Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7JBVnQkwTyLR1CwsyRiIBc_10wY.cer
File: 7JBVnQkwTyLR1CwsyRiIBc_10wY.cer (raw, json)
Hash identifier: FJYMtNSuVGs9t71hsi6qeEwNzv+XZEp+RhzrCSeRicA=
Subject key identifier: EC:90:55:9D:09:30:4F:22:D1:D4:2C:2C:C9:18:88:05:CF:F5:D3:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB007A8EFB1C3F774318EFCC0975246
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210360
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:07:a8:ef:b1:c3:f7:74:31:8e:fc:c0:97:52:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec90559d09304f22d1d42c2cc9188805cff5d306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:02:2f:3e:03:73:f6:da:01:bf:49:c5:82:
1a:b8:19:07:17:00:fc:6f:90:89:ae:93:47:6a:dc:
bf:8d:42:36:94:64:f1:46:d8:98:02:2b:17:07:fc:
38:b6:4a:08:cc:92:64:28:20:1c:64:88:b4:e8:ff:
e7:10:2b:81:60:c0:6d:d4:e7:3c:8f:f3:06:fd:a2:
a4:ac:fa:33:90:e4:c9:d3:e7:0b:6a:d2:85:9e:c6:
22:12:3e:9d:fb:43:b9:89:83:d6:95:c9:26:cc:66:
4f:1c:a6:1b:71:2c:01:d7:96:4b:3d:77:8a:66:28:
35:7c:b0:f7:17:92:08:d2:7d:fa:a9:8c:3c:5b:45:
aa:e8:e0:3b:23:42:9f:48:b4:e4:bb:37:18:46:fa:
50:ad:30:28:23:93:64:c9:b3:b5:8c:bd:c1:da:3c:
73:b3:26:cb:25:c9:5c:97:13:7d:37:1d:57:87:9e:
d6:a0:d1:88:df:a0:e9:7a:82:0f:29:13:bc:7a:3f:
29:4d:46:81:d9:30:4f:25:7a:b8:b8:35:7b:dd:5b:
53:29:23:60:ba:42:18:42:5f:71:20:f5:64:f7:1c:
b7:aa:71:c3:72:73:b2:e9:95:41:4d:f4:cf:15:51:
f7:ea:d6:fe:8d:14:5d:be:7e:d8:b2:23:e3:ae:29:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:55:9D:09:30:4F:22:D1:D4:2C:2C:C9:18:88:05:CF:F5:D3:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8c5196-6bf2-4572-bf12-4e382fc564db/1/7JBVnQkwTyLR1CwsyRiIBc_10wY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210360
Signature Algorithm: sha256WithRSAEncryption
59:5f:f0:92:cc:e2:c4:9d:93:a0:ba:90:7f:6d:47:3e:d6:70:
0b:20:99:7c:0d:86:e5:2d:7e:c1:cc:6d:20:83:41:5a:c6:fa:
9b:19:ee:ee:69:f0:31:04:2d:71:34:c4:93:28:5e:69:55:7a:
32:f3:7f:74:08:6b:42:be:e1:85:04:51:88:ca:0d:25:09:92:
ad:94:e9:02:db:77:e4:ca:bb:a7:39:eb:a7:23:51:ff:51:75:
5a:88:ca:c1:8d:03:8c:db:2b:43:87:8d:5d:dc:b7:4a:d6:f6:
b4:74:4e:69:e1:f6:a5:81:5c:0f:ee:7a:b1:d9:6e:3a:4f:8f:
71:45:74:44:62:51:48:d4:0c:4c:40:b7:4d:0e:47:0d:09:3b:
e2:aa:d9:bb:ff:1a:da:dc:78:a2:1a:ee:f8:23:67:ec:04:b2:
17:0e:b4:5b:86:95:d9:05:f9:e0:0a:2f:ba:ab:46:5b:29:a1:
d0:fa:55:1a:67:f3:60:b1:92:37:9e:78:51:f8:a8:a8:a1:8a:
0d:50:d7:a1:d0:f0:49:6a:09:98:d7:80:59:14:13:66:d5:7c:
e4:c6:e8:79:71:30:d4:de:0b:bf:ea:9b:87:f6:98:3a:02:49:
e5:dc:e9:f0:45:cd:4a:9c:c1:ea:74:69:c7:04:f5:e5:4a:48:
bf:ff:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:37 2025 by rpki-client