Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer (raw, json)
Hash identifier: KWPZiPl+buntu9c+z6K3XUvtvrv/7fF0M2AIhSGCmNo=
Subject key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9571363A9C65D31166AA135266633
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198333
IP: 193.37.149.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:57:13:63:a9:c6:5d:31:16:6a:a1:35:26:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:2c:a2:f9:0a:f7:f2:66:36:1a:2c:8a:2c:
0f:db:71:e4:af:4c:9a:26:f5:d8:35:d1:57:ef:13:
0d:96:63:a4:c5:8f:c6:cf:85:aa:42:47:26:b7:f3:
7d:fb:21:7d:7f:fe:cd:67:63:d5:57:1e:33:35:ba:
6c:ec:e2:f9:08:33:c7:8d:1a:bf:03:f3:ae:0a:7b:
65:a0:cb:b8:68:d3:ea:10:c5:e7:12:6a:9b:7c:a8:
b8:56:f7:5d:28:43:1b:0f:6b:41:6d:be:54:e5:d5:
3c:81:31:dd:23:09:83:60:87:bf:85:b3:db:1a:8d:
52:d5:71:29:b5:6b:37:2b:be:c2:5b:01:02:a6:1d:
ab:3a:8a:8d:03:3f:d4:cf:88:c4:3d:24:e1:fb:be:
7e:20:47:2e:14:e0:b7:a4:a6:d2:be:ea:48:07:e3:
f9:4f:f7:ba:5f:0e:8a:10:63:e5:df:22:52:34:46:
65:9e:25:9a:cd:03:07:dc:11:65:25:04:ea:4d:62:
e7:9b:65:16:5b:71:3f:27:7a:b8:d1:e9:1c:f4:84:
97:82:24:bc:ba:d8:7f:1b:02:a6:d8:e4:0a:6d:5a:
72:59:5d:25:53:16:bf:67:19:a4:12:99:a9:eb:60:
5c:57:e6:30:63:c6:64:a0:23:f5:2e:7a:30:c6:67:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.149.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198333
Signature Algorithm: sha256WithRSAEncryption
2c:63:57:fe:a4:ef:d4:9f:72:49:04:52:88:2a:59:c2:28:56:
92:f8:44:d5:36:6d:f3:be:37:a4:2e:eb:4c:91:3b:c5:06:fb:
38:d9:dc:50:85:f9:da:d6:75:d7:35:22:a5:b2:64:50:ce:de:
86:5a:52:cd:05:2d:ca:04:4d:2a:60:cc:82:f5:8f:e9:d0:cd:
8b:c9:c9:9e:20:eb:af:ba:f0:d2:54:e1:9d:d2:aa:0a:16:bc:
c8:34:de:f8:93:f5:09:d1:87:df:cd:8e:56:45:4a:c2:06:3e:
67:48:61:ce:21:bd:2c:4f:62:38:fa:d6:5d:ab:d2:2f:85:7e:
ad:38:e8:c2:0a:26:67:78:45:09:51:5c:69:3a:1c:0f:c5:0b:
97:1a:b1:a2:f4:e4:01:2d:cb:89:cc:0b:df:5a:2a:39:ac:c5:
3a:89:58:64:23:2e:c6:aa:86:8f:27:07:dc:e3:e8:22:b7:a6:
44:44:9a:a8:e4:40:d8:03:27:6b:50:92:92:94:9e:ba:41:d5:
c2:ba:c4:89:06:34:8b:01:e9:05:77:d6:3e:85:a6:e4:42:2d:
5c:cc:9f:07:41:7e:77:1c:d2:1d:08:8e:3d:01:d3:de:4a:b6:
5b:d4:bf:98:4e:99:22:af:cc:aa:79:37:10:2b:90:20:51:73:
65:ba:c5:ca
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQm2VcTY6nGXTEWaqE1JmYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGFiM2M1YjY5YWY1YzIxOGRkNGFmNzY0Yzk0MzY2YzY0NmY4M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xEsovkK9/JmNhosiiwP23Hkr0ya
JvXYNdFX7xMNlmOkxY/Gz4WqQkcmt/N9+yF9f/7NZ2PVVx4zNbps7OL5CDPHjRq/
A/OuCntloMu4aNPqEMXnEmqbfKi4VvddKEMbD2tBbb5U5dU8gTHdIwmDYIe/hbPb
Go1S1XEptWs3K77CWwECph2rOoqNAz/Uz4jEPSTh+75+IEcuFOC3pKbSvupIB+P5
T/e6Xw6KEGPl3yJSNEZlniWazQMH3BFlJQTqTWLnm2UWW3E/J3q40ekc9ISXgiS8
uth/GwKm2OQKbVpyWV0lUxa/ZxmkEpmp62BcV+YwY8ZkoCP1LnowxmcXqQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMirPFtpr1whjdSvdkyUNmxkb4OlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2EyNmIw
Zi0zMzUzLTRlNTktYmY3MC0xMTg0NTRjY2Q0MTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvYTI2YjBm
LTMzNTMtNGU1OS1iZjcwLTExODQ1NGNjZDQxMi8xL3lLczhXMm12WENHTjFLOTJU
SlEyYkdSdmc2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwSWVMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMGvTANBgkqhkiG9w0BAQsFAAOCAQEALGNX/qTv1J9ySQRSiCpZwihWkvhE1TZt
8743pC7rTJE7xQb7ONncUIX52tZ11zUipbJkUM7ehlpSzQUtygRNKmDMgvWP6dDN
i8nJniDrr7rw0lThndKqCha8yDTe+JP1CdGH382OVkVKwgY+Z0hhziG9LE9iOPrW
XavSL4V+rTjowgomZ3hFCVFcaTocD8ULlxqxovTkAS3LicwL31oqOazFOolYZCMu
xqqGjycH3OPoIremRESaqORA2AMna1CSkpSeukHVwrrEiQY0iwHpBXfWPoWm5EIt
XMyfB0F+dxzSHQiOPQHT3kq2W9S/mE6ZIq/Mqnk3ECuQIFFzZbrFyg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:28 2025 by rpki-client