Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer (raw, json)
Hash identifier: 45jEK527Klwv6EeXHn9p0+h420NevIZ71/EhtYTi8aY=
Subject key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B251002508D4F4AC35B020D7F1A08D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208881
IP: 45.14.36.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:51:00:25:08:d4:f4:ac:35:b0:20:d7:f1:a0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:80:3f:96:54:9a:4b:6d:7e:41:a0:6c:f4:
e5:56:9a:8e:90:fa:c9:19:79:58:45:80:f7:26:07:
f3:a4:6d:ab:99:70:4b:a8:f7:86:3f:6e:a1:b5:d0:
7c:f3:97:b0:8e:c8:50:f8:28:7c:a8:a7:86:10:49:
cd:b2:87:d6:a9:4e:5e:96:ab:3d:ec:e1:a3:ef:d1:
d3:8e:1e:49:ec:a0:b8:16:84:d5:e2:1b:b4:d7:6f:
61:21:9c:51:4c:3b:9f:75:0d:a1:2f:3a:fd:03:4d:
89:19:9d:57:25:89:fd:5d:57:a8:92:0e:51:c9:ce:
7f:8e:9a:43:89:41:a6:e4:47:dc:78:cc:df:40:f4:
9e:7d:ac:6d:35:f8:17:0a:0f:2e:ad:d7:a3:12:0a:
1e:54:9a:18:68:76:2e:08:77:4d:68:78:02:7f:06:
40:58:2e:4a:ea:39:0e:c0:6a:5b:25:cb:78:ba:50:
79:14:52:f5:4b:2b:19:ea:0d:2f:30:8e:5e:15:e6:
57:28:82:25:87:8d:60:7d:76:cf:35:23:1c:5f:7c:
47:c7:0c:34:a1:d3:d4:a4:0a:61:3c:ee:bc:35:e3:
51:fd:13:1d:6c:b5:47:07:65:30:14:a6:97:3c:c9:
13:1d:17:64:ce:eb:73:3b:24:21:3d:83:56:55:2d:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.36.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208881
Signature Algorithm: sha256WithRSAEncryption
69:f4:f4:0b:3f:db:cc:0f:b5:78:80:b5:be:07:8d:5f:3f:ec:
41:e5:6f:67:98:a9:77:6d:68:03:e4:6e:27:82:06:46:a0:bd:
ba:65:7b:a2:39:92:cc:01:35:e8:3a:39:bd:f9:50:ae:d7:a3:
d1:33:67:e5:11:8a:56:81:b1:6e:15:3f:60:be:68:88:23:7f:
c0:1b:19:26:21:ac:30:94:c7:72:4e:a1:56:c0:39:f9:3d:c7:
86:af:83:65:0b:a3:df:70:a9:34:42:f9:c1:82:5e:54:2a:f8:
87:d9:f7:f3:f7:ce:c3:ec:50:3a:e3:78:4d:ce:02:ad:50:dc:
ff:30:f7:30:4c:97:94:b0:ae:76:0d:56:af:d2:b0:30:63:fa:
51:9a:02:9c:e4:b8:dc:41:4f:1c:6c:32:c9:c5:57:51:93:22:
96:ea:df:b4:cc:31:92:9d:d8:e5:33:0b:4e:b4:27:2f:a2:55:
b4:0c:37:b0:65:85:02:dc:0a:62:50:0f:97:ef:43:a7:67:94:
03:37:c7:5f:c3:c2:4d:45:65:36:33:b6:68:34:0a:04:04:9a:
2b:94:9a:27:32:42:73:d2:f4:85:33:1c:9f:c3:75:0a:b7:da:
64:66:26:6f:4c:1c:19:c4:3f:ef:44:b6:5a:0f:70:2b:d8:5e:
3c:55:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:51 2025 by rpki-client