Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-IMBwukKuq41kP_E_6aU1iIFnj4.cer
File: 1-IMBwukKuq41kP_E_6aU1iIFnj4.cer (raw, json)
Hash identifier: G9CawDnMGAaU17Z7lHNxoZdEu/2qLk8Ilm35IZU+tjk=
Subject key identifier: F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3FB4119832DBBDCA50FE1469DDEB0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209306
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:fb:41:19:83:2d:bb:dc:a5:0f:e1:46:9d:de:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f88301c2e90abaae3590ffc4ffa694d622059e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:f7:e4:af:aa:29:7f:b6:5b:e6:58:5e:a3:
87:fc:e2:4f:97:ad:91:29:d2:94:cf:16:95:4a:c6:
57:a4:08:de:35:12:77:be:86:14:e6:02:94:a2:82:
89:76:6a:4e:46:d8:17:08:f6:57:9d:73:71:9e:a0:
bd:50:37:aa:9a:69:ca:44:a3:46:4d:1b:da:8a:32:
15:92:8c:97:98:af:1d:de:64:3b:d6:ba:ce:b5:52:
32:da:7c:df:aa:7f:f4:3e:2a:43:37:65:5a:a7:6e:
be:c6:56:f1:9e:04:97:c1:11:ee:91:13:3b:68:1c:
61:cc:c5:d7:78:89:8e:6a:40:d8:e5:29:c4:5d:77:
38:50:2f:8c:34:41:e4:38:3f:37:95:1b:ea:4d:5f:
2e:4b:ad:a1:0f:66:f5:1a:3b:73:2a:ae:cf:ae:75:
a6:3e:de:35:a8:6f:0c:f8:f6:b6:26:89:46:8a:ed:
2c:39:4d:d2:f6:a4:4c:d9:9b:7b:45:62:bf:3b:88:
9e:48:bd:19:e5:ec:32:dc:a8:57:50:5f:d7:03:41:
47:45:dd:94:38:8e:c5:65:b6:d7:7d:aa:92:b8:6e:
97:89:ab:83:d6:ce:1c:d4:a4:44:a1:69:4f:da:27:
0f:ba:40:6c:c0:4e:a6:ab:cc:91:24:39:b0:4c:5b:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:01:C2:E9:0A:BA:AE:35:90:FF:C4:FF:A6:94:D6:22:05:9E:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7467f6-9c48-4f6f-a98c-46c32ca20fdf/1/1-IMBwukKuq41kP_E_6aU1iIFnj4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209306
Signature Algorithm: sha256WithRSAEncryption
15:66:6d:0a:f1:08:b0:b5:bc:5c:ea:62:07:57:f9:92:23:e1:
20:38:3f:a5:27:48:f7:fb:36:73:76:d9:7f:38:8f:58:62:c9:
7a:d4:07:9d:4e:c2:ff:4a:fe:67:81:33:47:2f:01:55:98:34:
dd:4a:75:ac:cf:cf:66:33:ef:82:51:b0:20:93:5c:98:9b:76:
f7:d4:b6:4f:81:78:99:52:d5:ca:af:c2:a4:28:c9:8d:26:91:
af:a0:4f:b3:3f:2a:d0:4f:82:01:b9:7a:d8:f7:b9:3f:d5:5a:
32:f8:f2:b3:66:1e:bf:73:6a:3f:d7:f7:64:01:bc:7c:d7:13:
6b:f1:45:42:a5:31:57:6c:94:85:78:e3:2e:85:10:66:cf:06:
7d:23:e9:4f:cb:4c:fc:73:09:5e:92:82:b6:d0:8b:82:89:ba:
74:6b:38:af:8e:70:a7:23:22:c3:76:48:25:15:88:28:cc:68:
54:3d:e5:64:3e:9b:1e:86:99:97:10:8d:d1:d0:8b:bd:14:0f:
68:57:b8:c6:67:7b:53:11:5c:fc:bd:cc:fd:80:84:53:08:cc:
c9:d5:b1:46:31:a7:b1:8d:3c:a6:70:c2:db:25:55:83:32:88:
e0:0c:fb:8a:b3:e2:d9:2e:7f:53:06:2c:1b:1b:b0:64:c6:71:
65:7f:47:b3
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgISAYVu0/tBGYMtu9ylD+FGnd6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODgzMDFjMmU5MGFiYWFlMzU5MGZmYzRmZmE2OTRkNjIyMDU5ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dr35K+qKX+2W+ZYXqOH/OJPl62R
KdKUzxaVSsZXpAjeNRJ3voYU5gKUooKJdmpORtgXCPZXnXNxnqC9UDeqmmnKRKNG
TRvaijIVkoyXmK8d3mQ71rrOtVIy2nzfqn/0PipDN2Vap26+xlbxngSXwRHukRM7
aBxhzMXXeImOakDY5SnEXXc4UC+MNEHkOD83lRvqTV8uS62hD2b1GjtzKq7PrnWm
Pt41qG8M+Pa2JolGiu0sOU3S9qRM2Zt7RWK/O4ieSL0Z5ewy3KhXUF/XA0FHRd2U
OI7FZbbXfaqSuG6XiauD1s4c1KREoWlP2icPukBswE6mq8yRJDmwTFtvxwIDAQAB
o4ICgDCCAnwwHQYDVR0OBBYEFPiDAcLpCrquNZD/xP+mlNYiBZ4+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzc0Njdm
Ni05YzQ4LTRmNmYtYTk4Yy00NmMzMmNhMjBmZGYvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNzQ2N2Y2
LTljNDgtNGY2Zi1hOThjLTQ2YzMyY2EyMGZkZi8xLzEtSU1Cd3VrS3VxNDFrUF9F
XzZhVTFpSUZuajQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMDMZowDQYJKoZIhvcNAQELBQADggEBABVmbQrxCLC1
vFzqYgdX+ZIj4SA4P6UnSPf7NnN22X84j1hiyXrUB51Owv9K/meBM0cvAVWYNN1K
dazPz2Yz74JRsCCTXJibdvfUtk+BeJlS1cqvwqQoyY0mka+gT7M/KtBPggG5etj3
uT/VWjL48rNmHr9zaj/X92QBvHzXE2vxRUKlMVdslIV44y6FEGbPBn0j6U/LTPxz
CV6SgrbQi4KJunRrOK+OcKcjIsN2SCUViCjMaFQ95WQ+mx6GmZcQjdHQi70UD2hX
uMZne1MRXPy9zP2AhFMIzMnVsUYxp7GNPKZwwtslVYMyiOAM+4qz4tkuf1MGLBsb
sGTGcWV/R7M=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:59 2025 by rpki-client