Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer (raw, json)
Hash identifier: 2OVzSUiezKbPJE1op1SoXfb9SngU+tJJTa23tLSMCnY=
Subject key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942220032E0399B87B9C7D71AFD99D8AA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 45054
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:03:2e:03:99:b8:7b:9c:7d:71:af:d9:9d:8a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:fc:ae:63:a7:b5:23:b4:54:e0:0f:4b:52:
14:d0:ba:ba:db:74:7f:52:80:f4:03:fa:ba:ed:47:
4e:12:fc:52:8a:d2:5a:e2:28:7d:73:c7:ba:78:1a:
1e:87:f4:96:a8:f1:44:1a:3a:a4:1a:6b:70:42:15:
d9:0c:b0:9a:72:e7:98:ff:ab:50:d6:d3:07:e5:14:
c9:d1:44:2c:9e:69:55:ef:10:0a:ca:ac:05:49:5f:
b4:c6:0b:01:3c:79:1b:54:7f:49:a6:1b:91:96:15:
24:da:40:f0:4f:12:d6:bc:f2:da:66:22:4f:22:15:
41:1e:ea:c4:b6:dc:73:f0:51:43:a0:2f:c4:b9:02:
96:f7:aa:30:89:c4:8c:a2:53:3f:49:ce:f5:0e:ae:
4e:42:1a:35:5d:48:8b:e6:55:ad:77:23:75:21:44:
d4:04:c3:5c:dd:ea:f7:af:c9:75:42:6e:9a:42:68:
91:09:c7:ef:34:ce:17:10:03:a4:90:35:46:4a:3c:
e8:39:68:06:31:27:e8:a0:71:be:4e:97:f6:dc:25:
e7:1a:c2:c4:af:00:5c:d8:52:a1:48:b9:90:a5:66:
d6:a8:f7:82:b9:e1:26:ef:ac:8d:ac:c0:53:be:52:
7d:fc:7d:ad:56:74:3d:ef:0f:88:10:59:f2:5b:fe:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45054
Signature Algorithm: sha256WithRSAEncryption
90:ea:26:62:a8:b2:81:53:0f:cc:1f:46:58:d1:81:63:38:79:
6c:f7:21:9a:6a:c7:42:2a:37:22:71:9d:df:6f:18:27:1b:1c:
7e:29:ce:1d:80:5b:c4:d4:75:2d:f0:f3:31:75:74:09:30:7f:
70:ee:7f:78:68:81:64:18:55:94:59:1c:13:f8:a6:af:de:70:
cd:91:c4:cc:b0:34:fe:2c:27:9f:f4:c6:71:d3:55:c4:9a:d3:
ef:47:05:d5:3c:db:4f:45:fc:e6:af:42:dd:38:27:bf:1a:7a:
87:d0:01:75:90:29:a5:c6:38:ef:6f:c8:1c:e1:79:7e:e9:58:
69:89:e6:d4:15:31:f0:66:77:b3:3f:9b:4d:67:e6:38:b4:cd:
a9:de:69:28:04:c5:6a:b9:c5:15:72:52:9a:2c:b5:ec:04:a0:
6d:23:10:42:d4:dc:6c:2b:be:2c:c2:04:82:93:5e:17:8a:5c:
96:a7:06:6b:d5:80:3f:eb:1b:c9:b3:71:24:a1:c4:bb:75:66:
c7:6f:f2:f2:94:cd:fc:4d:0c:ef:c1:1a:85:06:9d:64:6b:a4:
ef:91:d5:65:00:fa:42:bf:30:e6:63:36:a1:d7:be:37:df:a8:
57:c0:1e:f6:8d:45:a6:84:18:4e:c1:77:2d:2b:4b:d5:7d:c5:
0c:e5:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:32 2025 by rpki-client