Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
File: Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer (raw, json)
Hash identifier: IjtgXYnLOUgs4RDh5UqOzjG9uZ8/zu6IEmbGqCT9VSw=
Subject key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214448227EF2A0042607F8F78B81507C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 157.190.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:48:22:7e:f2:a0:04:26:07:f8:f7:8b:81:50:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:65:63:e2:fb:68:d6:f2:50:e0:fb:63:7c:
c0:14:f3:bf:cf:fb:07:82:3d:4a:cf:b6:cd:6d:0e:
95:77:4b:cb:a7:f0:7c:98:53:25:91:9e:7a:0e:9d:
05:13:a2:25:96:69:fa:73:93:6e:5f:28:f8:62:5b:
67:ac:27:68:85:33:eb:f8:d9:ef:26:45:92:55:c2:
17:6f:89:ef:de:45:23:b3:68:a0:38:68:52:8b:da:
90:ac:2e:ca:25:ba:f3:77:bc:b9:f3:d7:16:e9:5b:
c7:41:cb:c4:19:96:71:f6:84:a7:7c:b6:dd:f5:55:
45:bc:1e:30:01:96:ea:8b:c9:77:62:f2:65:86:eb:
24:a3:25:42:28:b0:32:e0:90:28:30:90:de:37:b4:
cc:22:1b:ac:95:ea:c5:2a:33:42:e9:d1:b7:0a:3e:
34:dd:98:2f:e4:a1:94:1a:b5:9b:34:09:a0:02:8d:
b4:f7:7b:ca:f1:cd:22:54:22:0d:93:33:d5:98:48:
d4:3c:eb:ea:0f:38:02:1a:94:f2:05:17:03:99:a1:
d5:70:bc:f9:59:f1:ae:5b:9f:61:61:2d:d8:8d:c9:
7e:35:ad:2c:6d:17:8b:f7:be:26:50:0b:f8:2a:f1:
70:04:27:37:f6:4d:8f:98:d3:83:a4:b6:b6:36:41:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:a6:99:03:cf:2d:85:e8:96:2a:ba:b8:48:75:10:25:8e:35:
bb:5e:0d:c7:a1:f1:cc:1f:25:70:47:d1:de:eb:bc:e7:ab:70:
29:17:cd:8b:a3:34:bc:14:46:59:75:b2:ba:00:24:61:3f:35:
3c:ab:54:5e:8e:9a:50:ce:01:5a:f9:30:f6:04:f9:4d:b1:af:
66:e7:37:be:df:e0:36:ac:94:19:8c:55:93:53:6b:da:2f:df:
0d:24:a2:a3:66:c8:d1:47:eb:93:9a:59:0a:b0:b0:92:e3:9a:
a6:fd:a6:f5:4c:de:8d:af:41:61:df:14:7f:44:06:50:5b:d4:
6f:51:2c:4f:9e:fe:da:27:5b:49:50:7b:78:5e:89:0c:d5:6a:
4f:76:e7:ed:5a:ec:9b:c4:eb:80:f4:e2:e9:31:14:16:c9:6b:
7a:dd:24:d6:e2:24:b4:9d:a9:c0:b3:43:40:30:89:57:20:28:
28:9e:c6:2a:31:e8:a7:17:4d:88:f7:ec:8f:f6:d3:8c:98:c7:
65:4c:e5:d9:15:ec:f5:61:a1:5d:89:39:cc:93:30:c7:95:46:
0b:77:04:4c:4f:f0:9e:20:39:4a:ca:01:6c:02:89:fa:74:80:
13:32:14:80:3a:5e:9c:5e:f3:43:b0:26:1d:b1:49:b6:d2:da:
ec:5c:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:24 2025 by rpki-client