Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer (raw, json)
Hash identifier: el5K+G5nYsdZKjf+BoBwSq5Ad7HusmG52etbqS8fv74=
Subject key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D6024DB0F7352F94E01B1E9A018E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198854
IP: 194.33.83.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:60:24:db:0f:73:52:f9:4e:01:b1:e9:a0:18:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:d1:2b:f6:19:34:70:2e:aa:74:65:01:a1:
88:98:e9:b2:6e:cd:d0:b5:cd:a0:56:18:69:a0:09:
e2:4c:03:3a:c2:0e:b2:56:9f:02:e0:fb:ac:ce:c5:
26:12:16:3e:72:8d:ac:0d:f2:a7:bc:46:76:41:49:
d4:c5:b9:fd:aa:e3:ae:0d:99:3b:16:99:a7:cc:0c:
c8:2d:e7:b5:48:d8:f8:14:b1:25:4b:ef:f6:2a:0f:
fa:33:96:f0:cb:74:65:9e:21:64:90:50:bb:8d:cb:
48:39:49:85:20:96:00:2c:fc:ec:7b:b6:15:8c:b3:
89:5b:fa:fe:14:e2:ed:d8:0d:8a:da:0b:19:d2:5c:
5f:d7:d6:ec:e1:e1:7d:d5:8b:ed:ff:f6:5f:f2:6e:
4c:3a:ca:12:64:e8:72:f3:95:cf:1a:ca:3b:0f:f4:
55:93:00:58:a3:8c:92:7a:94:07:70:db:7a:ab:fb:
f4:1f:2c:d6:ed:15:45:f9:e7:9b:27:47:7b:26:9b:
4c:32:95:d8:01:1e:2e:3d:d5:7f:b2:e6:75:9b:4f:
1a:f3:d6:9d:66:8d:26:11:89:98:b5:d0:82:b2:b8:
44:98:ae:65:51:31:94:9e:f7:f0:c3:db:a9:9c:25:
af:71:db:74:28:5e:4d:26:5a:29:31:35:8e:e1:aa:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.83.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198854
Signature Algorithm: sha256WithRSAEncryption
71:c4:10:23:f8:64:56:63:1b:d5:97:7a:eb:43:92:58:43:7f:
5d:8a:0f:66:1d:06:bb:bd:5e:22:1e:0b:64:fd:10:33:d0:91:
73:1a:c8:72:f4:72:4f:20:9f:c6:5d:11:ab:89:95:5d:94:03:
be:02:c2:33:e4:b2:ea:3d:a3:c7:eb:6c:80:68:e7:71:91:07:
bf:3d:66:8a:de:93:54:33:ca:be:fe:13:e9:ab:da:32:6c:e6:
fd:66:d0:6c:56:7c:c5:5d:7b:d8:15:dd:92:2c:8c:a6:c1:da:
86:74:79:62:0d:e4:8c:48:d5:8f:84:83:6f:8d:bb:0e:74:e2:
7c:b1:d2:97:f2:e7:14:57:d1:ce:9d:18:14:81:f3:97:15:b3:
17:ec:a0:ea:bc:76:61:a9:11:cc:df:db:c9:25:21:ea:c3:fa:
1d:19:78:ba:28:6b:db:1b:1f:63:42:6b:79:f6:5f:8a:b1:cc:
35:ec:dd:66:23:ac:78:e8:aa:f2:74:cd:99:74:a2:82:89:11:
1b:ef:ba:0a:29:8e:af:9b:22:23:58:c5:42:c5:aa:d5:8b:84:
2a:9c:c2:39:e9:18:01:4c:78:f5:da:37:e3:b8:07:1f:8d:3c:
82:29:e1:2a:ab:bf:a9:e5:b2:68:9b:3f:da:15:b1:7d:c6:ae:
25:d5:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:14:05 2025 by rpki-client