Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.cer (raw, json)
Hash identifier: BX3z0/njBp0L7zHixWTPQ7rwIKm66tCZMsLzJwGERzQ=
Subject key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143EFBE3014981196EFDB4EE20D9B4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196860
IP: 193.107.200.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ef:be:30:14:98:11:96:ef:db:4e:e2:0d:9b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:2a:7b:22:4d:14:68:9d:cf:71:ae:02:61:
f1:cf:44:21:67:a0:16:8f:98:0d:a1:c4:47:47:da:
58:99:c9:53:f9:f4:69:af:fa:9a:4f:0e:84:3d:ce:
09:2d:81:20:e5:6a:14:60:b5:bb:68:54:09:aa:45:
f7:7c:42:ad:df:7f:79:6c:33:8d:76:e0:dc:b9:7d:
ef:77:5c:38:85:ac:3e:8b:31:98:90:0c:2d:49:db:
ae:fb:b0:54:fa:03:e2:bf:57:3f:71:99:a4:95:26:
35:00:89:d4:2d:fc:4d:be:35:ea:d7:1b:a8:69:4f:
80:23:ec:88:d5:c6:34:de:19:33:94:79:91:76:55:
4a:b0:f5:df:7c:f4:98:2f:30:b9:a1:b0:5f:56:94:
27:02:9b:36:c6:f9:60:2b:15:59:3c:b1:1c:8c:d1:
e0:c5:5a:ed:a9:4f:33:6c:61:99:c7:9d:c9:39:f2:
06:4e:3a:72:b3:fa:6f:07:4a:db:14:ce:48:6f:88:
9d:f0:8c:f5:03:ae:93:2a:9b:9d:bd:3e:72:4d:24:
a5:62:01:7e:3f:7a:a9:bd:7c:22:7a:e9:de:84:e3:
9f:d5:54:6b:89:c3:62:6f:25:e0:21:8d:41:da:bb:
26:be:b5:61:9a:3c:64:18:5f:12:aa:48:00:0d:62:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.200.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196860
Signature Algorithm: sha256WithRSAEncryption
09:8b:7b:0a:ec:f4:49:5d:3b:11:9e:c4:82:67:ea:b3:ab:e2:
21:90:d2:84:67:60:0a:cd:89:46:fb:0e:53:c5:34:fd:aa:c2:
17:e8:c5:d3:b8:2e:64:5f:8d:58:eb:8b:19:25:e1:ae:4b:7a:
74:e9:0a:f5:7d:c3:2c:8e:6c:7f:2a:9d:dd:5a:a8:dc:7d:c8:
1c:86:f9:d2:3e:e4:30:4d:ec:c1:2e:57:8c:52:a9:c3:b8:71:
f8:ac:f2:2f:4f:53:7a:12:24:9a:8a:a4:c1:92:dd:f5:7a:6f:
3e:36:3c:b1:52:4b:72:e9:32:a0:ea:e0:3a:a8:1d:7a:05:c0:
cc:01:16:dd:da:f0:0b:63:d6:19:2b:e8:a7:73:ea:be:08:8f:
7e:2e:fa:82:c2:3d:7d:cf:77:66:70:9d:14:3b:24:4b:4a:43:
9b:86:1d:a1:06:ca:59:d1:c5:2b:be:3c:f3:dd:9a:e6:09:78:
62:cf:7d:e2:ef:78:b7:32:12:a0:a9:73:5c:62:ba:a5:dc:96:
60:7e:e4:d8:0a:38:a9:39:01:2b:7a:e5:df:96:95:60:67:85:
23:f5:f5:af:f7:b7:65:fe:b1:da:18:36:47:d7:93:f2:12:e7:
cf:be:7b:45:b3:58:0f:cd:1b:1a:c3:3d:04:f5:b0:a9:a8:3c:
7a:02:0c:31
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQhQ+++MBSYEZbv207iDZtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDQ3MThlN2EyNjNlYmU0NWU3NzA2NzM5MjQxZWM2ZDZhZTU4ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmUqeyJNFGidz3GuAmHxz0QhZ6AW
j5gNocRHR9pYmclT+fRpr/qaTw6EPc4JLYEg5WoUYLW7aFQJqkX3fEKt3395bDON
duDcuX3vd1w4haw+izGYkAwtSduu+7BU+gPiv1c/cZmklSY1AInULfxNvjXq1xuo
aU+AI+yI1cY03hkzlHmRdlVKsPXffPSYLzC5obBfVpQnAps2xvlgKxVZPLEcjNHg
xVrtqU8zbGGZx53JOfIGTjpys/pvB0rbFM5Ib4id8Iz1A66TKpudvT5yTSSlYgF+
P3qpvXwieunehOOf1VRricNibyXgIY1B2rsmvrVhmjxkGF8SqkgADWJx/QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFABHGOeiY+vkXncGc5JB7G1q5Y50MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzNlZWNm
OC1lYjA0LTQxY2UtYTlmNi0zYTkxYTYxM2E0MDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvM2VlY2Y4
LWViMDQtNDFjZS1hOWY2LTNhOTFhNjEzYTQwNy8xL0FFY1k1NkpqNi1SZWR3Wnpr
a0hzYldybGpuUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwWvIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMA/DANBgkqhkiG9w0BAQsFAAOCAQEACYt7Cuz0SV07EZ7Egmfqs6viIZDShGdg
Cs2JRvsOU8U0/arCF+jF07guZF+NWOuLGSXhrkt6dOkK9X3DLI5sfyqd3Vqo3H3I
HIb50j7kME3swS5XjFKpw7hx+KzyL09TehIkmoqkwZLd9XpvPjY8sVJLcukyoOrg
OqgdegXAzAEW3drwC2PWGSvop3PqvgiPfi76gsI9fc93ZnCdFDskS0pDm4YdoQbK
WdHFK748892a5gl4Ys994u94tzISoKlzXGK6pdyWYH7k2Ao4qTkBK3rl35aVYGeF
I/X1r/e3Zf6x2hg2R9eT8hLnz757RbNYD80bGsM9BPWwqag8egIMMQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:17 2025 by rpki-client