Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer (raw, json)
Hash identifier: apy/Sn50IW4XwwLOA8r29YXjqWjOe2NdQ04C3OzRjUc=
Subject key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BF875BA07AB233E45E27F2B154168
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39785
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f8:75:ba:07:ab:23:3e:45:e2:7f:2b:15:41:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:ad:06:dd:9a:9c:c3:f2:4e:8a:f8:a2:7b:
cc:d5:96:59:6c:66:e5:a1:d8:cd:9d:6b:ac:fd:02:
64:1d:02:fa:59:3c:2a:14:13:9e:c5:3f:10:5f:e7:
bd:8c:a3:c9:e1:cb:11:77:bc:5f:cd:1a:2c:03:1a:
52:5c:66:6e:24:e6:1e:1d:c2:f6:94:08:90:f7:6b:
f0:a8:ce:ad:a4:a0:5a:67:17:f9:58:50:f6:dd:3b:
ed:23:4a:d4:f6:15:11:02:b5:32:32:99:3a:12:94:
15:04:15:25:69:53:96:9f:3a:8b:3c:07:d3:3d:85:
5d:19:ed:21:0a:12:ab:bb:4d:59:61:6b:df:33:7c:
ab:0d:01:24:36:df:d7:9f:f6:2f:68:eb:33:3a:74:
cb:6f:a4:5f:35:7f:cd:05:81:49:6e:8d:fd:7f:df:
09:ef:ce:4f:e7:5d:79:f8:83:02:7c:18:6e:1e:e5:
a5:6f:d9:e4:46:07:2b:05:3c:95:f8:21:56:8c:7c:
ba:51:10:97:7d:59:30:07:4f:a4:37:ac:0c:21:c6:
07:fd:e7:d6:45:e9:5e:31:93:e4:5c:2c:3d:30:5e:
5a:03:4d:80:68:6f:4d:51:30:75:86:99:b2:e7:61:
6c:c2:49:91:32:ea:c0:e5:cc:e6:cd:8a:35:39:c6:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39785
Signature Algorithm: sha256WithRSAEncryption
6a:8a:11:22:a2:5a:85:15:cc:25:03:9b:cf:cb:6f:1a:05:92:
14:ef:7c:e2:85:4a:93:06:20:86:29:cb:bb:fa:dd:30:63:cd:
4f:a5:e7:e0:40:de:67:10:d4:be:2e:15:79:ad:8f:23:2b:cd:
86:20:05:64:04:69:37:0f:94:cd:d0:52:fc:9c:ef:7d:a9:15:
cc:52:ed:b2:58:30:42:d9:0f:e7:8b:59:c5:8a:bc:1f:8b:37:
bd:8c:f1:9a:e0:da:57:73:8c:19:1a:fb:46:d3:87:4c:a6:fc:
64:b4:ea:fe:e2:66:ba:c3:78:1f:5f:e9:0a:1e:cd:09:7b:12:
cc:90:62:76:0d:9d:73:11:59:a5:91:47:01:ca:cf:bb:3e:18:
15:d7:49:c1:a1:63:6d:15:d5:e8:05:d8:5c:76:b5:90:ca:99:
32:b4:af:bb:80:78:ac:6e:56:17:3c:66:8f:81:21:23:85:b0:
63:0c:0d:4f:de:29:a9:b4:61:f3:0b:01:c2:02:0b:93:a2:06:
2a:22:b0:64:9b:2b:c1:1f:13:56:cf:c1:28:9a:78:56:11:6e:
94:2e:29:9a:f0:52:df:33:f1:f3:3d:95:78:6e:49:86:c4:be:
04:2c:9c:1d:24:38:6a:10:bb:7f:43:9e:96:93:1e:1d:4f:33:
27:74:a5:6f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQma/h1ugerIz5F4n8rFUFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmZlZjBkMGUzZjNhMTEzNDNiYjkxN2ZjYjc5MzNmNGU5ZGFlNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx+tBt2anMPyTor4onvM1ZZZbGbl
odjNnWus/QJkHQL6WTwqFBOexT8QX+e9jKPJ4csRd7xfzRosAxpSXGZuJOYeHcL2
lAiQ92vwqM6tpKBaZxf5WFD23TvtI0rU9hURArUyMpk6EpQVBBUlaVOWnzqLPAfT
PYVdGe0hChKru01ZYWvfM3yrDQEkNt/Xn/YvaOszOnTLb6RfNX/NBYFJbo39f98J
785P5115+IMCfBhuHuWlb9nkRgcrBTyV+CFWjHy6URCXfVkwB0+kN6wMIcYH/efW
ReleMZPkXCw9MF5aA02AaG9NUTB1hpmy52FswkmRMurA5czmzYo1OcaROQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFNv+8NDj86ETQ7uRf8t5M/Tp2uStMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzBhOGUy
My1iNjMxLTQ0NDQtOTYyOS1lNjRjNGVjM2M5MTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMGE4ZTIz
LWI2MzEtNDQ0NC05NjI5LWU2NGM0ZWMzYzkxOS8xLzJfN3cwT1B6b1JORHU1Rl95
M2t6OU9uYTVLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCbaTANBgkqhkiG9w0BAQsFAAOCAQEAaooRIqJahRXM
JQObz8tvGgWSFO984oVKkwYghinLu/rdMGPNT6Xn4EDeZxDUvi4Vea2PIyvNhiAF
ZARpNw+UzdBS/JzvfakVzFLtslgwQtkP54tZxYq8H4s3vYzxmuDaV3OMGRr7RtOH
TKb8ZLTq/uJmusN4H1/pCh7NCXsSzJBidg2dcxFZpZFHAcrPuz4YFddJwaFjbRXV
6AXYXHa1kMqZMrSvu4B4rG5WFzxmj4EhI4WwYwwNT94pqbRh8wsBwgILk6IGKiKw
ZJsrwR8TVs/BKJp4VhFulC4pmvBS3zPx8z2VeG5JhsS+BCycHSQ4ahC7f0OelpMe
HU8zJ3Slbw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:18 2025 by rpki-client