Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer (raw, json)
Hash identifier: L9b86jsA3rMSuN6EwEW2WhdKdEc7z7LT7Z2o3Xf8hx0=
Subject key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206843D879C8013C33A69439D7D90B91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42985
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:43:d8:79:c8:01:3c:33:a6:94:39:d7:d9:0b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f0:af:32:bb:5d:5d:72:27:9b:f7:ad:0c:70:
19:04:f8:11:24:f7:2d:57:7d:be:6d:31:0d:31:1f:
92:dc:18:1f:ed:d8:c3:58:ec:0f:8f:9c:5f:eb:3d:
5f:99:23:ba:60:1a:0e:e5:9f:b4:b3:fa:41:81:0f:
92:c5:b1:9a:0b:d3:ba:7d:c3:1d:3a:dc:78:07:0c:
12:a1:39:40:e1:56:8a:18:64:1e:53:33:46:37:6e:
e5:30:5c:85:97:c9:52:19:dc:d3:d7:68:38:72:cd:
b0:9e:9e:20:2d:5a:aa:f0:12:7d:e6:fd:84:7b:b2:
0c:c9:83:5d:f1:cc:83:02:eb:c5:fe:a4:5a:17:65:
5e:d8:2b:12:46:b8:cd:5d:4d:79:70:24:8a:32:43:
b1:f7:40:25:f9:d1:ed:b6:59:d4:a6:e4:8b:67:fb:
f4:4e:0d:f1:7a:ce:8f:66:75:30:e6:5e:ef:da:20:
63:5e:5e:6a:c3:1b:f8:e5:e9:ee:e5:ae:9d:ee:7e:
a4:a3:40:8c:fb:dd:89:51:4a:79:3e:0d:cc:17:b1:
43:8f:2e:83:3d:2c:f5:df:fa:a3:18:ee:7b:53:f1:
90:a7:03:a1:ac:2d:2c:63:9a:59:91:69:a0:06:aa:
50:d4:fa:55:37:94:f2:9b:11:f0:eb:17:f0:ef:94:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42985
Signature Algorithm: sha256WithRSAEncryption
24:70:43:32:e1:4f:55:6c:27:ee:16:c6:cf:cd:80:30:62:eb:
85:fd:e5:65:90:80:e5:a3:30:40:64:fd:b6:fe:5e:a5:18:5e:
8f:39:37:c0:cc:23:a8:75:ba:33:a5:24:16:95:d5:71:fd:e0:
9b:c6:fb:80:27:2a:c5:e1:64:e5:90:52:69:a6:fe:73:f1:09:
f3:e4:e4:44:61:bd:88:90:a6:9b:88:18:19:38:86:a6:26:97:
ea:29:25:51:b4:14:29:76:a2:c2:e3:ea:1d:3f:db:11:54:14:
7f:b3:cb:88:80:a5:68:92:2a:ad:64:3d:73:18:a1:c5:d1:17:
33:10:27:b5:06:b0:65:88:64:f0:75:f0:54:1c:07:d0:5d:f3:
e4:0b:1d:07:47:88:b2:54:cc:2e:a6:f5:e5:ca:1e:9d:21:cd:
8a:89:71:32:1d:6b:08:5c:fb:05:72:42:d0:75:a3:7b:59:78:
9b:7d:4a:65:40:62:5c:02:ea:e7:34:92:d8:4a:bb:93:63:93:
d9:b8:fb:b0:15:c9:ab:43:9e:df:f0:c1:8e:07:9d:8e:90:1b:
b2:ae:99:93:45:77:8f:3a:e2:66:4f:77:71:83:1e:9f:c9:36:
b5:04:1e:f3:36:de:15:91:51:ce:a8:47:8b:3c:ab:cf:01:ac:
d1:f9:da:21
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQgaEPYecgBPDOmlDnX2QuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTg1ZDM3OTcyNmM4ZmMwOTZkMjdlODhmZGExMTdiM2IyNjU0ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fCvMrtdXXInm/etDHAZBPgRJPct
V32+bTENMR+S3Bgf7djDWOwPj5xf6z1fmSO6YBoO5Z+0s/pBgQ+SxbGaC9O6fcMd
Otx4BwwSoTlA4VaKGGQeUzNGN27lMFyFl8lSGdzT12g4cs2wnp4gLVqq8BJ95v2E
e7IMyYNd8cyDAuvF/qRaF2Ve2CsSRrjNXU15cCSKMkOx90Al+dHttlnUpuSLZ/v0
Tg3xes6PZnUw5l7v2iBjXl5qwxv45enu5a6d7n6ko0CM+92JUUp5Pg3MF7FDjy6D
PSz13/qjGO57U/GQpwOhrC0sY5pZkWmgBqpQ1PpVN5TymxHw6xfw75S5TQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAqF03lybI/AltJ+iP2hF7OyZU5ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzIzZDU2
MC0yNTNiLTRmZTEtOWM5ZC01ZTkyZjQ3NTU5MDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvMjNkNTYw
LTI1M2ItNGZlMS05YzlkLTVlOTJmNDc1NTkwNC8xL0NvWFRlWEpzajhDVzBuNklf
YUVYczdKbFRsay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCn6TANBgkqhkiG9w0BAQsFAAOCAQEAJHBDMuFPVWwn
7hbGz82AMGLrhf3lZZCA5aMwQGT9tv5epRhejzk3wMwjqHW6M6UkFpXVcf3gm8b7
gCcqxeFk5ZBSaab+c/EJ8+TkRGG9iJCmm4gYGTiGpiaX6iklUbQUKXaiwuPqHT/b
EVQUf7PLiIClaJIqrWQ9cxihxdEXMxAntQawZYhk8HXwVBwH0F3z5AsdB0eIslTM
Lqb15coenSHNiolxMh1rCFz7BXJC0HWje1l4m31KZUBiXALq5zSS2Eq7k2OT2bj7
sBXJq0Oe3/DBjgedjpAbsq6Zk0V3jzriZk93cYMen8k2tQQe8zbeFZFRzqhHizyr
zwGs0fnaIQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:00 2025 by rpki-client