Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
File: pmAQdyZRcCotMzyDFfGukvbMdJA.cer (raw, json)
Hash identifier: dFCmLp/X+TRAJNZzpsptdZ1r6wUsx6sQxWMtFGIVRZY=
Subject key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA512156D45080097B778B32A44733
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207301
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:51:21:56:d4:50:80:09:7b:77:8b:32:a4:47:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:1c:0d:46:e5:5c:62:2e:ed:20:47:d0:d4:
e6:11:e2:81:94:65:5e:63:35:cc:e0:96:b4:f8:d2:
28:0e:6e:8a:87:84:84:6e:a9:64:c6:ce:26:09:21:
37:0e:78:49:0c:be:e8:5a:ec:46:95:f3:ed:a4:9e:
2a:e2:d8:64:a7:39:52:2a:2a:f4:95:25:b4:f4:48:
98:29:63:7f:9f:62:ab:c4:8b:0f:c4:85:5e:db:b1:
fa:03:86:67:75:02:42:ff:87:d9:7a:de:59:77:e5:
0d:b5:af:82:f7:3b:7e:6b:ec:c7:4d:83:44:fc:1a:
c2:35:4b:16:4e:19:fe:18:a5:0e:dd:26:dd:0c:b5:
ff:56:a8:d0:ad:69:b5:99:c8:be:17:26:50:7e:6d:
08:ec:d1:f9:81:c6:e7:ba:ba:02:28:bc:5d:ad:e5:
86:f7:54:bd:d0:ea:24:9b:ac:74:f1:17:7f:ad:4a:
6f:4c:4d:a0:61:d3:c5:c1:31:9f:80:9b:17:e8:95:
e0:a2:db:c0:51:1d:6f:00:ee:12:6e:91:4f:2f:60:
fd:0d:48:5c:98:cb:89:fc:b9:f1:35:a2:56:fa:62:
be:91:fc:60:dc:5a:88:db:b8:b7:80:e9:8b:54:ec:
77:ba:ff:32:ef:16:fe:ff:17:cd:40:be:e6:cf:7c:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207301
Signature Algorithm: sha256WithRSAEncryption
b1:4f:db:af:ef:c1:ef:66:c3:13:ed:fa:2a:2a:3a:83:e9:78:
b9:f7:a8:47:57:36:c3:78:20:2f:04:78:5a:5b:78:49:91:04:
a3:cb:74:f6:38:96:4b:fd:d6:60:73:08:05:6d:88:ac:93:de:
85:1c:45:d1:1d:e5:c8:6c:dd:f8:98:cc:b0:fb:d0:da:f9:df:
9a:19:cc:90:e4:02:f9:32:03:39:8d:09:17:f8:14:ec:d7:c4:
c2:34:75:76:37:03:47:ce:50:c6:b6:da:a5:56:dd:63:ea:8b:
88:01:38:32:e9:1e:8c:4c:b4:73:c4:ec:58:5b:88:35:4f:f1:
5e:52:e9:3c:b2:6e:71:86:9f:c0:f2:0a:d7:dd:34:6d:b3:a9:
c4:9a:ff:82:1c:dc:49:b5:0e:ad:96:cb:4f:14:05:51:4e:c7:
38:93:a0:39:0e:ce:2e:b7:47:70:98:da:a8:08:bb:0c:6d:64:
ea:df:06:74:f1:50:9e:46:41:32:55:5c:b6:62:b3:39:e3:88:
bd:28:25:d7:a8:56:ea:4e:d8:c4:cf:e4:eb:65:34:96:c0:b8:
25:d7:4b:25:71:17:08:ce:7b:be:5a:6e:bc:85:cd:00:71:6c:
3a:d3:c7:e3:5d:02:5a:09:38:55:37:41:a4:b5:50:42:82:c5:
ae:3b:23:8c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQf+lEhVtRQgAl7d4sypEczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjYwMTA3NzI2NTE3MDJhMmQzMzNjODMxNWYxYWU5MmY2Y2M3NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8AcDUblXGIu7SBH0NTmEeKBlGVe
YzXM4Ja0+NIoDm6Kh4SEbqlkxs4mCSE3DnhJDL7oWuxGlfPtpJ4q4thkpzlSKir0
lSW09EiYKWN/n2KrxIsPxIVe27H6A4ZndQJC/4fZet5Zd+UNta+C9zt+a+zHTYNE
/BrCNUsWThn+GKUO3SbdDLX/VqjQrWm1mci+FyZQfm0I7NH5gcbnuroCKLxdreWG
91S90Ookm6x08Rd/rUpvTE2gYdPFwTGfgJsX6JXgotvAUR1vAO4SbpFPL2D9DUhc
mMuJ/LnxNaJW+mK+kfxg3FqI27i3gOmLVOx3uv8y7xb+/xfNQL7mz3yysQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKZgEHcmUXAqLTM8gxXxrpL2zHSQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzQ1NGQ3
Yi01ZDRhLTRjZjEtODVlYi00ZmE3MWYyNGVlNDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNDU0ZDdi
LTVkNGEtNGNmMS04NWViLTRmYTcxZjI0ZWU0My8xL3BtQVFkeVpSY0NvdE16eURG
Zkd1a3ZiTWRKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMpxTANBgkqhkiG9w0BAQsFAAOCAQEAsU/br+/B72bD
E+36Kio6g+l4ufeoR1c2w3ggLwR4Wlt4SZEEo8t09jiWS/3WYHMIBW2IrJPehRxF
0R3lyGzd+JjMsPvQ2vnfmhnMkOQC+TIDOY0JF/gU7NfEwjR1djcDR85QxrbapVbd
Y+qLiAE4MukejEy0c8TsWFuINU/xXlLpPLJucYafwPIK1900bbOpxJr/ghzcSbUO
rZbLTxQFUU7HOJOgOQ7OLrdHcJjaqAi7DG1k6t8GdPFQnkZBMlVctmKzOeOIvSgl
16hW6k7YxM/k62U0lsC4JddLJXEXCM57vlpuvIXNAHFsOtPH410CWgk4VTdBpLVQ
QoLFrjsjjA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:33 2025 by rpki-client