Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
File: j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer (raw, json)
Hash identifier: JZUnzBWeDsp4XOsiL2vDJKfDMJcGrN6OxzM5+ovvIsM=
Subject key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DD94B8D0E46296DB53F78343A7CCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29434
IP: 93.94.192.0/21
IP: 193.200.170.0/24
IP: 195.85.255.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d9:4b:8d:0e:46:29:6d:b5:3f:78:34:3a:7c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:f9:d5:24:0e:55:76:53:2c:a0:5a:64:ee:
49:93:97:f1:64:db:33:70:38:74:52:ce:c5:fe:6c:
a5:b9:af:c7:5a:ee:87:4d:42:be:c2:33:45:d2:bf:
a5:f6:3e:b1:fb:6a:46:ef:b2:14:e5:41:8d:a0:91:
4e:a3:63:2e:72:ad:7e:ad:e8:df:55:e2:db:da:a7:
b1:7e:a9:b1:d7:62:04:5e:39:5c:ce:05:8c:96:72:
5d:6b:59:ac:1e:3d:2b:ee:f2:4e:8d:53:09:e6:d8:
c1:84:12:38:94:c9:9f:59:0f:59:99:b1:85:d1:74:
0d:58:66:bb:42:cf:c4:6e:b7:0f:77:43:6d:b1:37:
0e:a2:4f:84:fd:69:68:1a:6a:90:f6:63:12:97:cf:
20:9f:8e:5e:c9:3d:c6:c6:c0:89:89:e4:14:19:7e:
13:74:67:c8:97:36:e6:68:4c:9f:5f:1a:b0:3e:04:
f1:20:b9:38:da:1f:06:ef:e8:0f:3e:36:5d:aa:28:
bd:e8:68:52:ce:65:0f:31:a1:c7:0b:ad:fe:54:85:
c8:b3:b3:8a:3b:33:bf:cd:e6:9e:0a:87:75:04:e9:
dc:1c:92:ec:df:69:bb:1a:be:d4:2c:0f:3c:65:79:
66:66:29:b3:43:a2:1c:e5:f6:45:11:c1:31:0f:8e:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.192.0/21
193.200.170.0/24
195.85.255.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29434
Signature Algorithm: sha256WithRSAEncryption
4f:7f:f6:23:d9:33:2a:d8:b3:a9:6d:89:a0:83:a0:d3:a8:75:
d3:a0:80:6c:67:69:fd:2c:1f:67:67:ec:6a:33:06:84:56:8e:
99:46:72:b1:6a:62:63:7e:80:9e:7b:a0:0e:51:be:bb:6b:50:
ce:bd:2b:29:20:73:6f:38:fb:0c:c4:09:67:c9:92:56:11:cf:
e5:ff:67:c0:6d:86:d5:41:5d:06:5f:04:c4:24:ff:29:33:70:
24:a5:db:e8:ca:79:6b:e7:a4:15:b2:25:05:69:6b:0c:09:f5:
0b:c1:56:e0:45:8a:79:0b:a3:dd:0c:f0:63:09:23:75:b1:12:
d9:2c:cd:fd:93:51:34:c9:7a:b1:6d:c2:24:cb:81:e7:b4:75:
69:dd:3f:52:aa:be:fa:6e:3e:ff:c4:b0:e8:b3:25:d4:32:f5:
e2:a2:fd:a4:ee:31:53:9d:1f:f6:f6:15:37:a6:30:56:c6:f4:
03:52:c8:5e:50:a9:a0:4b:40:8c:57:1c:a6:06:63:2f:c7:47:
92:6c:54:03:97:a7:12:13:1c:7d:50:55:6e:3b:e8:03:a6:ad:
da:b3:c8:b8:a9:77:50:e4:eb:50:2d:60:30:51:f3:59:92:73:
41:40:85:4d:ad:18:ce:28:6e:bb:db:04:a4:a5:10:4e:bf:81:
42:d3:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:45 2025 by rpki-client