Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
File: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer (raw, json)
Hash identifier: ZIoSETClSHV3XF3yGIZF40SWgL9hmYi64Mq+R8Nq/78=
Subject key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236966557016FD845F41002A43FD2473
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199552
IP: 2001:67c:2abc::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:66:55:70:16:fd:84:5f:41:00:2a:43:fd:24:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:91:9f:7a:5c:22:97:09:43:fa:fb:f0:dc:
87:4d:cd:ad:5e:19:5f:79:37:2a:fe:c2:d0:92:9d:
af:4e:5c:21:9c:be:f9:5e:49:52:6a:0d:e5:d4:5e:
ae:a0:47:fb:91:e9:c1:85:f3:3c:52:95:03:a5:72:
22:8a:53:63:a5:08:42:41:c2:55:11:87:0c:a2:85:
d5:d9:e3:21:73:c2:2d:98:bb:c7:d1:b1:d0:73:38:
b3:7f:a6:89:15:fc:8e:14:d9:6b:cb:ce:29:99:1d:
ff:22:09:15:c5:fd:d5:50:99:48:8b:50:85:df:8a:
4e:2c:00:28:b6:69:79:de:57:4b:42:9a:82:59:be:
12:56:ef:73:7f:0a:9e:5c:3f:e3:e3:c7:0b:2c:03:
90:dc:30:25:1e:59:46:41:96:cd:21:9e:6a:01:f8:
82:12:fc:82:aa:9d:13:0e:92:0e:10:76:4d:6b:bd:
50:c0:3d:79:d6:74:cf:ba:bf:66:46:e2:db:72:d8:
43:d6:d4:63:cd:c9:8d:80:66:05:82:65:01:dc:30:
0c:b2:7b:10:65:7b:50:ec:f2:22:c1:15:22:7a:1e:
02:1e:8c:c3:cb:d5:a2:79:ed:94:aa:39:22:71:fd:
bc:05:41:d5:f4:52:06:fe:42:c4:07:36:24:3f:ba:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2abc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199552
Signature Algorithm: sha256WithRSAEncryption
7f:bd:15:1f:ff:48:93:eb:40:57:fd:8c:1f:b4:b0:e0:2d:3a:
c4:90:5d:7f:1c:a7:07:3d:b8:ab:fe:ac:ea:0f:3e:32:a2:53:
e2:82:cf:33:6c:44:39:5b:7a:b0:50:41:f1:8c:85:db:6d:49:
87:85:b1:5f:56:db:d7:1a:77:35:79:33:a1:72:a9:e6:d9:91:
1a:73:87:71:bc:25:74:9b:35:f9:38:4a:06:f2:7a:b3:3d:22:
6e:dd:1b:ab:d0:f0:cb:c0:15:16:d1:cb:1c:53:b5:a0:6a:7a:
21:2b:35:f2:8b:71:94:f2:06:45:cf:4b:9c:3b:7d:c5:06:92:
e7:7e:48:ed:47:47:8a:8a:8f:fd:ad:08:d4:91:21:db:71:a0:
df:5c:79:8b:0a:48:a0:20:26:aa:2d:bc:37:da:1e:11:2a:c0:
de:1c:b4:fd:10:a7:54:8f:99:9c:5d:a5:d0:9f:a5:2f:d2:7d:
74:b3:65:1b:5a:d2:dc:b5:b8:f5:2b:4d:51:2f:dd:f2:2f:e6:
51:a6:6d:60:78:97:81:ed:a0:69:71:24:de:b7:7e:3f:bb:41:
f9:d7:86:32:d5:91:63:c3:2e:ad:99:c4:01:f7:22:6d:4b:41:
ce:4b:36:28:a3:f4:34:b9:84:16:63:a1:e3:3e:80:f3:bc:6e:
a3:64:8b:fb
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAZQjaWZVcBb9hF9BACpD/SRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWExNmQxZjRjN2E2NTNlM2UyMGY4NGQ5YmE1OWZkYjI3YzJhNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aaRn3pcIpcJQ/r78NyHTc2tXhlf
eTcq/sLQkp2vTlwhnL75XklSag3l1F6uoEf7kenBhfM8UpUDpXIiilNjpQhCQcJV
EYcMooXV2eMhc8ItmLvH0bHQczizf6aJFfyOFNlry84pmR3/IgkVxf3VUJlIi1CF
34pOLAAotml53ldLQpqCWb4SVu9zfwqeXD/j48cLLAOQ3DAlHllGQZbNIZ5qAfiC
EvyCqp0TDpIOEHZNa71QwD151nTPur9mRuLbcthD1tRjzcmNgGYFgmUB3DAMsnsQ
ZXtQ7PIiwRUieh4CHozDy9Wiee2Uqjkicf28BUHV9FIG/kLEBzYkP7o6PwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFPmhbR9MemU+PiD4TZuln9snwqYfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzk4YzFi
NS0zMzk2LTRkOWMtYmNhYy05OTI2MjdlZWE5ZWEvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvOThjMWI1
LTMzOTYtNGQ5Yy1iY2FjLTk5MjYyN2VlYTllYS8xLzEtYUZ0SDB4NlpUNC1JUGhO
bTZXZjJ5ZkNwaDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwqvDAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMDC4AwDQYJKoZIhvcNAQELBQADggEBAH+9FR//SJPrQFf9jB+0sOAtOsSQ
XX8cpwc9uKv+rOoPPjKiU+KCzzNsRDlberBQQfGMhdttSYeFsV9W29cadzV5M6Fy
qebZkRpzh3G8JXSbNfk4SgbyerM9Im7dG6vQ8MvAFRbRyxxTtaBqeiErNfKLcZTy
BkXPS5w7fcUGkud+SO1HR4qKj/2tCNSRIdtxoN9ceYsKSKAgJqotvDfaHhEqwN4c
tP0Qp1SPmZxdpdCfpS/SfXSzZRta0ty1uPUrTVEv3fIv5lGmbWB4l4HtoGlxJN63
fj+7QfnXhjLVkWPDLq2ZxAH3Im1LQc5LNiij9DS5hBZjoeM+gPO8bqNki/s=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:14 2025 by rpki-client