Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fkjfjrkRmEdcx7Hmci0qsSXhZns.cer
File: fkjfjrkRmEdcx7Hmci0qsSXhZns.cer (raw, json)
Hash identifier: QgYELXZlJ8NOaBxfwm687L8mWuD2OoFngiAJCiwwKQw=
Subject key identifier: 7E:48:DF:8E:B9:11:98:47:5C:C7:B1:E6:72:2D:2A:B1:25:E1:66:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428272C55E514592F8B5030007579D7F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212525
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:2c:55:e5:14:59:2f:8b:50:30:00:75:79:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e48df8eb91198475cc7b1e6722d2ab125e1667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:6a:8e:1a:4c:99:2a:ac:61:95:48:ef:34:
82:7c:3c:bf:f8:1c:5b:a5:08:8c:8e:35:cc:1a:46:
d8:73:17:22:d0:de:f4:74:f7:68:c1:49:bb:07:c7:
30:6d:d8:1b:bc:c4:5e:9e:c0:56:dc:b8:14:74:94:
66:ae:5d:b5:ee:0d:19:2b:e5:fd:1f:7f:f5:03:61:
9d:07:77:4a:7e:6d:31:d6:c9:17:97:3a:74:37:f2:
50:52:96:e1:49:0b:f8:bd:2b:6d:4f:92:eb:39:f1:
c1:7d:5c:e2:a3:0d:e8:6a:5e:07:d6:89:9c:c2:9f:
31:8d:e1:02:92:38:e3:89:c7:a2:56:70:0a:a7:4a:
b8:e5:b5:ae:6c:de:b6:88:21:3f:c2:71:0d:29:86:
a6:65:06:ef:1c:9d:ac:0e:76:47:13:a1:c4:8d:5f:
4d:1f:50:bc:60:69:42:d0:5c:5e:c8:d4:50:09:a4:
0a:8a:23:15:d9:9a:bd:ad:9c:ad:1a:67:47:b6:16:
91:55:a1:ca:3e:04:1b:de:db:63:5d:f1:aa:77:10:
19:44:6d:56:a0:03:45:25:65:ca:a8:3a:c4:41:bb:
3a:c4:38:95:45:d0:3b:d8:78:e5:2b:f1:b1:43:5f:
1e:a6:6d:cd:b4:6b:04:95:0e:21:ab:3b:2d:9a:04:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:DF:8E:B9:11:98:47:5C:C7:B1:E6:72:2D:2A:B1:25:E1:66:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212525
Signature Algorithm: sha256WithRSAEncryption
90:77:e7:fb:3e:8c:39:08:86:9c:e3:48:c7:28:50:18:bb:31:
17:ca:6f:dd:d8:a9:3d:d8:79:60:ac:87:77:d5:a7:b2:c8:98:
f4:df:de:e3:27:a0:7a:a3:a3:86:06:03:24:b9:2b:e5:97:38:
8c:75:ca:5b:82:c0:92:71:6b:92:c1:02:70:55:86:f5:97:71:
69:a2:2c:cc:3e:2c:ca:3e:f3:1d:58:30:86:c4:83:c2:6b:cf:
aa:96:0a:70:68:5f:c4:d9:0b:1e:6e:da:b6:bf:85:18:fb:eb:
09:ae:f4:e4:42:18:9c:09:e9:8c:c0:b5:b1:e6:4a:9f:b5:c9:
57:3e:b9:20:05:10:dd:9c:d3:5f:17:f8:58:76:ab:3a:ef:ff:
46:0b:dd:d5:29:87:36:e3:2f:fe:8d:4f:16:fd:de:88:31:0d:
b5:ca:05:f1:e9:c0:06:24:14:3c:8c:e4:98:11:2a:f6:04:07:
f1:7b:15:fb:0a:6d:38:3d:f9:82:48:5e:73:7b:7f:24:a2:b5:
99:d5:68:1c:dd:78:ae:76:a7:20:4b:13:3e:86:b2:e3:3d:ee:
dc:5b:a1:4d:8d:7f:b8:bf:83:37:e3:59:a3:7c:01:16:2e:ef:
f7:b0:90:cb:f7:5e:32:2f:05:7f:f0:b2:1a:1f:15:18:c7:d8:
e1:02:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:57 2025 by rpki-client