Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
File: CoRnuQcocepoG1eg2AHdo4xr_3U.cer (raw, json)
Hash identifier: 6v8GmVSXOI92x085rds1524NWiho8r/w+zPsluHQkfY=
Subject key identifier: 0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222018F968DBE135BA0747B17AE8319C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198427
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:18:f9:68:db:e1:35:ba:07:47:b1:7a:e8:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:eb:fa:ac:9a:34:71:d7:ef:71:10:ea:b4:
ff:e9:12:de:cb:8d:cc:cc:ee:3a:52:aa:b3:cb:d0:
2e:5b:ec:af:31:29:ef:60:33:37:22:fb:c1:13:9d:
93:ac:63:cc:bf:36:57:e4:ee:39:e5:6f:8a:2d:ee:
ad:d7:f1:eb:1d:ba:1a:1b:f0:88:27:4d:50:25:91:
ab:41:d3:f9:68:39:60:de:14:3c:a6:09:aa:4c:97:
70:63:42:66:1a:94:be:ff:4a:28:28:74:4e:27:f4:
a4:3d:31:fb:a9:64:10:96:18:63:74:a7:51:44:65:
a7:00:62:cb:94:7c:98:d7:1f:6b:f9:71:1f:85:87:
77:fc:02:4c:a7:05:35:1c:1f:22:ae:23:99:67:15:
2f:1b:0e:b0:4a:21:c2:bc:a3:5f:bd:b1:1b:2f:6f:
2c:cb:98:72:12:cc:a0:7e:31:14:52:d9:30:e2:09:
c6:80:3f:78:ff:dc:a1:37:4b:26:3f:1b:7c:be:39:
dd:84:f4:65:82:92:e7:ba:03:2d:02:d9:b7:9d:59:
04:cc:4f:dd:a9:44:82:cc:4c:c4:2f:ef:a7:30:20:
fe:04:c7:85:fb:b1:36:32:52:63:d2:b6:ab:ca:32:
f4:e2:97:09:f8:71:7d:3c:a6:c7:6f:55:e3:c6:3a:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198427
Signature Algorithm: sha256WithRSAEncryption
aa:6b:95:f9:0f:20:9e:c9:b2:94:b5:63:f5:e9:ff:18:b5:8e:
84:a8:3e:bf:65:b9:c2:55:ea:34:09:52:39:b3:ad:91:29:ed:
6d:8e:a2:fc:5f:20:ce:7b:5d:80:d3:e2:0f:30:98:9a:b5:96:
48:02:ff:1a:ea:85:72:3e:37:41:74:8c:db:24:c0:7b:7e:56:
12:55:fe:e6:62:d4:8f:ca:41:50:0a:10:28:d8:51:41:3b:d5:
21:fa:3f:f1:43:31:ac:77:62:54:11:0d:47:e6:54:a2:49:94:
4b:7b:41:b4:2e:08:bc:a2:9f:f5:90:e3:13:14:f5:d7:ef:24:
92:5e:47:e9:7e:25:65:61:94:31:eb:12:c0:39:33:a1:1c:53:
4b:a3:2b:c9:d4:29:ca:f6:bf:6d:b6:07:53:ec:de:71:93:a3:
e9:2d:ed:05:66:f7:2e:c0:e2:03:c7:2f:ea:48:7c:f0:97:ef:
b8:0c:bb:25:9e:ce:e1:44:e9:dd:ac:a9:a1:88:94:29:bc:20:
86:b3:78:6d:11:3d:f5:81:c0:0d:5f:3f:4b:55:ad:ec:29:36:
b6:61:a6:bd:c4:f5:0a:ea:d8:fb:47:1b:2b:ed:a3:0e:2e:38:
18:88:1f:08:bc:38:09:9f:46:fe:fd:d8:1d:08:04:84:22:64:
30:9c:30:8f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQiIBj5aNvhNboHR7F66DGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTg0NjdiOTA3Mjg3MWVhNjgxYjU3YTBkODAxZGRhMzhjNmJmZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBTr+qyaNHHX73EQ6rT/6RLey43M
zO46Uqqzy9AuW+yvMSnvYDM3IvvBE52TrGPMvzZX5O455W+KLe6t1/HrHboaG/CI
J01QJZGrQdP5aDlg3hQ8pgmqTJdwY0JmGpS+/0ooKHROJ/SkPTH7qWQQlhhjdKdR
RGWnAGLLlHyY1x9r+XEfhYd3/AJMpwU1HB8iriOZZxUvGw6wSiHCvKNfvbEbL28s
y5hyEsygfjEUUtkw4gnGgD94/9yhN0smPxt8vjndhPRlgpLnugMtAtm3nVkEzE/d
qUSCzEzEL++nMCD+BMeF+7E2MlJj0raryjL04pcJ+HF9PKbHb1Xjxjo+SwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAqEZ7kHKHHqaBtXoNgB3aOMa/91MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2RiNTMw
MS1jMTYzLTQ3YTktYjI5OC1hZGEyZGY3MTVhMWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZGI1MzAx
LWMxNjMtNDdhOS1iMjk4LWFkYTJkZjcxNWExZi8xL0NvUm51UWNvY2Vwb0cxZWcy
QUhkbzR4cl8zVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMHGzANBgkqhkiG9w0BAQsFAAOCAQEAqmuV+Q8gnsmy
lLVj9en/GLWOhKg+v2W5wlXqNAlSObOtkSntbY6i/F8gzntdgNPiDzCYmrWWSAL/
GuqFcj43QXSM2yTAe35WElX+5mLUj8pBUAoQKNhRQTvVIfo/8UMxrHdiVBENR+ZU
okmUS3tBtC4IvKKf9ZDjExT11+8kkl5H6X4lZWGUMesSwDkzoRxTS6MrydQpyva/
bbYHU+zecZOj6S3tBWb3LsDiA8cv6kh88JfvuAy7JZ7O4UTp3aypoYiUKbwghrN4
bRE99YHADV8/S1Wt7Ck2tmGmvcT1CurY+0cbK+2jDi44GIgfCLw4CZ9G/v3YHQgE
hCJkMJwwjw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:50:03 2025 by rpki-client