Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer (raw, json)
Hash identifier: EKNHUdqy1tpjWJFZtthCkXPxhydRw8BwUrMBGpuFbDw=
Subject key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FAECC9806FD53CCB0BEB3309D51ECF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62291
IP: 178.251.48.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ec:c9:80:6f:d5:3c:cb:0b:eb:33:09:d5:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:d6:20:a0:c8:bf:df:6b:e7:41:65:f9:35:
eb:32:40:02:81:c4:e6:8d:6a:46:ca:42:39:4a:d6:
bd:6f:41:12:b1:a6:13:26:77:1c:5a:6f:9c:e8:48:
ce:e1:68:fe:27:b8:ce:97:49:b1:31:09:e1:04:0a:
2d:9c:38:87:a8:0f:71:e7:36:25:ff:65:ca:a0:7d:
7f:56:54:f0:e1:73:59:3f:10:64:d4:ba:db:32:37:
c5:bd:7e:75:f6:6d:f2:3e:a9:55:77:30:b2:6a:ea:
57:3d:91:0a:b5:6a:42:a0:d4:a5:1c:4f:8b:4c:2e:
84:23:ca:e2:f0:b9:49:63:21:bb:e9:e5:cc:1a:3e:
4d:c9:db:22:d3:58:c9:d2:4a:46:c0:81:73:5f:df:
41:ef:8d:73:91:34:1c:40:9e:f9:75:d0:7d:27:2d:
65:d9:0c:96:56:f3:ea:32:d6:26:fd:e3:04:6e:07:
45:8c:71:8e:98:e5:f3:01:fc:5e:61:4f:26:af:ce:
d2:7c:8e:b4:0a:c8:bf:7b:a0:30:32:25:b9:bf:8c:
eb:6b:9a:89:0d:9d:93:9e:b0:36:77:77:09:c5:31:
c3:74:e9:89:92:a5:58:5b:9d:3b:5b:34:60:06:38:
d2:87:fd:77:b4:a4:5a:77:e8:7e:57:59:ba:03:81:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.48.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62291
Signature Algorithm: sha256WithRSAEncryption
54:af:81:20:d6:f8:fd:ad:c2:c1:2c:56:fb:7f:54:92:24:86:
c2:01:ea:ba:fa:cb:1f:e0:e1:d6:0a:70:85:64:61:40:2f:d1:
14:64:26:2e:42:44:b3:3a:43:7f:61:62:b0:99:03:fa:9f:a9:
cf:90:6d:16:39:b0:cb:13:fc:5c:f7:bc:bd:dd:c0:22:cc:88:
35:49:eb:e0:24:21:e7:d4:c7:e3:da:d7:3c:59:48:29:b3:d9:
76:5b:7f:02:b4:31:9c:06:1b:06:cf:cd:fc:84:f8:7b:01:8b:
9a:ce:54:6e:5b:db:45:72:a0:98:d7:2a:cf:d6:83:e6:14:22:
e0:4f:89:d8:89:01:b1:da:90:e7:f4:27:a1:12:23:57:55:be:
2a:9b:0a:91:28:e8:9a:60:d4:66:32:07:42:3e:4e:db:94:24:
01:d4:ed:d7:fe:53:bd:09:ac:fe:05:a5:ab:32:95:89:f2:f7:
6b:9f:5d:e8:bd:47:c3:d8:00:07:07:bc:bf:cb:3d:7c:39:82:
df:c0:05:23:88:52:5c:cd:dd:9b:b9:52:36:d8:50:bc:43:b7:
5c:cc:2c:0d:a4:d8:07:a8:0b:3b:2b:18:d8:72:4f:64:5d:d4:
c2:bd:16:98:5a:89:12:00:ec:40:bc:1b:e9:77:83:3a:e7:2d:
0f:2b:be:d7
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQi+uzJgG/VPMsL6zMJ1R7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2VkYWRjNzY1ZmE4ZjJmYTE5ZWIyMDk2M2NmNWJkMjM1ZDAxYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lPWIKDIv99r50Fl+TXrMkACgcTm
jWpGykI5Sta9b0ESsaYTJnccWm+c6EjO4Wj+J7jOl0mxMQnhBAotnDiHqA9x5zYl
/2XKoH1/VlTw4XNZPxBk1LrbMjfFvX519m3yPqlVdzCyaupXPZEKtWpCoNSlHE+L
TC6EI8ri8LlJYyG76eXMGj5Nydsi01jJ0kpGwIFzX99B741zkTQcQJ75ddB9Jy1l
2QyWVvPqMtYm/eMEbgdFjHGOmOXzAfxeYU8mr87SfI60Csi/e6AwMiW5v4zra5qJ
DZ2TnrA2d3cJxTHDdOmJkqVYW507WzRgBjjSh/13tKRad+h+V1m6A4FaPwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFGftrcdl+o8voZ6yCWPPW9I10BtDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzY2M2M2
Yy0xM2JmLTQ0MDAtODQ4Mi0yMWUwYTY2ZDU0NDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvNjYzYzZj
LTEzYmYtNDQwMC04NDgyLTIxZTBhNjZkNTQ0NC8xL1otMnR4Mlg2anktaG5ySUpZ
ODliMGpYUUcwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDsvswMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDzUzANBgkqhkiG9w0BAQsFAAOCAQEAVK+BINb4/a3CwSxW+39UkiSGwgHquvrL
H+Dh1gpwhWRhQC/RFGQmLkJEszpDf2FisJkD+p+pz5BtFjmwyxP8XPe8vd3AIsyI
NUnr4CQh59TH49rXPFlIKbPZdlt/ArQxnAYbBs/N/IT4ewGLms5UblvbRXKgmNcq
z9aD5hQi4E+J2IkBsdqQ5/QnoRIjV1W+KpsKkSjommDUZjIHQj5O25QkAdTt1/5T
vQms/gWlqzKVifL3a59d6L1Hw9gABwe8v8s9fDmC38AFI4hSXM3dm7lSNthQvEO3
XMwsDaTYB6gLOysY2HJPZF3Uwr0WmFqJEgDsQLwb6XeDOuctDyu+1w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:53 2025 by rpki-client