Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ak81ztxqAWg6Z4q05ZiJdSakCIA.cer
File: ak81ztxqAWg6Z4q05ZiJdSakCIA.cer (raw, json)
Hash identifier: O9xzHeC5TgrmCokDKYPnJpp49fC+Usbr+zskRj63sQQ=
Subject key identifier: 6A:4F:35:CE:DC:6A:01:68:3A:67:8A:B4:E5:98:89:75:26:A4:08:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214460F6A65785092CE00DACB0FDB437
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50104
AS: 210537
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:60:f6:a6:57:85:09:2c:e0:0d:ac:b0:fd:b4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4f35cedc6a01683a678ab4e598897526a40880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:c7:23:bb:ab:57:c1:01:ce:12:b3:63:55:
4c:90:0f:ff:6e:45:fd:e8:ff:fa:bb:27:8c:b8:a6:
64:a5:05:d8:40:e9:21:41:08:99:fa:6e:5d:24:57:
f3:5f:f9:d0:a1:13:ed:46:e8:b0:df:db:ab:2f:ac:
ec:da:a0:0f:36:00:80:92:e8:01:12:a8:4e:9f:e4:
78:7a:9c:12:55:e1:e9:ec:e0:18:6f:23:2e:43:04:
b0:fe:df:61:8f:5a:3f:07:1b:ab:92:7f:22:f3:ee:
dc:88:a7:64:16:c5:ef:0f:96:a2:c2:4e:68:da:35:
9b:0a:02:e8:2d:74:37:df:a6:d3:3d:14:46:51:ef:
39:09:74:58:a4:9f:c1:74:92:70:2f:48:c4:5f:15:
b5:63:65:c6:5d:f9:01:88:23:dd:ee:86:65:a5:9b:
73:5d:99:b0:ea:24:91:61:a0:4b:d7:f8:2c:3d:10:
93:c3:24:76:9a:e8:8c:eb:5c:20:d3:6f:42:80:b9:
84:48:c0:dc:55:02:54:cf:30:20:37:53:de:0a:00:
58:ba:04:d2:84:51:89:37:28:aa:e6:fb:47:50:b3:
a2:72:13:99:a3:75:d0:31:a2:06:91:03:51:a1:9b:
96:0c:81:a8:0d:45:d1:a6:98:a7:99:92:4a:16:21:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:35:CE:DC:6A:01:68:3A:67:8A:B4:E5:98:89:75:26:A4:08:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50104
210537
Signature Algorithm: sha256WithRSAEncryption
7c:78:53:9d:21:fd:5c:8e:88:93:de:18:13:85:45:b5:2a:91:
7f:32:cb:b5:24:41:a7:95:e2:4d:78:cf:7b:26:d7:65:bd:eb:
33:cf:f1:37:61:e2:25:cc:f0:9a:ba:ad:36:87:2c:50:eb:ce:
c1:12:0c:52:64:2e:d5:82:08:45:72:13:ab:a7:65:5b:5e:16:
03:0a:c4:83:94:e9:b6:d6:c5:d3:60:1d:67:a7:84:6b:0b:3f:
a6:d3:7b:54:43:09:99:6d:cd:85:a7:c0:c8:46:1b:e6:96:48:
5e:aa:7b:d4:76:58:3d:99:69:03:31:b4:0a:a5:a8:26:c0:79:
bd:7a:56:bc:b0:69:77:50:42:e8:26:d2:bb:dc:a3:cb:06:e2:
b3:3c:b8:0d:c6:23:7b:a2:cc:68:79:e3:28:f1:ae:25:d5:5b:
4b:33:96:3c:56:30:00:7c:97:88:6e:55:4f:b8:72:60:ed:b9:
0a:9d:d4:7f:c2:33:a4:19:ce:2b:f7:a4:88:e4:fb:81:a5:f2:
79:55:a3:e4:0e:21:ee:b6:bc:20:32:aa:d3:ff:e5:c5:b5:0a:
42:3f:d0:66:96:c9:e3:e9:01:af:52:d4:ca:70:4b:ed:9d:9d:
05:a8:c5:d7:b7:e9:00:d6:1d:76:1e:0d:f2:01:11:e4:9f:ff:
19:10:90:c1
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQhRGD2pleFCSzgDayw/bQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTRmMzVjZWRjNmEwMTY4M2E2NzhhYjRlNTk4ODk3NTI2YTQwODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55jHI7urV8EBzhKzY1VMkA//bkX9
6P/6uyeMuKZkpQXYQOkhQQiZ+m5dJFfzX/nQoRPtRuiw39urL6zs2qAPNgCAkugB
EqhOn+R4epwSVeHp7OAYbyMuQwSw/t9hj1o/Bxurkn8i8+7ciKdkFsXvD5aiwk5o
2jWbCgLoLXQ336bTPRRGUe85CXRYpJ/BdJJwL0jEXxW1Y2XGXfkBiCPd7oZlpZtz
XZmw6iSRYaBL1/gsPRCTwyR2muiM61wg029CgLmESMDcVQJUzzAgN1PeCgBYugTS
hFGJNyiq5vtHULOichOZo3XQMaIGkQNRoZuWDIGoDUXRppinmZJKFiGSnwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFGpPNc7cagFoOmeKtOWYiXUmpAiAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2YwZjVh
Y2E5LWRjMjgtNDU5Mi05NzEyLTQwODRkZTljOTQyMS8xLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjBm
NWFjYTktZGMyOC00NTkyLTk3MTItNDA4NGRlOWM5NDIxLzEvNkE0RjM1Q0VEQzZB
MDE2ODNBNjc4QUI0RTU5ODg5NzUyNkE0MDg4MC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAw7gC
AwM2aTANBgkqhkiG9w0BAQsFAAOCAQEAfHhTnSH9XI6Ik94YE4VFtSqRfzLLtSRB
p5XiTXjPeybXZb3rM8/xN2HiJczwmrqtNocsUOvOwRIMUmQu1YIIRXITq6dlW14W
AwrEg5TpttbF02AdZ6eEaws/ptN7VEMJmW3NhafAyEYb5pZIXqp71HZYPZlpAzG0
CqWoJsB5vXpWvLBpd1BC6CbSu9yjywbiszy4DcYje6LMaHnjKPGuJdVbSzOWPFYw
AHyXiG5VT7hyYO25Cp3Uf8IzpBnOK/ekiOT7gaXyeVWj5A4h7ra8IDKq0//lxbUK
Qj/QZpbJ4+kBr1LUynBL7Z2dBajF17fpANYddh4N8gER5J//GRCQwQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:37 2025 by rpki-client