identifier: eVAxvrEO8eBmtuabaHGoWffua6T3nha3J+cwciJuAq4=
Subject key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6447902896C569F0B63D2C64952D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205939
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:44:79:02:89:6c:56:9f:0b:63:d2:c6:49:52:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:8e:49:32:89:ea:7a:dd:5c:ef:e0:d3:59:
dd:95:10:96:a6:58:80:c2:53:10:3f:27:5c:cd:37:
59:62:39:14:b5:b4:e8:dd:59:fe:37:c4:61:60:c4:
b8:68:10:44:af:3b:8c:df:0d:7d:d5:a8:00:ea:73:
99:fd:b3:9e:0e:83:1e:57:dc:1e:8c:7a:1b:1b:fc:
a1:53:ef:0d:aa:22:63:40:33:d6:d9:f5:c0:99:4d:
ef:9c:2e:2a:39:8d:a8:0d:95:29:7d:cf:fa:b9:99:
0b:87:76:10:4d:0c:28:4f:dd:74:78:be:93:f2:48:
bf:45:75:78:29:02:9f:fb:1a:15:e5:3a:f2:9b:21:
b1:ed:50:41:a5:8d:59:53:e7:69:25:54:56:a6:2b:
1c:41:92:2e:a2:4d:63:fe:5a:4a:6c:d3:07:65:de:
0a:db:2f:7f:37:62:4c:25:52:68:db:72:18:ab:f9:
8e:d5:7a:05:01:39:9e:2f:92:93:56:69:30:82:c8:
39:4e:6e:59:28:38:36:4c:b3:36:75:44:dd:44:1b:
be:82:72:96:aa:68:88:95:d2:84:3a:8f:71:33:6f:
f4:10:0d:95:7d:80:cb:e0:a5:cd:5f:73:12:cf:2c:
a2:fc:ff:61:c1:cb:68:8a:b8:80:b7:90:8e:f6:05:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205939
Signature Algorithm: sha256WithRSAEncryption
02:2f:89:1a:89:1f:cd:ae:1c:94:50:06:3d:92:69:32:fa:35:
82:9a:ed:d6:d5:7a:9a:64:ca:32:0c:1b:c2:c4:d9:28:57:b4:
82:9a:7b:fd:02:90:b7:51:ae:e8:1a:3b:d5:5d:b4:e9:2d:93:
d1:fd:73:19:91:8c:16:a7:f4:1a:c4:db:3b:16:55:86:62:d1:
f0:08:f0:da:a3:5d:0b:20:ac:99:12:43:1b:30:c9:fa:a7:76:
7b:f3:40:03:79:c7:5e:dc:64:08:f4:da:8b:7c:12:47:54:2b:
2a:4b:d0:ed:91:2f:66:b5:50:dd:d3:e2:69:4a:4f:75:00:50:
2a:82:77:ac:1f:2e:07:ba:d0:df:74:20:f7:02:43:cd:72:6d:
62:89:d6:c9:c3:49:47:d7:d6:c2:d5:fc:3a:ce:97:b9:4e:0f:
05:4b:85:8e:56:82:e6:d1:81:8c:86:80:74:78:bc:ef:fb:bf:
ab:23:8f:76:cd:d9:1f:6b:5e:5d:d2:bd:f3:11:71:77:e9:d6:
80:7b:2f:30:6d:cd:48:be:3e:a5:2f:8f:ca:cd:70:60:4d:d2:
ae:90:fd:35:f5:da:b4:08:92:02:19:3d:6e:28:b9:32:5d:a0:
63:a9:a7:ea:e8:92:86:e9:05:67:48:03:29:74:a7:2b:b5:1b:
0a:ad:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:24 2025 by rpki-client