Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
File: jynNHq0DjoW9nTMswYrDCeBiDFE.cer (raw, json)
Hash identifier: 0cdZUGY2kTE3ynXHfaETu0ESWE0v4eWtG8Ck36hsdTY=
Subject key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942445792A1EEC1EBE07C1DB215EA00583
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197171
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:79:2a:1e:ec:1e:be:07:c1:db:21:5e:a0:05:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:08:bc:42:61:11:04:a6:41:4a:57:32:46:
92:0c:43:9a:11:85:0b:79:e3:80:39:9d:45:f4:39:
39:91:d5:46:b4:f6:11:8a:03:c6:e6:be:3b:e1:b7:
87:c8:5d:6e:56:2c:0f:5d:df:ae:67:6f:cf:fc:02:
70:f7:61:41:18:6e:c8:d7:b1:7b:6b:bd:63:63:d9:
9d:00:ba:41:97:27:c8:04:87:c6:ca:9b:3b:2a:6c:
84:c7:91:89:17:bc:68:d2:47:d8:21:0e:0e:99:92:
95:e9:8e:ed:f2:e1:05:e9:88:2c:6c:96:41:09:41:
d9:07:3b:ad:eb:30:ae:c4:f4:db:a8:05:bc:10:10:
9d:4d:8c:fe:9f:03:a1:75:55:b5:d7:2d:3b:0b:0a:
85:f8:d9:bb:f1:cd:69:b3:9e:88:d6:40:e0:23:1a:
c3:ee:ea:3e:72:87:c0:4d:91:d4:e3:5d:13:76:7f:
72:f0:59:13:bd:c2:c8:19:b1:2d:92:03:d6:01:ca:
f1:dd:d6:ca:50:5d:8e:38:84:24:36:a9:07:53:9c:
cc:93:b4:4c:d0:68:54:12:ab:df:9d:cc:97:d4:cb:
94:1e:e0:20:18:77:50:6e:74:95:25:0a:cb:ba:4b:
d4:de:0c:06:a6:6f:ee:a5:82:b6:cd:24:95:a2:ee:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197171
Signature Algorithm: sha256WithRSAEncryption
53:aa:81:ce:cb:e2:ab:6f:ba:01:93:77:ed:ae:3b:78:8f:45:
54:78:ca:e4:f9:b6:ec:d6:44:d1:57:02:2a:2d:a5:ba:02:62:
a2:0e:4e:68:27:cd:25:ed:17:40:b2:c1:52:c4:bd:35:21:00:
d0:b8:70:59:34:32:01:6a:5b:bc:37:41:a7:81:7b:8a:b0:87:
fe:e2:52:10:d2:bc:6b:34:10:04:87:17:d6:5a:39:8c:fd:c7:
21:4c:8b:4d:5f:78:b1:d0:a8:46:d5:96:e2:9d:68:4a:3a:bf:
07:50:41:2f:11:53:f3:67:dc:23:2a:56:7d:ab:3f:6f:5d:c4:
d0:7f:ea:a9:cd:d7:f9:8f:05:dc:f9:f4:9e:c2:22:1d:df:da:
ba:28:35:45:d4:42:f3:3d:5c:18:aa:08:2b:71:5d:dc:e5:b3:
e5:cb:e4:18:5e:08:d4:52:c9:2c:05:0c:aa:b0:7b:66:8f:ee:
c9:00:61:9c:76:dc:6e:b9:4f:db:7c:96:2f:52:20:c9:91:d4:
fb:39:d7:54:ff:e3:48:70:6c:66:13:f3:90:34:0f:cc:00:65:
aa:ff:d8:6e:8b:a2:32:05:c5:fa:de:73:5b:ea:2c:12:7f:fc:
40:7e:00:7a:0e:84:7a:6a:29:4a:96:0e:46:09:9a:dd:a6:38:
43:7e:37:fc
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQkRXkqHuwevgfB2yFeoAWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjI5Y2QxZWFkMDM4ZTg1YmQ5ZDMzMmNjMThhYzMwOWUwNjIwYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkAIvEJhEQSmQUpXMkaSDEOaEYUL
eeOAOZ1F9Dk5kdVGtPYRigPG5r474beHyF1uViwPXd+uZ2/P/AJw92FBGG7I17F7
a71jY9mdALpBlyfIBIfGyps7KmyEx5GJF7xo0kfYIQ4OmZKV6Y7t8uEF6YgsbJZB
CUHZBzut6zCuxPTbqAW8EBCdTYz+nwOhdVW11y07CwqF+Nm78c1ps56I1kDgIxrD
7uo+cofATZHU410Tdn9y8FkTvcLIGbEtkgPWAcrx3dbKUF2OOIQkNqkHU5zMk7RM
0GhUEqvfncyX1MuUHuAgGHdQbnSVJQrLukvU3gwGpm/upYK2zSSVou5IzQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFI8pzR6tA46FvZ0zLMGKwwngYgxRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzcwYjcx
NS1hNGY3LTQ4ZDQtOWNjYS02ZDA3NTQ2ZjdhNWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNzBiNzE1
LWE0ZjctNDhkNC05Y2NhLTZkMDc1NDZmN2E1YS8xL2p5bk5IcTBEam9XOW5UTXN3
WXJEQ2VCaURGRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMCMzANBgkqhkiG9w0BAQsFAAOCAQEAU6qBzsviq2+6
AZN37a47eI9FVHjK5Pm27NZE0VcCKi2lugJiog5OaCfNJe0XQLLBUsS9NSEA0Lhw
WTQyAWpbvDdBp4F7irCH/uJSENK8azQQBIcX1lo5jP3HIUyLTV94sdCoRtWW4p1o
Sjq/B1BBLxFT82fcIypWfas/b13E0H/qqc3X+Y8F3Pn0nsIiHd/auig1RdRC8z1c
GKoIK3Fd3OWz5cvkGF4I1FLJLAUMqrB7Zo/uyQBhnHbcbrlP23yWL1IgyZHU+znX
VP/jSHBsZhPzkDQPzABlqv/YbouiMgXF+t5zW+osEn/8QH4Aeg6EemopSpYORgma
3aY4Q343/A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:11 2025 by rpki-client