Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
File: k4EH0RRkaaEaY-X10tfbj28717M.cer (raw, json)
Hash identifier: mDN466ZYKSNOKIX213uiLBLlip9IbufiKi9vyPZUhT4=
Subject key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA849302EBF637FB53D8FB16DFD8E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212099
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:84:93:02:eb:f6:37:fb:53:d8:fb:16:df:d8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:9f:b5:4c:c7:cd:05:66:85:69:59:92:87:
94:9b:a3:f8:80:fe:ed:3d:c9:20:7b:34:96:b8:3f:
17:5d:e4:30:1d:d8:1d:7a:2f:84:23:c4:da:06:e2:
6c:e2:c8:28:b5:83:5b:8d:da:38:70:d6:b1:51:51:
78:86:70:0e:64:e7:a2:00:9e:2c:cb:d7:93:f5:06:
b9:4b:a0:57:95:20:ba:60:80:b1:b0:42:5d:cd:b1:
eb:1f:46:21:5f:99:94:81:26:eb:8d:6b:29:cd:b2:
32:db:49:03:b0:17:14:d7:ec:bb:66:f1:cc:c3:cc:
81:21:c2:9c:59:b2:d9:4c:17:a0:ea:8f:c6:1e:e5:
65:4f:dd:11:81:30:11:8b:ca:4c:48:82:f1:1e:1d:
68:07:16:fb:4a:12:6a:96:0d:f2:b0:b1:4a:1d:4c:
32:6d:66:f6:a8:02:35:29:71:84:e4:5e:9a:0e:49:
33:5a:11:96:bf:7c:e6:18:62:85:f1:6a:54:c0:79:
4b:00:06:4e:ad:27:3b:3a:25:8b:25:f4:2a:b2:2a:
f6:d2:86:ee:ca:f0:6c:5f:a9:5c:04:8e:79:8b:e4:
82:0f:9a:07:17:53:a5:16:2f:19:c3:1c:c6:54:61:
8f:a3:ec:e6:94:d8:ee:50:99:90:55:31:fa:20:db:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212099
Signature Algorithm: sha256WithRSAEncryption
79:1b:87:be:a5:cd:60:ce:7d:2d:ba:74:bb:ad:4f:cb:42:50:
de:72:a2:f1:84:5d:b2:d2:12:ae:46:0e:72:2e:96:4d:0e:48:
6b:f1:97:19:f8:3c:9c:55:ed:f6:fb:67:73:99:55:95:4e:66:
3b:d0:74:02:ff:a2:c5:9b:90:86:7a:8a:40:e9:42:c8:5e:2b:
0b:6d:94:af:c2:e1:1c:82:c2:34:dd:68:7f:5e:e5:a5:1a:ea:
56:37:af:75:ad:cf:e5:a4:ce:b6:c2:71:c5:1b:7c:ed:53:f7:
3a:95:6c:36:38:71:c0:69:78:38:a7:9b:12:66:37:71:81:da:
aa:50:4d:44:3d:e3:61:75:39:4d:d3:89:02:d2:f9:ed:24:3e:
45:f4:f0:c1:5a:fe:82:9e:d2:59:38:c6:54:0b:de:c2:76:23:
e8:c6:e9:1e:03:bb:cf:e1:f5:ca:fb:d5:87:e5:12:f1:be:5a:
91:32:e7:67:5f:10:11:e2:a4:26:2d:0e:81:5e:d9:b4:4c:42:
d8:8a:d6:1e:a1:ed:6c:23:35:b0:d0:75:c4:4b:5b:34:8e:91:
4b:98:ef:37:c6:fb:7f:e1:ce:da:8e:99:5f:2d:34:6d:81:67:
3b:60:2c:05:17:f6:40:36:d8:64:d3:fd:f9:2f:4e:c5:7c:56:
9d:ea:d1:b8
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQf+oSTAuv2N/tT2PsW39jjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzgxMDdkMTE0NjQ2OWExMWE2M2U1ZjVkMmQ3ZGI4ZjZmM2JkN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzemftUzHzQVmhWlZkoeUm6P4gP7t
PckgezSWuD8XXeQwHdgdei+EI8TaBuJs4sgotYNbjdo4cNaxUVF4hnAOZOeiAJ4s
y9eT9Qa5S6BXlSC6YICxsEJdzbHrH0YhX5mUgSbrjWspzbIy20kDsBcU1+y7ZvHM
w8yBIcKcWbLZTBeg6o/GHuVlT90RgTARi8pMSILxHh1oBxb7ShJqlg3ysLFKHUwy
bWb2qAI1KXGE5F6aDkkzWhGWv3zmGGKF8WpUwHlLAAZOrSc7OiWLJfQqsir20obu
yvBsX6lcBI55i+SCD5oHF1OlFi8ZwxzGVGGPo+zmlNjuUJmQVTH6INutXQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJOBB9EUZGmhGmPl9dLX249vO9ezMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2FmZjRh
OS0zYzVlLTRhNzEtYjUyNC1jYmM2Y2NjMDg5MzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvYWZmNGE5
LTNjNWUtNGE3MS1iNTI0LWNiYzZjY2MwODkzMi8xL2s0RUgwUlJrYWFFYVktWDEw
dGZiajI4NzE3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM8gzANBgkqhkiG9w0BAQsFAAOCAQEAeRuHvqXNYM59
Lbp0u61Py0JQ3nKi8YRdstISrkYOci6WTQ5Ia/GXGfg8nFXt9vtnc5lVlU5mO9B0
Av+ixZuQhnqKQOlCyF4rC22Ur8LhHILCNN1of17lpRrqVjevda3P5aTOtsJxxRt8
7VP3OpVsNjhxwGl4OKebEmY3cYHaqlBNRD3jYXU5TdOJAtL57SQ+RfTwwVr+gp7S
WTjGVAvewnYj6MbpHgO7z+H1yvvVh+US8b5akTLnZ18QEeKkJi0OgV7ZtExC2IrW
HqHtbCM1sNB1xEtbNI6RS5jvN8b7f+HO2o6ZXy00bYFnO2AsBRf2QDbYZNP9+S9O
xXxWnerRuA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:47 2025 by rpki-client