Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JUussnEsJZyHPN8MEZbCHlI6ETg.cer
File: JUussnEsJZyHPN8MEZbCHlI6ETg.cer (raw, json)
Hash identifier: SjCto0XrPriUsFmD4MNSxsSi9B2xVzwuXgk2oucMiB8=
Subject key identifier: 25:4B:AC:B2:71:2C:25:9C:87:3C:DF:0C:11:96:C2:1E:52:3A:11:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01839E3C0F125C69AF7E7D5FC6FA2F277735
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Oct 2022 14:24:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43582
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:3c:0f:12:5c:69:af:7e:7d:5f:c6:fa:2f:27:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 14:24:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=254bacb2712c259c873cdf0c1196c21e523a1138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:2d:7c:ec:06:2e:10:47:0e:9c:cf:22:b5:
a9:f8:19:0c:73:89:2e:76:dd:f6:dc:81:c4:b7:a0:
88:e5:e0:2d:ab:29:a4:57:b0:48:70:4b:49:6b:3c:
3b:9e:03:b8:be:76:a3:2e:90:8e:55:2b:4f:92:3a:
b8:b1:1e:b2:c3:df:08:e8:ea:42:8b:f0:76:e1:f2:
84:3e:3f:05:ff:58:99:32:c4:dd:a1:0d:27:11:c1:
17:a3:9b:93:99:e1:4b:f2:14:24:de:be:76:92:37:
7b:f9:b3:fa:73:33:e1:e8:0f:4b:46:cc:0b:63:2a:
f8:ea:b5:6b:eb:a4:5f:9e:50:c0:9e:94:7e:7a:fb:
df:be:37:83:8e:0b:88:cd:9d:23:c9:89:b2:50:c5:
6a:0d:f1:50:ab:78:18:fe:bb:43:b5:f7:0c:61:8b:
66:cf:5b:bc:47:8f:1f:2e:7b:98:f7:d0:87:3d:b9:
6b:48:a2:9f:8d:5e:2b:63:d7:1e:77:ff:6c:a9:3f:
7b:a9:a9:9a:c8:0c:71:bd:6e:a8:4d:ca:b0:75:bb:
1c:91:c9:f8:09:c9:8f:6f:8d:0c:be:a7:fb:56:da:
8e:e0:07:71:14:cd:65:17:a7:cd:cd:7e:55:47:e5:
76:2b:c0:41:66:88:e3:bd:48:44:a9:bc:45:2d:7e:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:AC:B2:71:2C:25:9C:87:3C:DF:0C:11:96:C2:1E:52:3A:11:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43582
Signature Algorithm: sha256WithRSAEncryption
00:8d:d4:59:ca:3f:ec:13:d9:7f:a5:cc:3f:d6:3b:c6:13:50:
98:7c:00:de:82:07:89:00:f3:f6:f8:d1:9e:68:f0:2c:ec:26:
9e:cf:cb:0a:0c:85:73:4d:7d:c3:8d:66:63:01:03:61:20:d1:
2e:35:82:04:e7:6a:3a:24:fa:46:70:39:56:6a:20:2f:fc:d2:
2f:ee:f4:69:d4:d1:e6:b5:3d:72:95:df:84:63:56:4b:16:8d:
b9:c5:13:41:2d:44:6b:00:1d:e9:44:94:f0:2f:6e:d8:62:05:
b0:4f:2c:f6:8c:e7:3a:b1:b3:3d:43:67:d4:16:67:d7:ff:3c:
af:aa:12:63:a0:eb:c5:26:13:3f:db:8b:cb:00:7f:c8:00:23:
3c:26:99:33:cf:88:6b:b9:45:ff:f6:76:6a:c8:0d:90:7d:69:
3f:8d:1a:d6:46:03:c6:51:cf:eb:02:5c:96:5f:3b:db:52:93:
f2:3e:53:5b:af:0f:b1:c2:07:49:ca:9f:d4:27:64:24:7b:47:
fb:80:79:f1:39:ea:72:f2:02:00:c6:0b:c3:b4:1d:02:cb:9d:
48:c2:2c:f8:70:29:a3:ec:60:7e:4b:71:e5:f4:05:bb:fd:82:
7e:75:1a:e8:25:98:e0:45:cf:c2:bb:1a:97:e1:6a:26:b4:4f:
5a:1f:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:26 2025 by rpki-client