Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
File: 0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer (raw, json)
Hash identifier: Mx/dhYlPlcJaqDplzhdJ7klRKojUJY8s9xG/mxzfE2E=
Subject key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144689AF8085674B6BB17E13E107610
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51019
AS: 208548
IP: 2001:67c:bdc::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:68:9a:f8:08:56:74:b6:bb:17:e1:3e:10:76:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:6a:21:9f:14:23:91:a1:c6:a5:cc:31:6e:
7d:52:0b:92:28:eb:01:2b:d0:d9:6f:f7:f9:46:54:
13:84:77:19:2d:01:aa:aa:10:43:a3:c6:28:2b:78:
db:2c:dc:5b:ed:24:9e:a3:1b:b8:63:5d:24:62:f9:
aa:d3:83:ef:8f:76:ca:1b:e8:65:77:5e:18:63:bc:
a9:94:f7:cb:91:db:af:20:77:0b:e9:ba:a7:28:d1:
c2:21:c0:60:89:1c:8b:d1:38:7a:92:84:e7:93:55:
28:ec:86:a9:be:2b:e0:3e:f5:f0:8a:0c:96:85:92:
91:08:42:49:ab:f4:85:80:2e:d4:bc:55:2c:7e:70:
ae:68:85:3e:d3:79:f4:59:61:0a:07:93:e7:10:2b:
d6:e5:56:ab:a4:89:24:cd:45:fb:1b:8e:31:80:52:
3d:af:28:4a:7d:f9:38:ce:f2:29:7b:8f:5e:e3:58:
a1:1d:0f:78:14:f2:57:3f:b4:ab:7b:8f:df:fd:b3:
0f:65:da:56:4b:56:2a:cb:5f:e4:f9:8c:70:21:e3:
9d:cb:a3:9e:01:43:b8:f2:0a:18:37:77:f3:73:17:
53:dc:1a:a6:14:0b:de:04:ca:a0:d5:ab:bd:0e:f3:
b6:53:0f:bf:aa:02:a5:35:8d:12:16:b5:d8:d6:1a:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:bdc::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51019
208548
Signature Algorithm: sha256WithRSAEncryption
87:4a:06:3c:81:cd:97:6a:ed:31:96:09:16:6b:ef:71:d1:ef:
78:83:63:6d:6e:aa:00:41:52:dd:c5:b5:65:29:c6:89:26:19:
6d:95:cc:a4:05:85:d5:f0:34:e9:72:9e:af:e4:94:16:0c:1d:
76:b0:03:3e:9a:d4:c5:e2:79:9b:d5:a1:4b:05:9d:41:0f:8f:
84:1a:57:68:aa:24:8e:17:f4:28:7e:56:0f:db:00:00:07:28:
16:b6:e5:05:9a:45:52:8c:f4:4e:5c:5b:3b:e1:85:f3:45:0a:
96:44:e3:2f:99:5b:d7:2f:e4:88:ea:ab:94:be:a3:6e:8c:57:
f8:0c:ca:38:9b:15:46:70:0d:dc:ad:b1:e7:a0:64:e3:ed:7e:
9b:f6:33:5c:4c:1c:ba:7d:99:f2:12:0e:5f:8a:6f:f7:13:15:
2d:89:56:af:43:63:d8:9b:92:17:2d:70:6a:24:e3:a3:c7:a9:
94:7f:a2:70:51:38:8a:69:d0:58:e9:3c:7e:1e:25:06:ef:4f:
5b:cc:97:3d:b7:82:d9:b7:1f:c2:d7:a9:ca:ca:1e:62:8f:b2:
42:01:c8:ff:18:00:82:9e:b1:a6:de:81:ee:c8:f6:5a:15:5e:
38:21:72:59:8b:c1:39:ec:6e:f7:06:e7:e5:d5:a3:c1:29:98:
eb:14:92:6e
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAZQhRGia+AhWdLa7F+E+EHYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmZmMDc5MzJjM2Y0YzFiMzQ2NWZmNGYwZDk2NDg0NzMzZTAyZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQFqIZ8UI5GhxqXMMW59UguSKOsB
K9DZb/f5RlQThHcZLQGqqhBDo8YoK3jbLNxb7SSeoxu4Y10kYvmq04Pvj3bKG+hl
d14YY7yplPfLkduvIHcL6bqnKNHCIcBgiRyL0Th6koTnk1Uo7IapvivgPvXwigyW
hZKRCEJJq/SFgC7UvFUsfnCuaIU+03n0WWEKB5PnECvW5VarpIkkzUX7G44xgFI9
ryhKffk4zvIpe49e41ihHQ94FPJXP7Sre4/f/bMPZdpWS1Yqy1/k+YxwIeOdy6Oe
AUO48goYN3fzcxdT3BqmFAveBMqg1au9DvO2Uw+/qgKlNY0SFrXY1hpvpwIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFNL/B5MsP0wbNGX/Tw2WSEcz4C6tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0
YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8yLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEw
MDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNmLzIvRDJGRjA3OTMyQzNG
NEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACABBnwL3DAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAx0sCAwMupDANBgkqhkiG
9w0BAQsFAAOCAQEAh0oGPIHNl2rtMZYJFmvvcdHveINjbW6qAEFS3cW1ZSnGiSYZ
bZXMpAWF1fA06XKer+SUFgwddrADPprUxeJ5m9WhSwWdQQ+PhBpXaKokjhf0KH5W
D9sAAAcoFrblBZpFUoz0TlxbO+GF80UKlkTjL5lb1y/kiOqrlL6jboxX+AzKOJsV
RnAN3K2x56Bk4+1+m/YzXEwcun2Z8hIOX4pv9xMVLYlWr0Nj2JuSFy1waiTjo8ep
lH+icFE4imnQWOk8fh4lBu9PW8yXPbeC2bcfwtepysoeYo+yQgHI/xgAgp6xpt6B
7sj2WhVeOCFyWYvBOexu9wbn5dWjwSmY6xSSbg==
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:13:25 2025 by rpki-client