Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
File: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer (raw, json)
Hash identifier: BJwGL2hnGvGtNl96T6WKBYdqTrAe+vV7Zdkozn0MmHg=
Subject key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236961918B1CF9C1F9D1E5FD195F37D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49704
IP: 2001:678:924::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:61:91:8b:1c:f9:c1:f9:d1:e5:fd:19:5f:37:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:3d:ce:b5:84:1f:ad:5e:d5:99:99:c7:15:
10:9d:b9:cd:98:af:ab:ff:5c:68:a3:3b:81:d9:7c:
0a:5e:06:29:94:93:23:cd:46:e8:87:bf:77:07:c1:
fa:d2:e0:d4:85:6e:72:40:03:36:b3:69:95:92:d3:
f0:81:e7:7c:94:e8:9b:5e:b7:17:4c:d0:90:e8:ac:
b2:7b:b1:d8:e8:2c:9e:04:a6:d0:7d:dc:4a:ad:55:
de:9c:87:21:8c:5d:e4:98:cc:1c:4b:a9:c7:23:1b:
07:4a:9e:cf:9e:84:22:f8:8e:76:d6:c8:31:32:46:
15:98:e2:e7:91:19:1b:8e:9e:34:f7:2e:34:97:75:
43:34:3c:52:4c:f3:5e:48:a5:4f:1c:47:84:af:bc:
d4:43:c9:79:a6:c9:fe:7e:71:68:96:f4:eb:08:bc:
8e:5b:15:66:af:86:dc:5f:21:e8:08:30:2e:a0:8d:
74:5c:ac:b2:61:83:f9:92:b0:1a:c3:b0:c8:d3:ff:
85:7e:6e:50:c6:cf:8b:a4:00:ee:e0:ae:1a:c1:b4:
96:90:ff:63:fd:5b:39:9c:d1:cb:85:30:9e:cb:99:
cc:78:47:82:c0:3a:66:d7:08:1c:1d:03:2c:35:ad:
b2:2c:ec:90:b0:bc:96:9a:03:63:17:3d:88:d8:3f:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:924::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49704
Signature Algorithm: sha256WithRSAEncryption
aa:01:ef:84:83:a9:0a:56:99:bf:08:ad:9e:a7:14:82:0e:7f:
3b:82:ed:84:5d:b2:50:8d:22:cb:0b:1e:51:70:5b:6f:30:ec:
69:69:13:eb:98:33:0f:04:33:5c:3d:95:8b:39:cc:56:f9:5b:
97:07:13:97:42:42:b8:da:62:c4:c5:0b:9f:0d:63:59:06:90:
c7:16:ad:1e:43:89:75:cd:9b:8c:5b:bf:56:88:45:bd:33:5a:
a7:f9:88:18:cc:2d:25:d3:cd:25:8d:7f:b3:db:ac:73:cd:a6:
73:42:07:73:f7:c3:77:f1:f3:af:8a:04:b9:b5:87:e1:a0:b2:
e1:c0:9b:2c:f4:5b:e0:03:a3:06:4f:7d:fb:04:65:bf:47:7a:
67:17:c7:7f:ff:32:44:18:d1:da:af:92:6b:ee:02:7f:bb:58:
54:10:ce:68:a3:94:2e:7f:9d:4e:89:42:d6:67:1b:c7:4c:70:
c1:6c:ed:5c:53:c7:b5:b1:9c:8e:95:73:3c:c0:c5:00:41:66:
7b:5b:04:a6:d6:6c:73:61:16:88:00:22:af:4a:b2:99:51:38:
85:4d:bc:46:a4:64:65:ea:20:1c:49:2b:a9:25:22:eb:d1:16:
b5:34:25:7e:a3:8b:cd:33:2c:9a:5d:2e:91:83:ad:71:87:c3:
f9:87:4e:82
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQjaWGRixz5wfnR5f0ZXzfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmVmOTc3NTUwZmE3YzgxM2RlZTVjMWI5MGU5NTExYjljNjhkZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeE9zrWEH61e1ZmZxxUQnbnNmK+r
/1xoozuB2XwKXgYplJMjzUboh793B8H60uDUhW5yQAM2s2mVktPwged8lOibXrcX
TNCQ6Kyye7HY6CyeBKbQfdxKrVXenIchjF3kmMwcS6nHIxsHSp7PnoQi+I521sgx
MkYVmOLnkRkbjp409y40l3VDNDxSTPNeSKVPHEeEr7zUQ8l5psn+fnFolvTrCLyO
WxVmr4bcXyHoCDAuoI10XKyyYYP5krAaw7DI0/+Ffm5Qxs+LpADu4K4awbSWkP9j
/Vs5nNHLhTCey5nMeEeCwDpm1wgcHQMsNa2yLOyQsLyWmgNjFz2I2D9mawIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFGLvl3VQ+nyBPe5cG5DpURucaN0KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzhlMzhk
Ny1lN2Q1LTRkZDgtYTM2MC01ODRhMTQwYjhiNzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvOGUzOGQ3
LWU3ZDUtNGRkOC1hMzYwLTU4NGExNDBiOGI3MS8xL1l1LVhkVkQ2ZklFOTdsd2Jr
T2xSRzV4bzNRby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkkMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwDCKDANBgkqhkiG9w0BAQsFAAOCAQEAqgHvhIOpClaZvwitnqcUgg5/O4Lt
hF2yUI0iywseUXBbbzDsaWkT65gzDwQzXD2ViznMVvlblwcTl0JCuNpixMULnw1j
WQaQxxatHkOJdc2bjFu/VohFvTNap/mIGMwtJdPNJY1/s9usc82mc0IHc/fDd/Hz
r4oEubWH4aCy4cCbLPRb4AOjBk99+wRlv0d6ZxfHf/8yRBjR2q+Sa+4Cf7tYVBDO
aKOULn+dTolC1mcbx0xwwWztXFPHtbGcjpVzPMDFAEFme1sEptZsc2EWiAAir0qy
mVE4hU28RqRkZeogHEkrqSUi69EWtTQlfqOLzTMsml0ukYOtcYfD+YdOgg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:20 2025 by rpki-client