Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ejTDhmUhrHcwgKfneJSrqxpGzSk.cer
File: ejTDhmUhrHcwgKfneJSrqxpGzSk.cer (raw, json)
Hash identifier: 04wvqvXEjD57WKPcBlV2kMq2D6EysLQpZZhDN/RJ0lw=
Subject key identifier: 7A:34:C3:86:65:21:AC:77:30:80:A7:E7:78:94:AB:AB:1A:46:CD:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9A2541BDD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/ejTDhmUhrHcwgKfneJSrqxpGzSk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 01:52:15 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 49629
IP: 5.181.100.0/22
IP: 194.8.140.0/22
IP: 2a0c:b2c0::/29
IP: 2a0e:8000::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662050029014 (0x9a2541bdd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a34c3866521ac773080a7e77894abab1a46cd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:c0:7d:6a:e5:3a:a7:d1:f8:ac:a3:5f:0c:
f7:89:7a:53:d2:c4:57:75:74:5f:70:a7:08:90:6e:
6c:6c:d5:c0:41:c6:61:b3:7a:7f:4b:12:7d:fd:19:
80:6a:66:1b:da:ae:3d:c3:17:e4:19:8f:ac:1d:2f:
22:e1:8d:f7:56:f3:88:88:05:f4:76:9c:6f:7a:f2:
c7:64:57:e1:7a:04:f7:10:0a:db:14:4b:44:8f:08:
55:22:d6:21:9d:e5:bf:80:be:a8:09:e4:4c:8c:aa:
d5:0d:6a:f4:02:cd:21:3e:c3:3a:96:4c:af:73:a1:
41:a8:fe:f7:2e:12:f6:37:e6:13:25:62:79:f2:14:
46:c5:d4:0c:0c:2b:20:2c:21:d7:61:a9:6d:d4:7f:
df:3f:88:ac:58:cc:c8:2b:17:56:c9:6b:0f:cc:e5:
5c:ac:a7:1c:ee:72:ca:5d:5c:7b:cd:ea:a5:aa:25:
72:96:cf:06:15:f4:0b:98:b4:fc:8a:cc:fd:e6:cc:
3b:45:e7:18:a4:4d:7e:0f:56:f5:7f:2b:33:d5:b5:
59:d1:ad:27:17:b2:c9:ea:6c:6e:f3:5e:bd:80:31:
08:bc:d8:17:9b:99:ac:24:ef:3f:48:86:9d:e1:1f:
95:14:00:6d:cf:9c:90:72:12:69:58:c4:27:a2:95:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:C3:86:65:21:AC:77:30:80:A7:E7:78:94:AB:AB:1A:46:CD:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd7e2c-8a50-4fcc-81e2-2db5e09795fd/1/ejTDhmUhrHcwgKfneJSrqxpGzSk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.100.0/22
194.8.140.0/22
IPv6:
2a0c:b2c0::/29
2a0e:8000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49629
Signature Algorithm: sha256WithRSAEncryption
5c:44:1d:d4:e9:71:e8:0e:cc:8f:ce:19:b1:24:21:62:99:b8:
15:0d:e8:83:4d:25:4f:8f:4d:45:ab:64:25:83:d7:c3:b5:62:
4b:b8:86:e0:4c:fb:3a:5d:ab:a5:81:90:01:29:71:66:c1:b6:
44:cf:93:7d:04:68:fa:b1:50:ad:b6:a1:3b:51:34:0b:5b:40:
22:f6:7b:d4:22:d4:29:bb:7a:2d:59:24:a0:d6:2a:53:33:71:
9d:97:82:e8:95:fc:12:b2:b7:85:a6:18:5d:74:6c:08:dd:d3:
8d:1c:52:f7:d5:a0:ad:77:48:54:c0:86:a9:5f:bb:81:0f:d7:
c1:60:20:5f:ee:c0:79:f3:0b:4e:5a:8d:23:18:46:af:6e:0b:
df:47:ff:03:7c:96:78:be:f6:65:5b:47:7d:8d:2b:6e:94:e3:
06:a1:0f:44:bf:bd:16:18:e7:de:04:d8:e7:6b:0a:a7:76:37:
d1:aa:4c:6e:81:c7:82:38:b2:8a:b5:a7:c3:d3:94:76:58:4d:
1c:d1:f8:cb:3a:e8:85:a4:81:e9:36:27:e1:fb:0d:56:79:1f:
9f:35:06:2f:f3:ac:02:a3:65:f6:58:33:91:99:9e:94:42:74:
8b:fe:3f:ff:ea:56:3c:d8:c5:a1:97:9a:09:6d:47:99:cd:74:
8b:e3:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:33 2025 by rpki-client