Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
File: AlY31IiO4AWN6a06cMQtxGmWmpk.cer (raw, json)
Hash identifier: 8c5jy1AeRyZen4hAT1WH6UpT/U7FYPfSatwsPqTfBMQ=
Subject key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B57C2D7EE17DEAB0177579BF9E475F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50431
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7c:2d:7e:e1:7d:ea:b0:17:75:79:bf:9e:47:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=025637d4888ee0058de9ad3a70c42dc469969a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:a2:b0:34:74:d0:53:e7:52:76:57:e4:2f:
21:81:ba:a4:5d:9e:38:5e:ad:8f:44:1d:e7:a5:86:
50:9d:9d:18:90:d2:a6:9a:94:bd:3e:2a:cf:12:4a:
71:0e:8f:87:24:d3:6d:a9:c3:0f:df:52:3e:c3:05:
4c:3a:cd:e6:71:09:d0:a4:ce:c5:23:49:f2:32:32:
51:00:53:21:4c:4d:82:2b:28:e4:41:cb:ed:39:d7:
f6:7a:34:01:c9:40:46:eb:be:bf:c3:40:6e:65:97:
f1:e2:7c:03:ec:a0:b9:fc:20:20:91:5c:b7:64:90:
a4:cd:1c:01:ce:6e:93:c2:c5:17:ad:61:44:5c:63:
23:bf:ea:92:8d:19:c5:aa:59:af:d0:d2:14:b3:ce:
f9:76:8d:51:ee:06:9a:07:01:83:6e:6a:83:42:21:
9d:b3:6f:0d:d4:07:43:23:4f:2a:6c:cd:2d:f6:13:
e0:c0:a2:fe:cf:5d:1d:c2:8d:b9:4b:0d:35:45:11:
c5:ef:f4:0b:21:5b:54:e2:b1:96:44:be:46:2f:10:
f1:01:d3:b8:a2:ad:53:6b:bd:bd:6e:fa:74:14:54:
50:62:3c:4a:3f:69:f2:02:5c:51:ad:0e:cc:ad:52:
34:42:7e:ba:37:fe:de:ef:85:da:75:3b:0b:9c:35:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50431
Signature Algorithm: sha256WithRSAEncryption
78:4e:25:28:42:ba:94:3f:db:73:6f:e7:e8:f7:59:bd:ed:f2:
00:58:f2:0e:2e:5d:04:dd:61:9d:69:63:40:c3:1d:3b:33:fa:
1f:8a:b4:aa:f2:86:01:b9:3e:e2:b5:39:10:c3:c0:52:2d:09:
b4:36:0f:ed:04:0f:08:82:48:a0:19:29:ee:1a:92:d6:6c:81:
79:fd:c4:5b:45:e7:58:57:54:25:76:72:cf:b6:05:c7:71:b1:
50:b1:46:a1:2e:ea:2f:9b:10:7e:95:a2:bd:4d:dd:f6:58:8c:
12:4b:01:25:ed:e5:1c:2d:80:f1:fa:b3:2d:7f:23:20:e5:0c:
ca:b2:be:8f:40:33:e9:78:98:77:29:e7:01:77:06:7c:6a:ab:
ec:45:34:48:2e:f9:db:3c:f5:be:a4:d1:b1:2c:b7:88:81:c2:
02:6b:2e:9d:9e:88:45:8e:a5:e2:ee:5b:9b:c5:78:47:45:47:
c2:4f:a6:18:45:35:9d:9d:ea:e3:17:f0:5b:b6:ff:a1:75:ff:
5b:1f:2b:8c:f2:ce:cb:0c:a9:48:e8:30:29:fc:1c:9a:d3:db:
f3:e7:4e:ed:f8:ff:ad:41:d8:5b:45:bc:d2:27:6a:b0:1d:2f:
e0:2e:85:58:f0:aa:a1:7e:b2:0b:61:57:7f:7f:4a:f3:74:c9:
48:1a:df:5e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQntXwtfuF96rAXdXm/nkdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjU2MzdkNDg4OGVlMDA1OGRlOWFkM2E3MGM0MmRjNDY5OTY5YTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjyisDR00FPnUnZX5C8hgbqkXZ44
Xq2PRB3npYZQnZ0YkNKmmpS9PirPEkpxDo+HJNNtqcMP31I+wwVMOs3mcQnQpM7F
I0nyMjJRAFMhTE2CKyjkQcvtOdf2ejQByUBG676/w0BuZZfx4nwD7KC5/CAgkVy3
ZJCkzRwBzm6TwsUXrWFEXGMjv+qSjRnFqlmv0NIUs875do1R7gaaBwGDbmqDQiGd
s28N1AdDI08qbM0t9hPgwKL+z10dwo25Sw01RRHF7/QLIVtU4rGWRL5GLxDxAdO4
oq1Ta729bvp0FFRQYjxKP2nyAlxRrQ7MrVI0Qn66N/7e74XadTsLnDXdXwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAJWN9SIjuAFjemtOnDELcRplpqZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2IyOTkw
ZC00YzUyLTQyZmEtYjZiNy1lMGE0YTRmOWNhYmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvYjI5OTBk
LTRjNTItNDJmYS1iNmI3LWUwYTRhNGY5Y2FiYy8xL0FsWTMxSWlPNEFXTjZhMDZj
TVF0eEdtV21way5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDE/zANBgkqhkiG9w0BAQsFAAOCAQEAeE4lKEK6lD/b
c2/n6PdZve3yAFjyDi5dBN1hnWljQMMdOzP6H4q0qvKGAbk+4rU5EMPAUi0JtDYP
7QQPCIJIoBkp7hqS1myBef3EW0XnWFdUJXZyz7YFx3GxULFGoS7qL5sQfpWivU3d
9liMEksBJe3lHC2A8fqzLX8jIOUMyrK+j0Az6XiYdynnAXcGfGqr7EU0SC752zz1
vqTRsSy3iIHCAmsunZ6IRY6l4u5bm8V4R0VHwk+mGEU1nZ3q4xfwW7b/oXX/Wx8r
jPLOywypSOgwKfwcmtPb8+dO7fj/rUHYW0W80idqsB0v4C6FWPCqoX6yC2FXf39K
83TJSBrfXg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:30 2025 by rpki-client