Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.cer (raw, json)
Hash identifier: H9KKTvW6Y9I6NceS5k/8t4cXcr6c9+PXf3it4VOB8cQ=
Subject key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C337C776489BE3954D53805A3B610
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216079
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:33:7c:77:64:89:be:39:54:d5:38:05:a3:b6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de747196cb8c9dc642337afebf04b204dcd19696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:56:f7:fc:07:f3:c5:4d:fa:f7:d3:f4:cf:
04:4b:8b:7e:ef:ce:26:34:39:db:98:7b:3a:0f:59:
fd:7b:34:b4:33:d4:70:6c:e4:68:9f:d0:cc:5d:e2:
07:59:a7:82:16:3f:8b:f8:57:7f:98:31:e6:6b:01:
51:2e:3a:18:56:79:92:8f:51:fb:94:66:91:71:9d:
44:d1:11:cf:ad:b9:b6:49:44:78:c9:bd:b1:69:4e:
b8:52:3c:56:9e:fc:53:cd:9b:c8:56:5e:7c:60:07:
5e:71:bc:89:93:2f:1b:75:12:19:c1:ae:40:6d:6d:
3a:52:61:e0:14:ba:35:81:9b:27:6a:90:e3:c6:84:
ae:d0:e5:83:94:58:f5:ce:e6:8d:47:d1:28:ee:f8:
71:93:94:fa:6d:dc:89:fd:42:ae:a7:84:b8:19:96:
42:b5:18:7a:c6:71:07:7c:22:e5:fe:cf:df:e3:93:
32:d8:41:d7:df:2b:19:2a:ca:44:34:27:c9:e7:68:
85:74:da:bc:63:f4:98:9e:fa:fd:1c:11:1f:4b:91:
62:60:42:41:fd:58:61:48:8e:19:02:48:37:a2:cb:
8a:df:5f:5d:b9:db:3b:fb:c1:d1:05:2f:5e:db:8b:
7c:2e:d8:ee:cc:0e:13:7a:8a:03:ce:21:5a:91:c2:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216079
Signature Algorithm: sha256WithRSAEncryption
9c:85:f5:8f:48:84:de:7b:9f:b9:a2:67:1c:7f:20:fc:6e:78:
9a:4c:2b:4a:6a:03:56:eb:90:40:7d:ad:d0:8b:f5:ed:75:35:
cd:23:9f:e0:0f:32:68:ac:fd:ee:88:84:29:31:6c:68:0a:ea:
42:c1:e9:0d:4a:7a:38:11:f0:5b:3f:a9:b1:83:77:92:5d:3e:
43:51:09:a4:94:96:35:c3:5e:58:0d:b8:e5:f7:56:e5:3c:e9:
06:51:f7:93:c5:34:ce:05:7e:f1:fb:6b:70:22:f4:ba:c9:c9:
73:43:9a:07:3f:76:ec:5b:ab:bb:39:8e:93:a3:fe:9b:7f:25:
8c:30:0d:91:09:09:1b:6f:a2:14:b0:87:46:2c:30:92:2c:fc:
1a:79:bb:f3:5e:76:f1:3c:ae:dc:ec:56:fe:fc:9d:af:52:17:
4c:6b:87:ff:eb:fa:7c:cc:e0:bd:4c:f5:6f:53:62:91:3e:ec:
3f:c6:cf:76:98:d5:d0:cf:94:60:67:80:4b:e1:97:16:f1:74:
7d:c0:d6:cd:02:f3:2c:7d:73:62:3a:32:ba:1b:3a:dc:a1:fb:
b6:95:64:89:73:82:5f:7b:d7:7e:c6:b5:e0:3f:b0:94:10:f6:
94:40:6f:c1:c6:7d:7e:a7:b0:cb:af:99:3f:c7:d1:5c:98:8b:
5f:b2:6b:b1
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQfjDN8d2SJvjlU1TgFo7YQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTc0NzE5NmNiOGM5ZGM2NDIzMzdhZmViZjA0YjIwNGRjZDE5Njk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgxW9/wH88VN+vfT9M8ES4t+784m
NDnbmHs6D1n9ezS0M9RwbORon9DMXeIHWaeCFj+L+Fd/mDHmawFRLjoYVnmSj1H7
lGaRcZ1E0RHPrbm2SUR4yb2xaU64UjxWnvxTzZvIVl58YAdecbyJky8bdRIZwa5A
bW06UmHgFLo1gZsnapDjxoSu0OWDlFj1zuaNR9Eo7vhxk5T6bdyJ/UKup4S4GZZC
tRh6xnEHfCLl/s/f45My2EHX3ysZKspENCfJ52iFdNq8Y/SYnvr9HBEfS5FiYEJB
/VhhSI4ZAkg3osuK319duds7+8HRBS9e24t8LtjuzA4TeooDziFakcJSYwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFN50cZbLjJ3GQjN6/r8EsgTc0ZaWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5Lzk3MWMy
NC02YjJiLTQ2YTUtYTc1MS1kM2U4YTg2ODlkYzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvOTcxYzI0
LTZiMmItNDZhNS1hNzUxLWQzZThhODY4OWRjMy8xLzNuUnhsc3VNbmNaQ00zci12
d1N5Qk56UmxwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNMDzANBgkqhkiG9w0BAQsFAAOCAQEAnIX1j0iE3nuf
uaJnHH8g/G54mkwrSmoDVuuQQH2t0Iv17XU1zSOf4A8yaKz97oiEKTFsaArqQsHp
DUp6OBHwWz+psYN3kl0+Q1EJpJSWNcNeWA245fdW5TzpBlH3k8U0zgV+8ftrcCL0
usnJc0OaBz927FuruzmOk6P+m38ljDANkQkJG2+iFLCHRiwwkiz8Gnm781528Tyu
3OxW/vydr1IXTGuH/+v6fMzgvUz1b1NikT7sP8bPdpjV0M+UYGeAS+GXFvF0fcDW
zQLzLH1zYjoyuhs63KH7tpVkiXOCX3vXfsa14D+wlBD2lEBvwcZ9fqewy6+ZP8fR
XJiLX7JrsQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:27 2025 by rpki-client