Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer (raw, json)
Hash identifier: fhgA4IKtchXZhbAngZwcAsdaLdSgDqQeI/78TGHZZ38=
Subject key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421446A59BA518076070853AD107ADC4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207252
AS: 216043
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6a:59:ba:51:80:76:07:08:53:ad:10:7a:dc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:04:32:8e:bb:67:90:d7:bf:4c:83:60:a3:
30:23:52:09:e2:a7:a1:66:26:1b:85:43:2c:d8:36:
d9:03:2b:3b:9f:ba:8f:e4:a7:c3:67:7a:18:3a:3e:
07:0e:33:73:c5:84:ef:9d:ff:38:4f:b7:ed:0c:68:
2e:e9:c5:df:c8:0b:4b:7d:48:b9:8a:0a:b0:cd:d1:
69:43:46:8f:90:0c:7d:1b:d8:0a:90:97:b0:19:f3:
bc:e0:33:23:28:82:0a:57:5a:51:10:17:e1:77:8f:
a0:9f:71:0c:c7:76:a9:79:8f:a2:34:52:d4:02:7c:
1d:0c:b3:d1:a6:9e:ea:b6:fb:75:1c:45:64:a2:b4:
f0:8d:3b:23:06:63:04:18:ab:36:82:32:d9:1d:31:
10:71:1d:21:cf:13:8e:5f:4b:ff:79:c7:a5:04:ee:
5e:93:ea:d7:c0:fc:92:db:9d:71:87:32:09:fb:e2:
39:47:46:20:76:dd:f4:0f:32:f6:8b:96:9e:05:49:
80:af:f4:f7:ac:f7:41:ea:7b:0c:c9:ce:d1:a2:8b:
ab:bd:9a:3e:bd:36:66:c8:c1:38:53:31:84:c4:0d:
e4:c9:d5:64:e5:6b:73:26:a1:fe:a7:f2:1f:b6:6e:
ea:c7:b9:0c:98:ad:97:84:8b:95:15:1f:94:11:f8:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207252
216043
Signature Algorithm: sha256WithRSAEncryption
9c:3f:fd:6c:11:62:2d:62:b1:1f:53:d8:ee:2a:32:d0:73:fa:
06:b1:83:4d:fe:09:f2:88:e5:ad:19:67:b3:ec:58:8b:00:55:
85:83:d1:f3:94:d1:77:fa:53:17:f3:c0:3b:dc:6c:a4:09:e3:
15:59:fb:c3:a1:c3:47:dd:f2:ac:44:a6:e0:58:65:43:1c:99:
e3:73:25:5d:8f:68:4b:3f:78:3b:fd:e4:bf:7c:13:c1:ad:eb:
3f:cd:d5:11:be:48:ba:74:99:ec:1b:e5:d4:3e:40:38:f0:c8:
59:a5:81:36:78:5d:fb:fa:a2:ff:80:1c:1e:67:c0:73:49:dc:
fc:58:cb:f7:b7:e8:81:41:71:38:d8:0d:ce:08:46:37:49:35:
f4:77:e1:cc:57:11:0c:7c:b1:02:c2:1d:6f:61:17:4a:ec:4e:
71:c9:a1:72:b8:35:e4:5c:fc:86:4f:6a:e7:8e:c7:84:49:12:
f5:27:2f:4f:91:52:d1:93:1d:76:c7:e6:8f:50:ff:46:f4:db:
d3:c4:79:3c:76:86:6f:a2:95:f7:a0:d1:61:58:fa:3a:8f:73:
e9:05:aa:c8:db:13:b3:85:e0:36:d1:99:74:60:30:28:da:8f:
a7:d6:b3:40:3f:67:cd:ed:fa:d5:4e:01:96:03:96:b0:82:6e:
eb:3b:9c:48
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhRGpZulGAdgcIU60QetxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDFkNzg5MjdhYjk5YzllNzM4YWZlOWIwMTYyMTRhNDg4MGFkMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WoEMo67Z5DXv0yDYKMwI1IJ4qeh
ZiYbhUMs2DbZAys7n7qP5KfDZ3oYOj4HDjNzxYTvnf84T7ftDGgu6cXfyAtLfUi5
igqwzdFpQ0aPkAx9G9gKkJewGfO84DMjKIIKV1pREBfhd4+gn3EMx3apeY+iNFLU
AnwdDLPRpp7qtvt1HEVkorTwjTsjBmMEGKs2gjLZHTEQcR0hzxOOX0v/ecelBO5e
k+rXwPyS251xhzIJ++I5R0Ygdt30DzL2i5aeBUmAr/T3rPdB6nsMyc7RoourvZo+
vTZmyME4UzGExA3kydVk5WtzJqH+p/Iftm7qx7kMmK2XhIuVFR+UEfhejQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOAdeJJ6uZyec4r+mwFiFKSICtFUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxL2I4ZmJj
NS01YThiLTRhMmItOTQxNC03MDg5MGU1NGRhOGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvYjhmYmM1
LTVhOGItNGEyYi05NDE0LTcwODkwZTU0ZGE4Yi8xLzRCMTRrbnE1bko1eml2NmJB
V0lVcElnSzBWUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwMplAIDA0vrMA0GCSqGSIb3DQEBCwUAA4IBAQCcP/1s
EWItYrEfU9juKjLQc/oGsYNN/gnyiOWtGWez7FiLAFWFg9HzlNF3+lMX88A73Gyk
CeMVWfvDocNH3fKsRKbgWGVDHJnjcyVdj2hLP3g7/eS/fBPBres/zdURvki6dJns
G+XUPkA48MhZpYE2eF37+qL/gBweZ8BzSdz8WMv3t+iBQXE42A3OCEY3STX0d+HM
VxEMfLECwh1vYRdK7E5xyaFyuDXkXPyGT2rnjseESRL1Jy9PkVLRkx12x+aPUP9G
9NvTxHk8doZvopX3oNFhWPo6j3PpBarI2xOzheA20Zl0YDAo2o+n1rNAP2fN7frV
TgGWA5awgm7rO5xI
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:41 2025 by rpki-client