Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer
File: IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer (raw, json)
Hash identifier: 9R4CRZslP3yld56reWfmQ+fDr5VWueZD0Ke8735YBuc=
Subject key identifier: 21:58:CC:F2:67:45:5E:CB:09:EE:84:C9:AD:9A:EB:00:7D:D1:EA:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067D41E0935F21EB19C9DD4057117E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206995
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d4:1e:09:35:f2:1e:b1:9c:9d:d4:05:71:17:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2158ccf267455ecb09ee84c9ad9aeb007dd1ea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:90:49:c3:29:2c:59:67:4d:be:d8:81:1e:
5d:cb:d8:1a:43:0d:fc:d7:5b:bf:6f:fe:3b:bd:0e:
78:a3:60:76:fb:df:7f:69:f3:38:67:0a:46:a3:f9:
0d:1c:f5:94:ed:4b:56:2a:ef:db:5b:f9:e3:06:6e:
33:e8:06:a1:c7:f5:d3:ae:5a:6c:1d:32:f9:72:fd:
84:61:1f:bb:b8:12:71:41:2a:ed:08:07:c0:8f:4a:
77:1e:61:e1:32:d3:13:51:e0:9b:a0:3f:d7:d2:c5:
15:ec:a3:c5:c1:e4:07:37:ef:27:58:25:2e:76:ae:
a8:4f:cc:c6:a5:7f:35:f4:88:18:7c:b5:d4:74:aa:
ac:9c:f1:5c:bc:12:0e:ff:2b:6e:34:b0:80:80:1f:
7d:bf:63:1b:56:09:79:5a:af:a7:a1:bf:2a:ee:66:
5b:2a:14:12:01:e0:84:61:11:ec:30:fd:52:48:74:
6f:b9:b2:a2:71:5d:a8:f5:72:f7:6a:b7:2b:12:57:
89:c8:40:79:8f:e7:d2:a1:d1:bd:0c:d6:b5:fc:8d:
de:a6:77:f7:fc:b9:31:ee:8a:4f:5c:bb:e8:f1:be:
5b:d1:a0:d7:2c:9c:91:72:10:e9:30:a5:2c:66:0c:
93:36:c6:ac:ef:17:f4:96:9b:01:f2:5a:99:7e:16:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:58:CC:F2:67:45:5E:CB:09:EE:84:C9:AD:9A:EB:00:7D:D1:EA:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206995
Signature Algorithm: sha256WithRSAEncryption
17:35:89:63:02:31:eb:4d:49:9c:6f:97:9b:80:04:5b:1d:53:
bc:e3:93:77:5e:5c:7c:9d:6e:3b:d2:14:a0:db:20:36:2b:92:
07:21:53:6c:d6:44:a9:b3:40:00:95:c6:b6:2d:c1:13:09:46:
ac:d6:15:bc:94:2b:63:a7:3d:f1:21:7b:db:8b:62:11:c5:06:
e6:77:a3:4d:78:f7:2e:60:19:a5:3f:15:cb:dc:cb:96:c3:9a:
c3:a2:56:96:e3:37:58:cc:3a:77:d3:d4:d3:ba:dc:3d:5d:bd:
49:d2:f8:1f:70:c2:19:54:0f:83:3e:e7:d2:3d:c6:3c:cf:47:
2b:e8:f4:89:5f:7c:3b:31:96:0a:b4:1b:cb:14:5a:95:12:b0:
48:d5:5a:c5:5b:c9:9a:71:cb:43:31:40:34:0a:87:81:da:b9:
c3:ef:bb:04:cb:b8:9a:cb:9e:f4:97:6f:49:ab:7b:da:26:8f:
15:cc:dd:81:6d:1c:31:e7:cb:67:9b:1b:87:1f:4b:a6:49:bb:
52:30:16:8c:51:c0:e4:9e:71:1e:eb:c4:01:ec:69:77:7b:8f:
10:b7:62:40:b6:b0:d4:9b:9d:7a:5f:2f:2d:dd:9a:b3:44:cc:
72:51:c9:2e:25:89:b2:0d:d5:37:ad:d3:41:cb:e5:d4:c0:41:
d2:60:65:4b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQgZ9QeCTXyHrGcndQFcRfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTU4Y2NmMjY3NDU1ZWNiMDllZTg0YzlhZDlhZWIwMDdkZDFlYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM2QScMpLFlnTb7YgR5dy9gaQw38
11u/b/47vQ54o2B2+99/afM4ZwpGo/kNHPWU7UtWKu/bW/njBm4z6Aahx/XTrlps
HTL5cv2EYR+7uBJxQSrtCAfAj0p3HmHhMtMTUeCboD/X0sUV7KPFweQHN+8nWCUu
dq6oT8zGpX819IgYfLXUdKqsnPFcvBIO/ytuNLCAgB99v2MbVgl5Wq+nob8q7mZb
KhQSAeCEYRHsMP1SSHRvubKicV2o9XL3arcrEleJyEB5j+fSodG9DNa1/I3epnf3
/Lkx7opPXLvo8b5b0aDXLJyRchDpMKUsZgyTNsas7xf0lpsB8lqZfhZnawIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFCFYzPJnRV7LCe6Eya2a6wB90eqbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2YxMGVi
MS00ZThmLTQzOWUtOTY4My1mNTMzMjU3NjdiNTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvZjEwZWIx
LTRlOGYtNDM5ZS05NjgzLWY1MzMyNTc2N2I1Ny8xL0lWak04bWRGWHNzSjdvVEpy
WnJyQUgzUjZwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMokzANBgkqhkiG9w0BAQsFAAOCAQEAFzWJYwIx601J
nG+Xm4AEWx1TvOOTd15cfJ1uO9IUoNsgNiuSByFTbNZEqbNAAJXGti3BEwlGrNYV
vJQrY6c98SF724tiEcUG5nejTXj3LmAZpT8Vy9zLlsOaw6JWluM3WMw6d9PU07rc
PV29SdL4H3DCGVQPgz7n0j3GPM9HK+j0iV98OzGWCrQbyxRalRKwSNVaxVvJmnHL
QzFANAqHgdq5w++7BMu4msue9JdvSat72iaPFczdgW0cMefLZ5sbhx9Lpkm7UjAW
jFHA5J5xHuvEAexpd3uPELdiQLaw1Judel8vLd2as0TMclHJLiWJsg3VN63TQcvl
1MBB0mBlSw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:39 2025 by rpki-client