Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
File: TJMCnFsmOc0pufndUpTMlO9S1q8.cer (raw, json)
Hash identifier: jfDPj3hN+GevtjVimFcuuX1gC7xuGTqZLcThwttKNho=
Subject key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F42F5CB5C672C6FCBF6EEE7F18B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48707
AS: 212917
IP: 91.230.200.0 -- 91.230.205.255
IP: 185.237.28.0/22
IP: 185.238.137.0/24
IP: 185.253.212.0/22
IP: 195.2.208.0/23
IP: 2a0c:b40::/29
IP: 2a0c:51c0::/29
IP: 2a13:300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f4:2f:5c:b5:c6:72:c6:fc:bf:6e:ee:7f:18:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:43:3d:50:13:ed:dc:2e:20:b2:8e:37:d9:
57:cd:da:c7:fd:fc:af:5b:af:ec:cd:c1:d2:e2:04:
45:41:f8:c5:54:fe:74:55:24:21:05:69:8f:26:d3:
ea:45:11:a7:e8:c6:08:c7:44:82:40:e7:91:33:dd:
46:67:1d:6f:00:4b:a2:55:fe:79:4e:f5:a6:66:45:
16:44:10:15:aa:6f:33:eb:a7:df:5b:68:b8:f3:1e:
fa:33:6f:9d:18:83:cb:4e:42:ac:d7:84:e4:12:cc:
91:f1:c4:39:47:a5:77:75:4e:44:3b:76:db:a2:16:
34:9c:1d:80:1c:b7:f2:7a:72:2b:36:c3:90:02:8c:
87:f6:f1:f3:f5:1a:c4:43:a5:ab:58:1f:b4:4a:d9:
c2:05:34:9d:0d:19:9f:81:af:bf:19:24:88:a3:0c:
d5:d2:05:e0:1a:df:f7:d0:18:16:48:cf:06:2b:ed:
1c:18:96:32:03:5a:77:1c:07:cd:fe:cc:02:a5:36:
eb:0a:33:89:c4:b9:91:e8:a1:8b:66:9a:51:73:fd:
44:73:42:25:b4:b8:18:7b:29:74:1f:ee:f4:96:68:
eb:b9:c2:50:a3:24:68:71:1b:57:60:6d:f7:6b:c0:
72:87:d8:7f:4b:4f:94:18:21:72:80:6a:57:0e:b1:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.200.0-91.230.205.255
185.237.28.0/22
185.238.137.0/24
185.253.212.0/22
195.2.208.0/23
IPv6:
2a0c:b40::/29
2a0c:51c0::/29
2a13:300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48707
212917
Signature Algorithm: sha256WithRSAEncryption
22:c9:c3:7f:e6:2b:5f:e8:dc:f3:e5:d9:26:25:8d:9e:f6:2e:
f3:1e:3e:0d:e6:15:84:ea:aa:97:aa:80:9e:d3:9f:ad:06:68:
41:a9:25:b6:ae:f5:0d:3e:03:58:cc:f1:b6:b5:d7:11:83:da:
84:52:e3:d5:ea:d4:4d:9b:22:1f:c9:8b:2f:3a:69:51:f6:d4:
89:75:39:bd:34:dc:49:82:0e:ba:18:73:f5:fb:85:9e:e2:50:
7b:36:2d:30:35:56:95:eb:7a:0a:b2:38:39:62:25:d1:eb:b4:
74:21:f1:a9:1d:7e:8b:0a:3b:be:74:81:6b:dc:3e:81:48:a0:
c8:2d:1c:d1:2f:cb:44:e5:a0:3c:b8:45:8b:e3:9b:83:38:7a:
f1:47:8b:b9:67:5b:5b:53:74:8b:59:a3:ae:70:95:1b:2b:f9:
b0:27:3e:36:6f:b4:97:39:1e:5a:6a:01:af:39:86:86:5d:d5:
5a:a6:51:a3:3f:2c:d2:6e:26:a1:5b:a6:e7:d9:c5:06:56:52:
bb:0f:fe:80:d9:dc:58:30:d7:10:ca:ad:ee:59:cd:68:77:7f:
9d:87:3f:86:a1:85:50:6c:5a:73:4a:79:3c:3d:2a:c5:8f:e8:
3d:bc:55:5c:54:3a:b8:c2:7c:93:5b:22:c0:4a:40:27:13:3e:
fe:e8:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:34:09 2025 by rpki-client