Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
File: Tx097mN940sTx0umz7TSBb5VYn4.cer (raw, json)
Hash identifier: 5hIS70LHSh0iG+6lgUJ8G6iZvAkAk2wHIYK8fJA9XXA=
Subject key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425218D2A70D7C674C888430502A1672C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39750
IP: 193.8.48.0 -- 193.8.53.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8d:2a:70:d7:c6:74:c8:88:43:05:02:a1:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:86:10:e5:9f:b5:cd:d7:18:fb:25:24:da:27:
4e:37:7e:ad:d1:a4:f0:33:d5:a6:20:0b:46:79:31:
b6:c8:d2:c8:17:69:8a:e0:06:67:62:50:10:3a:66:
5d:8c:84:0c:43:69:fb:6c:13:04:86:fe:48:72:c9:
b6:eb:35:bf:f9:de:f6:b0:7c:07:78:50:a0:40:0a:
2a:b2:9f:46:9d:fe:6d:4f:0c:cd:1b:46:2e:7f:c3:
c8:c0:76:b2:9d:f7:5b:17:b7:ff:f0:8b:3b:1a:3f:
99:de:c3:8e:dc:1f:1d:2d:c6:9c:35:7c:ab:d4:01:
70:98:ac:b1:b6:8a:ed:e8:30:f6:26:bb:8b:bb:59:
fb:2a:0c:e3:b9:61:35:57:d6:78:cf:c4:0c:ec:35:
78:1c:7d:16:4f:d1:f9:84:4c:fc:a9:f7:b0:62:ac:
99:80:b1:33:bf:20:95:5e:c1:d4:37:da:a9:79:c5:
8f:49:98:1a:16:92:1f:e7:2c:26:a4:74:cb:26:78:
ea:7d:10:06:85:19:73:f5:94:17:9f:32:b5:6d:8f:
d2:25:b8:95:1a:64:82:9b:23:89:e4:c2:b9:ad:4e:
12:5e:13:e3:06:62:85:ae:e9:5c:87:c3:6f:b7:1c:
31:47:8a:3d:5c:95:b4:89:b9:35:81:a8:f9:df:5d:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.48.0-193.8.53.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39750
Signature Algorithm: sha256WithRSAEncryption
65:c4:0e:e1:44:9b:89:d7:bc:1f:cf:8e:a7:f1:78:0e:3a:20:
14:1a:7c:17:fb:f1:bc:1b:3f:6b:e0:15:7b:37:cb:d7:2c:81:
45:a1:f7:8f:c4:1f:e7:86:1b:8a:d1:f5:52:7a:75:0e:f0:96:
41:6b:42:73:07:75:f6:64:00:43:71:df:57:da:d8:14:a6:d3:
13:d7:03:55:7d:36:16:82:34:cf:7b:05:d7:f0:0e:d9:2b:a8:
bb:70:23:5c:ef:e2:f3:f6:7c:a6:e8:e8:51:78:57:c5:ae:cf:
cd:01:1f:35:a3:81:f3:16:db:c7:cd:cf:1e:b4:db:f0:ee:4b:
4c:41:8a:af:66:e1:38:aa:dc:1b:12:4c:76:4f:dd:bd:42:df:
fa:a6:87:7e:7f:8e:f2:7b:4d:e2:6a:76:e0:d1:e7:f0:0f:45:
96:f3:7b:fd:31:4c:e5:19:c6:bb:a6:dc:d6:75:0e:7e:0f:d7:
7f:ca:72:40:d5:39:39:b9:d7:e7:f0:d9:39:60:bc:85:1b:63:
85:51:73:54:d9:f3:bf:99:65:fc:1d:94:8d:e6:05:1a:25:2b:
67:ba:48:6e:fd:e5:aa:df:92:45:3e:b9:df:83:2f:55:2b:d2:
e9:a0:92:18:9a:84:02:56:39:b6:fa:c9:ac:af:2e:65:fc:08:
f0:c7:0f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:38 2025 by rpki-client