Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer (raw, json)
Hash identifier: ii1nB3RfYs14OB4CfbBebVQMfiraDumIAb/Id+Q4EPM=
Subject key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3A632DD2C8CB9CEC68A7677274659
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41916
IP: 195.138.196.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a6:32:dd:2c:8c:b9:ce:c6:8a:76:77:27:46:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:25:5f:16:62:33:e3:cb:7d:bc:90:9f:c5:
29:64:17:09:8c:b1:04:d1:fb:ae:7a:a1:a2:f7:f1:
23:b7:a2:d9:51:38:e4:cb:46:56:66:0b:5d:a9:35:
d2:23:e3:d2:7e:53:af:36:e2:17:41:78:cc:aa:69:
30:2e:3f:7d:52:51:37:cd:69:e8:18:8b:56:33:74:
cd:d5:05:83:2f:15:e8:d0:8b:6b:d2:44:af:92:2f:
54:b0:65:1b:d2:e1:d4:30:2d:65:40:96:74:fd:1b:
b6:a0:17:e4:d0:36:b3:b2:35:42:2e:9a:f3:4d:6f:
d9:3c:af:69:a4:e1:c6:2a:c1:19:50:e9:b0:ea:fa:
a0:23:00:2d:fb:0f:99:80:8c:3f:57:ab:51:4d:c7:
73:0e:e8:a1:7a:44:eb:1f:e0:ab:b3:a7:48:5d:1a:
93:62:d1:9c:73:99:a3:a5:6c:72:f3:18:35:04:e3:
89:6a:8d:57:c0:29:db:4a:03:80:43:ff:c9:70:2a:
8d:21:b0:c4:d0:f1:30:68:2c:61:50:c0:15:29:2a:
e3:a7:c4:60:fa:02:09:2a:66:08:f8:c6:c3:72:d7:
5f:99:ae:dd:e1:ea:d7:08:53:4b:49:34:40:e6:f0:
b5:ce:b2:21:79:69:1e:9c:5e:e4:15:82:4e:f2:76:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.196.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41916
Signature Algorithm: sha256WithRSAEncryption
5b:60:dd:ed:38:c4:88:98:a2:e4:a7:97:5e:d3:c7:43:47:49:
4e:40:07:99:4f:97:b6:d4:d7:e2:7a:15:7f:37:a9:a4:b3:ba:
27:68:6f:b9:1d:4c:6b:b1:44:c0:0b:3f:94:d7:cc:6d:09:49:
e5:c1:8e:54:e9:3a:b5:7a:07:bd:c8:8e:cc:c4:80:7d:0c:8d:
bf:25:03:3b:28:04:0f:2f:f7:d7:4a:8e:0e:60:c7:01:0e:02:
9c:a8:0b:b8:bd:4f:9b:d7:28:ce:2f:9c:0f:d1:6c:4e:c8:3c:
7a:2b:f0:b1:94:fc:3d:24:ca:9f:88:bf:36:d3:f7:d9:30:db:
fe:7b:71:46:c9:98:e6:45:7d:6e:a3:52:54:22:68:87:4f:e5:
ee:4b:76:49:a5:a7:46:0f:70:19:1d:15:06:ca:20:de:58:69:
3c:0e:a7:11:0a:20:be:0a:1f:2e:ae:55:c8:b4:a2:6d:4e:eb:
2b:ea:07:3d:95:c5:b5:48:74:f5:88:49:39:7f:a1:07:0d:04:
e9:09:60:d3:37:42:82:52:64:30:90:66:9e:d3:ed:11:12:ff:
78:6b:0a:0e:c0:0d:ec:3d:d1:ba:25:77:be:b1:72:1d:d9:dc:
4c:79:99:21:7e:7e:a6:48:af:77:86:6e:dd:b0:d4:c1:82:47:
94:6e:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:04 2025 by rpki-client