Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.cer (raw, json)
Hash identifier: /l0Wf5uF8U5AxzOJU7L8USP/KJ41jKIipkHuhwHD4fU=
Subject key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143EDB6D51E340C9DF82CAB1E48A162
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198071
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ed:b6:d5:1e:34:0c:9d:f8:2c:ab:1e:48:a1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:16:fc:36:7c:16:5a:81:6a:e4:65:ab:72:
42:b5:fd:ba:12:ae:52:bb:c5:e8:78:a9:c6:ce:7d:
f9:2c:09:b8:4b:78:b9:a7:ff:d4:a1:42:43:62:72:
c6:d9:da:18:75:08:cf:35:b3:99:02:ef:0b:58:3a:
32:be:f9:25:ac:16:ae:71:bc:0d:15:f2:24:20:c3:
67:aa:e9:99:f3:d6:92:a9:b8:9f:1c:c4:c2:23:59:
28:a6:5d:b2:34:64:2e:e2:22:4d:66:f5:49:a5:68:
00:3f:5a:8e:57:55:85:f0:77:bf:6f:f1:7a:24:3d:
b2:12:db:4b:9a:4d:4e:09:bf:00:61:05:9f:4b:93:
62:56:00:d4:04:0b:a5:e0:34:cf:b8:8b:18:44:c4:
65:09:58:a8:86:79:30:35:ea:ca:cc:24:2c:7f:85:
56:a2:7c:39:af:d0:e8:d0:b6:ef:13:92:42:aa:ad:
c4:3c:7e:d7:81:b7:d8:16:17:7c:d0:b0:cf:83:b7:
09:f9:0a:99:a4:06:b1:91:e1:8c:42:17:b0:93:f4:
f1:aa:c6:bd:a1:a2:68:b6:ef:1d:7a:35:f2:60:6d:
62:38:39:ac:c2:c6:21:0c:68:07:f4:2b:57:23:1f:
b9:8f:33:81:fe:04:71:59:88:b6:8e:66:c4:16:b9:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198071
Signature Algorithm: sha256WithRSAEncryption
8b:50:ae:b7:8f:2a:37:7a:c4:f7:6c:94:9e:af:0b:fa:7c:3a:
6c:61:d9:4e:28:52:79:79:da:d9:b1:1d:82:41:3b:da:c2:3d:
a1:ee:5d:c0:59:7a:04:6f:65:c5:37:4e:97:ac:2d:68:73:19:
94:49:84:40:d3:98:9c:7d:07:46:f2:94:23:98:1b:01:f1:8c:
5c:58:71:a8:f7:4f:a3:94:f2:b2:e0:71:0c:ac:f5:a1:9f:79:
dc:4a:5b:fc:3e:4b:57:22:74:37:ec:69:7a:60:1f:a4:76:58:
6a:b4:06:5d:68:31:8a:a9:5b:fc:64:0c:12:2b:7f:65:3c:48:
4f:11:7e:6c:21:9c:21:bd:2c:07:ed:9b:fe:7a:e3:f6:50:c6:
9a:52:9e:55:74:fa:dc:11:81:2a:32:11:02:e3:c0:23:7c:4f:
b5:83:51:2d:d4:46:e3:16:16:47:ea:bc:55:2b:d9:1c:6f:b8:
0b:69:01:9f:98:ab:5b:37:68:47:60:c8:24:d9:e2:1a:65:c1:
31:6c:63:ad:25:95:50:ec:74:e4:be:ff:a8:67:6f:44:0b:86:
bb:b8:80:c3:2c:7f:f3:61:81:76:ce:26:94:69:9f:13:7a:96:
7a:74:1e:3a:d6:c5:ee:41:6b:8e:52:45:58:9f:ca:f6:a5:f3:
6e:c4:35:24
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQhQ+221R40DJ34LKseSKFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTJkZmVjYmI0MzE3MDI5Nzk2MWEyMWI3ZTViNGEzYzQ3ZGUwOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky8W/DZ8FlqBauRlq3JCtf26Eq5S
u8XoeKnGzn35LAm4S3i5p//UoUJDYnLG2doYdQjPNbOZAu8LWDoyvvklrBaucbwN
FfIkIMNnqumZ89aSqbifHMTCI1kopl2yNGQu4iJNZvVJpWgAP1qOV1WF8He/b/F6
JD2yEttLmk1OCb8AYQWfS5NiVgDUBAul4DTPuIsYRMRlCViohnkwNerKzCQsf4VW
onw5r9Do0LbvE5JCqq3EPH7XgbfYFhd80LDPg7cJ+QqZpAaxkeGMQhewk/Txqsa9
oaJotu8dejXyYG1iODmswsYhDGgH9CtXIx+5jzOB/gRxWYi2jmbEFrnePwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKUt/su0MXApeWGiG35bSjxH3glbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzYzMjkx
NS1lN2ExLTQ2MTAtYmYxNS1iZDU3OTBhMmJhNTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNjMyOTE1
LWU3YTEtNDYxMC1iZjE1LWJkNTc5MGEyYmE1MC8xL3BTMy15N1F4Y0NsNVlhSWJm
bHRLUEVmZUNWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMFtzANBgkqhkiG9w0BAQsFAAOCAQEAi1Cut48qN3rE
92yUnq8L+nw6bGHZTihSeXna2bEdgkE72sI9oe5dwFl6BG9lxTdOl6wtaHMZlEmE
QNOYnH0HRvKUI5gbAfGMXFhxqPdPo5TysuBxDKz1oZ953Epb/D5LVyJ0N+xpemAf
pHZYarQGXWgxiqlb/GQMEit/ZTxITxF+bCGcIb0sB+2b/nrj9lDGmlKeVXT63BGB
KjIRAuPAI3xPtYNRLdRG4xYWR+q8VSvZHG+4C2kBn5irWzdoR2DIJNniGmXBMWxj
rSWVUOx05L7/qGdvRAuGu7iAwyx/82GBds4mlGmfE3qWenQeOtbF7kFrjlJFWJ/K
9qXzbsQ1JA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:30 2025 by rpki-client