Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.cer
File: xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.cer (raw, json)
Hash identifier: /4fOx4b73EytUZ0ggJoMncfh1S8OFBnWGfBn8t+Q44w=
Subject key identifier: C4:A5:33:03:AA:2E:DC:8C:64:49:78:02:11:6A:C9:F0:38:81:FD:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D61F33EA10F702DE7222B2AD377E91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213388
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1f:33:ea:10:f7:02:de:72:22:b2:ad:37:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4a53303aa2edc8c64497802116ac9f03881fd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:fe:cc:34:aa:91:c0:21:4f:ab:09:be:46:
04:e4:ff:b9:d2:27:66:5c:d9:7a:88:8b:d6:f3:54:
6f:41:b0:ae:6a:4f:02:c1:2a:2d:25:b0:c9:a7:4d:
2c:d4:22:3e:1b:82:8e:32:45:c5:2a:8b:fc:2c:da:
f9:62:40:f7:28:d1:7a:60:ea:07:15:9c:cf:48:e4:
5f:20:e8:6c:b0:ee:b0:eb:ce:8c:87:76:e8:8d:a2:
0d:b0:d6:54:37:3e:b1:59:9a:09:0f:2d:da:54:91:
de:1b:aa:f2:eb:7e:88:36:61:2e:e9:9d:aa:95:0a:
ae:bd:01:27:0b:59:63:25:db:12:9d:6b:ee:4c:00:
8e:c4:64:86:41:6b:2e:e1:38:0a:bc:7b:b0:82:cc:
dc:8f:3a:db:c7:04:f5:26:1c:f2:fc:ea:f0:7c:ce:
92:c5:04:d1:d0:4b:57:5b:47:b0:d9:1a:41:df:be:
6e:c0:86:3e:6d:24:ee:75:db:ed:9d:2e:9d:26:ba:
6c:2f:2c:78:cf:77:21:f5:e0:45:b0:1e:89:b8:d6:
30:d0:86:ee:5c:c0:4d:6e:8b:03:e6:25:54:7a:14:
c6:27:7c:8a:5d:c8:bf:05:30:6e:9f:ed:88:93:fb:
4c:7c:6a:59:ec:f6:45:de:72:f9:5b:e6:d0:e3:ef:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:33:03:AA:2E:DC:8C:64:49:78:02:11:6A:C9:F0:38:81:FD:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7fab69-47e6-41d5-94c0-198cf61e7a8e/1/xKUzA6ou3IxkSXgCEWrJ8DiB_Yk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213388
Signature Algorithm: sha256WithRSAEncryption
44:a5:79:5a:d4:f8:fa:c3:94:68:89:d6:db:0b:7a:0c:a5:e0:
ba:67:e4:92:9c:99:03:b7:a9:63:8c:f2:1c:86:67:ca:22:7a:
03:01:2d:78:63:e7:48:5e:61:3e:63:1a:aa:67:65:cc:70:1a:
d8:96:90:1d:5b:07:ed:91:f1:cd:1c:ef:7d:32:23:69:2c:b2:
55:48:cd:8e:e7:63:fd:fd:20:ec:65:7a:4b:62:2f:e2:a4:1b:
9e:55:16:63:97:3d:8f:79:c1:57:c9:a2:cd:60:40:ac:7b:e6:
a5:29:b9:23:eb:28:d4:ca:4b:4b:33:67:28:73:24:e0:23:25:
80:7d:0a:ef:02:b5:d5:16:65:42:54:04:b2:d2:da:2d:d3:bd:
ae:d1:56:02:51:73:d9:5d:91:a9:4c:83:d5:3e:d0:dc:d8:1f:
5c:cd:43:de:87:ac:71:5e:e5:02:8e:03:c0:71:ee:69:a2:99:
ee:da:6c:b8:8b:47:04:57:b0:ff:f5:95:1a:f2:00:b2:08:3e:
1e:ca:c0:ef:2d:ad:12:90:d6:59:df:c1:e3:22:71:4b:43:2f:
56:48:af:18:fd:68:09:b6:75:42:45:52:13:80:ec:5c:ee:2f:
ca:b5:c9:fb:aa:94:28:96:cc:2b:52:5e:4d:40:1f:a9:be:59:
20:a1:a8:1b
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQg1h8z6hD3At5yIrKtN36RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGE1MzMwM2FhMmVkYzhjNjQ0OTc4MDIxMTZhYzlmMDM4ODFmZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqD+zDSqkcAhT6sJvkYE5P+50idm
XNl6iIvW81RvQbCuak8CwSotJbDJp00s1CI+G4KOMkXFKov8LNr5YkD3KNF6YOoH
FZzPSORfIOhssO6w686Mh3bojaINsNZUNz6xWZoJDy3aVJHeG6ry636INmEu6Z2q
lQquvQEnC1ljJdsSnWvuTACOxGSGQWsu4TgKvHuwgszcjzrbxwT1Jhzy/OrwfM6S
xQTR0EtXW0ew2RpB375uwIY+bSTuddvtnS6dJrpsLyx4z3ch9eBFsB6JuNYw0Ibu
XMBNbosD5iVUehTGJ3yKXci/BTBun+2Ik/tMfGpZ7PZF3nL5W+bQ4+/meQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFMSlMwOqLtyMZEl4AhFqyfA4gf2JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzdmYWI2
OS00N2U2LTQxZDUtOTRjMC0xOThjZjYxZTdhOGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvN2ZhYjY5
LTQ3ZTYtNDFkNS05NGMwLTE5OGNmNjFlN2E4ZS8xL3hLVXpBNm91M0l4a1NYZ0NF
V3JKOERpQl9Zay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNBjDANBgkqhkiG9w0BAQsFAAOCAQEARKV5WtT4+sOU
aInW2wt6DKXgumfkkpyZA7epY4zyHIZnyiJ6AwEteGPnSF5hPmMaqmdlzHAa2JaQ
HVsH7ZHxzRzvfTIjaSyyVUjNjudj/f0g7GV6S2Iv4qQbnlUWY5c9j3nBV8mizWBA
rHvmpSm5I+so1MpLSzNnKHMk4CMlgH0K7wK11RZlQlQEstLaLdO9rtFWAlFz2V2R
qUyD1T7Q3NgfXM1D3oescV7lAo4DwHHuaaKZ7tpsuItHBFew//WVGvIAsgg+HsrA
7y2tEpDWWd/B4yJxS0MvVkivGP1oCbZ1QkVSE4DsXO4vyrXJ+6qUKJbMK1JeTUAf
qb5ZIKGoGw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:11 2025 by rpki-client