Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer (raw, json)
Hash identifier: viG+QXYL8KZw4QTF6WuNBPit76W3lHZ7vC4gLsgAhDI=
Subject key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F26382CA84520B16C91EF64C040BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215899
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:26:38:2c:a8:45:20:b1:6c:91:ef:64:c0:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:4c:4c:25:dd:59:8e:86:7c:99:31:b1:d4:
fb:be:bd:60:43:7d:6a:e1:c2:6f:61:99:03:0c:d8:
4f:5f:2c:6a:b3:87:56:08:d1:9a:59:30:39:ae:08:
0b:29:ba:61:2f:c4:59:36:bc:f2:3e:5b:eb:04:7e:
1f:90:5c:8f:05:a5:2d:0f:ef:b9:e0:7b:ef:8c:af:
ff:89:fb:88:01:79:13:67:35:db:2d:e7:5d:9c:b3:
c2:13:eb:0d:9c:60:df:94:89:72:db:a7:6c:9b:9a:
af:8d:78:3a:a5:58:09:3f:18:2b:fe:f4:4e:da:74:
ce:5b:aa:c2:e3:31:6a:ce:30:02:cf:2b:22:a9:30:
8e:33:d5:30:86:d1:a3:07:c7:50:e9:66:77:52:ed:
eb:a5:e2:a7:06:4d:c5:06:fe:06:b3:ac:92:0a:17:
77:0b:57:f7:24:14:95:a7:6d:9c:92:a2:83:45:89:
5d:ee:22:fb:2d:c3:05:b3:a1:a7:e3:fc:d4:00:4c:
11:b2:0e:d5:a9:db:2d:56:88:bc:61:19:d9:41:ae:
fb:2a:b0:9f:b9:2d:f8:19:e3:5e:e4:78:be:6c:43:
0e:f4:49:2c:1e:a0:52:a1:6b:40:93:69:e6:c1:0d:
e9:77:4e:2b:43:6f:d2:05:34:ef:4e:08:f1:7a:38:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215899
Signature Algorithm: sha256WithRSAEncryption
8c:04:6b:9d:46:0b:55:f0:47:6c:b4:8f:e4:cc:de:e0:b6:5d:
86:14:8f:26:0e:ef:94:8e:8b:bd:2d:33:31:52:1b:45:1c:46:
d0:ba:6a:f7:7f:57:8e:b3:d0:e9:b1:37:22:f8:d9:17:92:3c:
fa:46:b1:cd:bc:97:1b:8f:61:e3:70:48:30:33:93:e4:d7:a1:
ec:cb:8d:8e:72:0b:5c:3f:af:f6:1d:35:ae:24:1f:47:aa:47:
5e:5b:68:22:95:7f:b9:8c:32:70:97:5d:bb:c5:8c:58:92:03:
3c:05:f3:44:5e:a4:a8:8f:11:57:04:7c:9d:76:67:97:aa:f7:
32:2b:26:fc:4b:ab:d4:6c:7f:89:12:26:45:05:34:20:f5:fe:
b4:8c:f0:eb:fa:95:99:1e:17:4d:c5:2d:df:d4:bd:09:11:28:
21:3b:d1:69:4a:ef:3f:65:c7:a6:41:20:14:41:03:64:8a:27:
8c:e2:e5:90:d7:72:33:ff:82:4e:a1:f9:c3:dc:5b:3b:ce:14:
dd:91:05:44:0f:15:a0:1b:e2:24:1d:48:3a:79:47:bd:d8:e4:
d8:dc:41:f2:6d:5f:9b:ad:62:61:12:f8:0c:2e:5b:ca:31:09:
b8:dc:c1:3b:a4:f5:68:63:8d:b3:f0:3e:04:48:f9:1e:8e:eb:
1b:2b:7d:74
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAZQljyY4LKhFILFske9kwEC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDU0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmFkMjI4ODAzNWU0MDU2ZWIwY2VjMTU0NDZhMGM0MTgwZDI2ZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjRMTCXdWY6GfJkxsdT7vr1gQ31q
4cJvYZkDDNhPXyxqs4dWCNGaWTA5rggLKbphL8RZNrzyPlvrBH4fkFyPBaUtD++5
4HvvjK//ifuIAXkTZzXbLeddnLPCE+sNnGDflIly26dsm5qvjXg6pVgJPxgr/vRO
2nTOW6rC4zFqzjACzysiqTCOM9UwhtGjB8dQ6WZ3Uu3rpeKnBk3FBv4Gs6ySChd3
C1f3JBSVp22ckqKDRYld7iL7LcMFs6Gn4/zUAEwRsg7VqdstVoi8YRnZQa77KrCf
uS34GeNe5Hi+bEMO9EksHqBSoWtAk2nmwQ3pd04rQ2/SBTTvTgjxejhqrwIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPutIogDXkBW6wzsFURqDEGA0m6kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2E2YjBi
Zi1jMDY1LTQ4ZDEtYWZjZS04OGE2NTkzYTY1Y2IvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTZiMGJm
LWMwNjUtNDhkMS1hZmNlLTg4YTY1OTNhNjVjYi8xLzEtNjBpaUFOZVFGYnJET3dW
UkdvTVFZRFNicVEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDS1swDQYJKoZIhvcNAQELBQADggEBAIwEa51GC1Xw
R2y0j+TM3uC2XYYUjyYO75SOi70tMzFSG0UcRtC6avd/V46z0OmxNyL42ReSPPpG
sc28lxuPYeNwSDAzk+TXoezLjY5yC1w/r/YdNa4kH0eqR15baCKVf7mMMnCXXbvF
jFiSAzwF80RepKiPEVcEfJ12Z5eq9zIrJvxLq9Rsf4kSJkUFNCD1/rSM8Ov6lZke
F03FLd/UvQkRKCE70WlK7z9lx6ZBIBRBA2SKJ4zi5ZDXcjP/gk6h+cPcWzvOFN2R
BUQPFaAb4iQdSDp5R73Y5NjcQfJtX5utYmES+AwuW8oxCbjcwTuk9WhjjbPwPgRI
+R6O6xsrfXQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:11 2025 by rpki-client