Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JmQ9Xo5785a-PNTesdkvYBtRFp8.cer
File: JmQ9Xo5785a-PNTesdkvYBtRFp8.cer (raw, json)
Hash identifier: 3jNPewDFCoKI3Hqwsofs2pkmWTLB6k33xiBNxBC7SFc=
Subject key identifier: 26:64:3D:5E:8E:7B:F3:96:BE:3C:D4:DE:B1:D9:2F:60:1B:51:16:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA97BC43D092D544BE91E3FD3D3EC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/JmQ9Xo5785a-PNTesdkvYBtRFp8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60403
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:97:bc:43:d0:92:d5:44:be:91:e3:fd:3d:3e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26643d5e8e7bf396be3cd4deb1d92f601b51169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:19:f6:9f:fd:37:03:38:1c:2a:4e:ac:ba:
06:23:3c:01:58:03:62:8b:25:a4:cb:bd:5e:c9:b4:
67:74:54:ed:e7:8c:fd:21:da:c7:60:fd:b4:50:92:
25:30:fa:f3:f6:dc:41:47:d4:12:e9:38:44:fd:48:
3f:52:31:0b:e2:45:99:a9:de:28:b8:59:68:6f:1f:
ef:35:da:30:d2:a7:c6:b7:47:82:5d:76:ec:a0:bc:
ae:a5:3e:e2:40:5b:b7:ff:1e:cf:9e:bf:73:25:b5:
50:96:4e:29:79:e4:f4:ce:93:2f:63:31:25:ce:aa:
28:da:70:ad:71:e8:e4:27:14:d4:8c:02:2d:50:58:
06:49:22:47:cc:42:c4:e7:ad:65:25:05:c8:c7:3c:
f5:7e:30:15:f1:3b:6d:76:8d:ff:f9:ce:c3:ff:35:
a8:31:d7:79:5c:66:8f:a6:d7:b3:b1:cd:b1:ae:d5:
e2:e8:4b:24:b7:54:27:33:a9:d1:d0:08:cc:7b:13:
37:8e:63:ad:3c:5e:de:62:9e:c4:b3:dc:f3:96:1a:
de:56:8a:ce:97:21:71:70:71:f0:7f:11:87:15:76:
1e:b6:76:77:7a:31:f6:f2:4e:9f:8d:91:d3:e9:b5:
43:1e:e9:c7:70:03:e3:3c:3b:6d:b6:dc:2d:39:49:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:64:3D:5E:8E:7B:F3:96:BE:3C:D4:DE:B1:D9:2F:60:1B:51:16:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ecdb18-8d3b-4a72-a883-3284684ac7ec/1/JmQ9Xo5785a-PNTesdkvYBtRFp8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60403
Signature Algorithm: sha256WithRSAEncryption
99:0f:09:5f:65:f2:ae:82:65:a3:3d:56:47:90:e1:16:9f:83:
d4:01:2b:2f:4f:47:a9:5f:86:f6:02:79:c5:19:2c:be:bd:93:
8e:e4:e5:55:c5:37:18:f0:99:fb:e7:c0:44:6f:5e:cb:be:51:
8f:0e:1c:c0:eb:d8:3a:48:65:78:47:39:16:3d:f1:a6:20:b6:
97:f5:35:4e:ac:67:8a:70:5b:f2:a9:82:36:67:d8:a0:b0:f8:
ff:d1:0c:9c:7f:62:4d:27:9b:5e:1b:bc:7d:67:22:c4:38:1f:
37:af:b7:f6:39:36:34:fd:2d:30:6c:8e:84:b2:78:cd:21:b9:
ae:b9:b9:b7:6a:70:32:e2:52:cc:ac:3a:3a:3f:dc:41:11:31:
f6:a2:3b:65:25:bc:2f:4f:17:8f:23:f4:b2:b0:35:f7:6c:6f:
32:8f:17:59:c0:29:a4:b6:8f:23:ef:a9:a8:fa:7b:c7:a9:e1:
34:31:e6:26:88:57:86:5c:b1:bc:54:1e:da:7e:19:19:cc:96:
e3:c7:f7:73:41:dc:29:95:72:3b:d4:f6:cf:7e:89:ac:c1:7d:
c1:93:d7:e3:6a:ff:e6:61:3c:c1:43:3e:77:fa:7d:a0:ed:b1:
37:07:e3:ce:8e:7d:9d:68:83:bd:57:90:03:cf:f6:83:b7:4b:
35:85:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:17 2025 by rpki-client on console.sobornost.net