Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer (raw, json)
Hash identifier: eDSdNMON/1bWwL3SxYOYDjYGcpM8WZ9e2gW1Jj1HqiM=
Subject key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423690D69FC131161E743F33D5DE0AD17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211358
AS: 215536
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0d:69:fc:13:11:61:e7:43:f3:3d:5d:e0:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56daa6f850414a13f650df094506628a46dc12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:a0:f6:4d:fe:d5:a3:bc:aa:22:f7:be:35:
22:b3:c1:c7:b5:e6:28:cd:25:b2:80:a1:4e:38:0e:
7a:32:90:e9:f1:8b:f8:ec:f9:46:8b:75:9b:50:02:
47:cb:4c:74:12:32:da:f5:d1:97:03:e2:16:73:04:
3c:9c:a2:14:a0:8a:83:41:b3:da:a4:4c:32:24:93:
4b:22:6c:7e:46:2a:e9:1e:66:f4:f7:68:72:0f:22:
ee:dd:45:f9:bb:54:4f:ce:15:df:8d:ed:ab:f1:c5:
26:4b:3d:df:b7:4e:5a:f2:ba:7a:da:19:ac:ab:15:
bb:ed:dd:71:41:7a:b6:5f:7f:53:3a:ca:cf:78:67:
ee:de:08:2b:a9:32:35:08:9d:6c:6c:4f:e4:b1:5a:
b3:43:1c:4c:ce:d6:91:24:c9:72:e9:f4:05:e8:c4:
89:d0:ce:71:15:16:88:f2:d9:dd:2f:2f:d9:15:be:
11:9e:31:63:6f:83:af:f0:09:07:a4:b7:9c:a2:c0:
5f:ef:be:52:36:d6:3a:f3:19:09:9d:58:39:a8:46:
55:b0:ed:59:99:8b:5d:09:0d:ca:ec:94:d2:81:6b:
a8:4f:7d:ed:9f:10:20:77:45:e9:28:b0:fc:b1:5d:
08:aa:b8:de:95:ea:e9:fd:cc:d3:f6:70:3b:e1:d6:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211358
215536
Signature Algorithm: sha256WithRSAEncryption
77:6e:6f:9b:7c:86:8f:75:dc:d7:93:6b:68:7b:a7:a8:20:a8:
37:ce:05:9d:fe:9d:52:64:3e:47:8a:6c:d3:67:be:6b:f1:8c:
21:3d:6a:7e:0a:be:ff:a7:23:46:46:d7:31:ac:08:da:85:fd:
7c:dd:a0:96:f9:6f:9c:24:15:92:b9:bf:49:4f:bd:1b:45:a1:
eb:5d:8a:0b:c9:d9:41:6f:dc:99:7a:db:fc:e9:e6:3a:73:05:
a6:1b:57:96:99:61:05:af:0e:f2:78:e9:da:8c:20:d0:f7:f3:
3b:c4:8f:20:41:67:61:3a:13:00:c0:a0:03:5e:86:59:4c:b3:
17:a2:8a:b8:9a:e2:c8:d9:53:34:71:01:41:80:23:a4:89:0b:
10:2f:ce:bd:44:04:ae:31:3b:3e:b9:65:3a:a1:7c:35:d9:e0:
df:2b:67:13:fd:50:ad:8e:5c:3e:7a:25:ac:df:57:25:32:1e:
8f:c0:e5:4f:f6:37:11:6d:1a:dc:89:51:0e:58:d4:1f:59:9e:
a2:43:6c:2a:3b:16:3b:a7:01:1b:e2:d1:f3:ee:ea:02:e4:20:
dc:5b:f4:66:63:54:66:dc:95:6d:43:cf:de:ad:23:ec:ab:a9:
df:70:02:4c:11:d9:30:05:e2:fb:b3:11:9d:b1:b4:19:54:92:
94:24:5d:a4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQjaQ1p/BMRYedD8z1d4K0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTZkYWE2Zjg1MDQxNGExM2Y2NTBkZjA5NDUwNjYyOGE0NmRjMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZig9k3+1aO8qiL3vjUis8HHteYo
zSWygKFOOA56MpDp8Yv47PlGi3WbUAJHy0x0EjLa9dGXA+IWcwQ8nKIUoIqDQbPa
pEwyJJNLImx+RirpHmb092hyDyLu3UX5u1RPzhXfje2r8cUmSz3ft05a8rp62hms
qxW77d1xQXq2X39TOsrPeGfu3ggrqTI1CJ1sbE/ksVqzQxxMztaRJMly6fQF6MSJ
0M5xFRaI8tndLy/ZFb4RnjFjb4Ov8AkHpLecosBf775SNtY68xkJnVg5qEZVsO1Z
mYtdCQ3K7JTSgWuoT33tnxAgd0XpKLD8sV0Iqrjelerp/czT9nA74dZsuwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLVtqm+FBBShP2UN8JRQZiikbcEvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzNiZWUw
MS0xZmI4LTQ3ZTItYjc2Ni1mZTBhMmFjMDg2OWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvM2JlZTAx
LTFmYjgtNDdlMi1iNzY2LWZlMGEyYWMwODY5Zi8xL3RXMnFiNFVFRktFX1pRM3ds
RkJtS0tSdHdTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwM5ngIDA0nwMA0GCSqGSIb3DQEBCwUAA4IBAQB3bm+b
fIaPddzXk2toe6eoIKg3zgWd/p1SZD5HimzTZ75r8YwhPWp+Cr7/pyNGRtcxrAja
hf183aCW+W+cJBWSub9JT70bRaHrXYoLydlBb9yZetv86eY6cwWmG1eWmWEFrw7y
eOnajCDQ9/M7xI8gQWdhOhMAwKADXoZZTLMXooq4muLI2VM0cQFBgCOkiQsQL869
RASuMTs+uWU6oXw12eDfK2cT/VCtjlw+eiWs31clMh6PwOVP9jcRbRrciVEOWNQf
WZ6iQ2wqOxY7pwEb4tHz7uoC5CDcW/RmY1Rm3JVtQ8/erSPsq6nfcAJMEdkwBeL7
sxGdsbQZVJKUJF2k
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:45:59 2025 by rpki-client