Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer (raw, json)
Hash identifier: A+rAzkaFfk88KBRsokxaCqOQbWFeZjm3Jb1o5YZEJIo=
Subject key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9F87B82680D17B28347020E57C77A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210506
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f8:7b:82:68:0d:17:b2:83:47:02:0e:57:c7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=960e68c8389b09dc345464a400af276568e7f96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:0e:c3:77:1f:d9:12:dd:39:54:70:41:3d:
d2:57:33:1f:3d:b7:68:59:0d:0f:bd:b3:5f:1f:7a:
0b:28:3c:2e:5c:af:fd:55:44:be:bd:ff:46:fa:9c:
94:b5:50:13:3b:95:f3:0d:81:6e:88:05:91:6d:82:
72:a8:d4:c6:fb:e3:59:27:e0:17:e4:8a:9e:84:79:
27:eb:8e:40:24:15:98:ad:22:22:75:9d:d7:49:1a:
8b:05:c4:0b:41:b7:03:e7:80:64:12:a8:5e:ad:86:
19:a5:19:5b:b3:2e:95:49:47:00:6a:fa:6c:49:70:
9e:b7:8d:15:c8:0c:db:90:e7:68:a6:19:d1:2a:ee:
7b:66:11:5c:09:aa:13:ab:0a:21:fc:ab:bc:eb:a7:
10:0f:4a:15:d7:84:97:5c:4a:04:c9:2f:9b:85:5f:
12:6c:02:0c:2d:04:f5:3a:d2:d2:0e:f3:de:48:c2:
d7:3a:6e:b3:f6:31:31:4d:87:a2:3d:18:89:32:fc:
a4:57:7a:29:59:3b:fd:5f:35:72:dc:2f:78:36:af:
7e:04:ed:8c:b4:3d:98:dc:72:09:ae:aa:82:33:50:
b4:dd:8a:b2:6f:21:8d:e9:50:30:be:7d:a8:dd:0b:
a6:46:e6:e8:cb:30:dd:cb:d0:1f:86:16:e4:3e:a7:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210506
Signature Algorithm: sha256WithRSAEncryption
69:d4:80:75:46:59:38:e0:ca:96:53:d3:b0:0e:ad:4f:af:3c:
9b:53:a6:80:c3:b5:64:dd:35:00:f3:34:c6:1e:86:51:d6:22:
06:0f:09:41:c0:42:95:77:86:34:f6:8c:c5:b1:35:f1:54:35:
6a:98:b5:e9:5e:b5:b5:df:5c:e9:88:cb:7f:e6:53:75:cb:d2:
32:66:dc:3e:b7:19:9b:a2:cc:84:5c:55:49:2b:06:eb:e7:7e:
36:22:fc:ed:4d:a6:36:82:f5:c8:0c:c4:d5:e6:15:b2:29:41:
1b:ee:88:86:05:69:e7:51:06:4b:17:a8:9c:37:b8:9f:7a:39:
b0:e4:4a:06:cd:9a:07:d5:cb:10:a1:45:75:fc:3b:87:8e:f8:
ab:de:ee:b8:b1:b2:8f:52:36:ed:f7:c9:1d:37:08:b5:e7:0f:
cd:02:2a:48:54:7b:a0:d1:03:24:f1:ea:fb:39:db:14:8c:b8:
ba:a8:06:62:34:88:f5:e6:7c:04:f4:e8:bd:4d:01:28:09:7e:
05:ab:bc:19:8d:bb:dc:3c:a8:1c:84:a8:76:33:10:5b:60:5c:
e6:c5:24:a4:e6:76:92:14:68:7e:30:1d:42:64:d2:31:c2:c9:
a5:f4:c2:bf:51:2c:d4:d4:ce:f2:7e:2a:34:3b:25:67:21:24:
45:bd:d0:64
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQm2fh7gmgNF7KDRwIOV8d6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjBlNjhjODM4OWIwOWRjMzQ1NDY0YTQwMGFmMjc2NTY4ZTdmOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlcOw3cf2RLdOVRwQT3SVzMfPbdo
WQ0PvbNfH3oLKDwuXK/9VUS+vf9G+pyUtVATO5XzDYFuiAWRbYJyqNTG++NZJ+AX
5IqehHkn645AJBWYrSIidZ3XSRqLBcQLQbcD54BkEqherYYZpRlbsy6VSUcAavps
SXCet40VyAzbkOdophnRKu57ZhFcCaoTqwoh/Ku866cQD0oV14SXXEoEyS+bhV8S
bAIMLQT1OtLSDvPeSMLXOm6z9jExTYeiPRiJMvykV3opWTv9XzVy3C94Nq9+BO2M
tD2Y3HIJrqqCM1C03YqybyGN6VAwvn2o3QumRuboyzDdy9AfhhbkPqcJnwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFJYOaMg4mwncNFRkpACvJ2Vo5/lqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzdiZDhm
My00NzUzLTQyY2QtOGZmMy02MzMzMTg2NTg5YTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvN2JkOGYz
LTQ3NTMtNDJjZC04ZmYzLTYzMzMxODY1ODlhOS8xL2xnNW95RGliQ2R3MFZHU2tB
SzhuWldqbi1Xby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM2SjANBgkqhkiG9w0BAQsFAAOCAQEAadSAdUZZOODK
llPTsA6tT688m1OmgMO1ZN01APM0xh6GUdYiBg8JQcBClXeGNPaMxbE18VQ1api1
6V61td9c6YjLf+ZTdcvSMmbcPrcZm6LMhFxVSSsG6+d+NiL87U2mNoL1yAzE1eYV
silBG+6IhgVp51EGSxeonDe4n3o5sORKBs2aB9XLEKFFdfw7h474q97uuLGyj1I2
7ffJHTcItecPzQIqSFR7oNEDJPHq+znbFIy4uqgGYjSI9eZ8BPTovU0BKAl+Bau8
GY273DyoHISodjMQW2Bc5sUkpOZ2khRofjAdQmTSMcLJpfTCv1Es1NTO8n4qNDsl
ZyEkRb3QZA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:24 2025 by rpki-client