Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
File: Tj_pDw-taiXUa9fDNbki2gMbLHg.cer (raw, json)
Hash identifier: WPvZZppIqHmYSshChJIWIcz5a9snRO4zfIOE812XVNE=
Subject key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428255BB563B6892A0599FC48BB4D4478
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60774
IP: 194.15.88.0/21
IP: 2a09:2800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:5b:b5:63:b6:89:2a:05:99:fc:48:bb:4d:44:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:0e:ee:c8:d7:7e:f5:00:10:4b:2c:14:b7:
23:7f:d6:65:ce:8b:c5:4f:22:cc:10:63:59:1e:9f:
ff:f8:77:bd:6c:d3:dc:5d:1d:b9:71:5a:4e:fe:3b:
31:8e:57:3e:f2:12:ab:44:8f:60:10:3f:80:9b:27:
d0:b3:a5:6b:c4:89:18:27:7b:ce:25:2d:c0:e1:52:
6b:4c:95:2d:c2:29:9d:ba:39:17:86:b4:06:0b:6f:
2c:df:f3:bd:2a:a5:d3:78:c2:9a:9d:25:db:5f:b0:
3e:b9:04:44:13:e5:16:7e:66:6c:fb:68:49:9c:67:
0a:7f:78:84:ad:28:bd:96:68:6e:dc:64:82:9e:44:
e7:bc:66:01:ea:96:df:aa:da:3e:ce:d9:b6:8a:8b:
01:f1:75:e9:16:5a:d8:0c:bb:5c:06:49:91:66:34:
f0:5c:72:00:d5:ea:4a:6f:a8:c6:ee:9b:54:47:9b:
95:1b:26:28:74:38:31:86:49:5c:c1:62:f7:8b:a7:
e2:1d:81:46:54:a7:99:01:fd:c5:e0:9c:93:5b:24:
7c:77:62:bd:09:5d:55:c9:fb:ab:c9:01:ee:21:28:
9b:76:66:7f:04:cb:82:18:ae:06:80:87:45:2b:37:
81:33:fb:ac:b3:b4:bd:d0:ec:13:60:33:b5:74:93:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.88.0/21
IPv6:
2a09:2800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60774
Signature Algorithm: sha256WithRSAEncryption
7a:d5:5d:5b:1b:7f:69:51:39:b2:87:f5:ba:66:5d:93:27:e4:
11:93:29:de:a8:db:dd:8a:1a:6f:97:30:59:e8:81:e7:77:59:
fb:e1:4f:0a:47:52:52:ec:6f:d7:a0:fa:56:a8:26:ba:1e:4d:
98:e5:2a:11:30:be:03:4f:a6:34:39:db:1f:27:91:a8:a4:2b:
27:5a:a1:59:63:21:e5:24:6f:1a:b5:eb:2d:eb:06:99:b1:8b:
ef:9a:98:70:3b:1f:18:46:9e:78:a7:3f:b5:51:89:5b:06:58:
b7:e6:7f:ab:19:77:9b:65:02:4d:3c:e0:8e:a6:02:66:1b:16:
8c:a2:59:6e:b5:bd:7e:ae:90:74:ff:c5:a7:9c:96:e6:af:05:
98:0e:40:d8:e0:6d:d6:bf:42:5d:c3:7b:0d:d1:9a:40:10:65:
0f:75:12:00:69:ea:7e:13:69:b1:81:4f:4c:59:81:13:cf:59:
e2:b3:07:56:d5:0b:f3:d9:6f:4e:29:6f:b4:7b:88:88:6a:c3:
3e:cb:5f:10:e0:75:b2:f7:10:78:9e:7c:4b:62:5d:c6:d4:b5:
a8:98:98:34:55:a4:2e:70:65:d5:02:71:c6:d8:d2:bf:cc:a4:
90:22:d9:55:02:d4:cf:be:74:07:1b:0d:6c:c4:5b:09:88:21:
24:29:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:01 2025 by rpki-client