Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0jYWAW5P6vVGHkCeVhTvGd8BX6w.cer
File: 0jYWAW5P6vVGHkCeVhTvGd8BX6w.cer (raw, json)
Hash identifier: 2hllnS58uKEsEFvqlQOTWRiAUXeyO5V2HMnJgjbGCbw=
Subject key identifier: D2:36:16:01:6E:4F:EA:F5:46:1E:40:9E:56:14:EF:19:DF:01:5F:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D62EA4294AA640122C544BB2CD73B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203168
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2e:a4:29:4a:a6:40:12:2c:54:4b:b2:cd:73:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d23616016e4feaf5461e409e5614ef19df015fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:81:6e:88:9a:75:6d:a1:90:ea:ea:3a:81:
a1:de:f3:30:78:80:19:b5:40:78:22:e2:2b:d6:38:
0e:5a:00:10:f8:e0:43:ad:2a:10:fc:23:c5:cf:dd:
4c:e3:3f:42:ba:5d:9d:2e:54:00:f7:8a:97:d8:8d:
c6:1d:0c:c4:1b:cf:5d:6d:10:28:c2:35:e4:92:15:
a1:4c:d3:75:24:76:b3:cf:0a:87:e4:77:28:3c:9c:
53:3e:4e:37:52:30:5c:72:ca:40:13:7d:d7:5f:ae:
1e:ff:eb:b2:b3:bf:55:8b:d2:c9:5b:ae:e2:0e:e2:
a5:f8:cd:cb:4a:95:05:80:3c:32:07:3a:d9:d2:23:
d8:ea:35:20:bf:84:7f:d2:8a:7b:d6:25:9a:95:9d:
71:8e:2c:82:05:0c:08:d1:b2:01:f5:cf:19:ba:0d:
0e:ee:9b:9e:e9:e0:33:a2:4a:f1:99:0e:2c:0e:e6:
ac:d4:7a:77:dc:f7:eb:38:ea:7e:af:0f:f4:15:f2:
2f:89:1f:72:4c:a9:f9:1b:95:4d:cf:9b:15:bb:9b:
5c:b0:30:a0:e5:0a:5b:5e:f1:ee:93:35:8b:f2:19:
16:71:c9:20:89:41:eb:8a:9d:dd:c3:48:db:dc:a8:
88:69:58:92:28:2a:f5:0d:d2:2f:9e:98:42:df:b0:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:36:16:01:6E:4F:EA:F5:46:1E:40:9E:56:14:EF:19:DF:01:5F:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/03b7c0-d1fd-4281-a9ce-b2edcd3d61e6/1/0jYWAW5P6vVGHkCeVhTvGd8BX6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203168
Signature Algorithm: sha256WithRSAEncryption
31:f9:b8:92:39:d4:e8:66:80:e5:f7:f5:95:d8:e8:bc:f2:00:
d2:20:b5:59:30:c6:ad:f0:4f:64:62:40:5d:d1:a4:22:7a:cd:
af:be:bd:78:31:bb:45:a5:42:32:4d:21:d3:b7:58:cf:00:ec:
77:fe:83:71:0e:3c:91:93:8a:65:c8:27:42:bd:09:cd:aa:e1:
be:c6:fc:33:dd:de:c5:8b:a1:43:bd:aa:3b:1d:18:3c:c1:3b:
bd:7d:c2:fe:0d:b6:80:5f:88:09:df:1b:f2:15:ac:73:cc:1d:
f9:c7:a0:c1:e4:32:0f:47:ca:03:7f:cd:96:a0:cd:a3:d0:50:
e4:69:92:ad:7a:dc:3f:ae:a5:ba:9d:3b:a8:1e:1b:1f:32:78:
54:07:0e:bc:50:ad:a0:f3:1f:2a:80:35:fa:1f:d0:54:71:8e:
3c:5c:be:93:85:0c:0d:d6:4b:3b:9e:7c:f0:96:bc:d8:b6:ee:
d2:03:05:fa:6b:ff:7e:a9:12:d7:0d:58:4f:a9:64:a6:18:51:
30:97:0f:e3:85:fd:ca:fd:c5:3d:30:71:3e:49:0b:20:11:9c:
d3:d7:a0:3b:b8:00:52:0c:0c:6e:0a:db:fb:f6:1b:9c:af:e2:
c6:30:56:d2:1d:e2:83:23:2d:3b:f8:db:5c:af:b7:3f:f7:40:
d4:fe:d9:21
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQg1i6kKUqmQBIsVEuyzXO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjM2MTYwMTZlNGZlYWY1NDYxZTQwOWU1NjE0ZWYxOWRmMDE1ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHqBboiadW2hkOrqOoGh3vMweIAZ
tUB4IuIr1jgOWgAQ+OBDrSoQ/CPFz91M4z9Cul2dLlQA94qX2I3GHQzEG89dbRAo
wjXkkhWhTNN1JHazzwqH5HcoPJxTPk43UjBccspAE33XX64e/+uys79Vi9LJW67i
DuKl+M3LSpUFgDwyBzrZ0iPY6jUgv4R/0op71iWalZ1xjiyCBQwI0bIB9c8Zug0O
7pue6eAzokrxmQ4sDuas1Hp33PfrOOp+rw/0FfIviR9yTKn5G5VNz5sVu5tcsDCg
5QpbXvHukzWL8hkWcckgiUHrip3dw0jb3KiIaViSKCr1DdIvnphC37BfLwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNI2FgFuT+r1Rh5AnlYU7xnfAV+sMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzAzYjdj
MC1kMWZkLTQyODEtYTljZS1iMmVkY2QzZDYxZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvMDNiN2Mw
LWQxZmQtNDI4MS1hOWNlLWIyZWRjZDNkNjFlNi8xLzBqWVdBVzVQNnZWR0hrQ2VW
aFR2R2Q4Qlg2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMZoDANBgkqhkiG9w0BAQsFAAOCAQEAMfm4kjnU6GaA
5ff1ldjovPIA0iC1WTDGrfBPZGJAXdGkInrNr769eDG7RaVCMk0h07dYzwDsd/6D
cQ48kZOKZcgnQr0Jzarhvsb8M93exYuhQ72qOx0YPME7vX3C/g22gF+ICd8b8hWs
c8wd+cegweQyD0fKA3/NlqDNo9BQ5GmSrXrcP66lup07qB4bHzJ4VAcOvFCtoPMf
KoA1+h/QVHGOPFy+k4UMDdZLO5588Ja82Lbu0gMF+mv/fqkS1w1YT6lkphhRMJcP
44X9yv3FPTBxPkkLIBGc09egO7gAUgwMbgrb+/YbnK/ixjBW0h3igyMtO/jbXK+3
P/dA1P7ZIQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:06 2025 by rpki-client