Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
File: ctdCYWpoBB9_D80HkvOOQQOnncI.cer (raw, json)
Hash identifier: x2uD/9biTMGnGq+rmRR/KChV9Wmd/JLjoVj4fTU0kpQ=
Subject key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA704709F60C7A8FB19EDC5D261EB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214083
IP: 2001:678:db4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:70:47:09:f6:0c:7a:8f:b1:9e:dc:5d:26:1e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:40:ef:56:7a:d3:d0:20:24:c2:f9:ae:6c:43:
b8:bd:ee:22:50:e4:6c:06:8d:8c:8b:a3:3c:74:08:
27:80:2e:e6:2b:b3:25:17:3b:85:ce:21:2c:93:e5:
cd:7e:8f:1f:f3:b0:65:5d:af:ed:30:40:48:a9:2b:
50:20:a4:f7:83:ff:28:7b:0b:86:fd:ac:0d:01:0b:
e9:86:b3:42:22:15:ed:7c:41:40:cd:06:3d:8e:f4:
31:9d:29:48:93:5e:11:79:94:47:64:b6:ae:07:cf:
81:b8:4d:92:4c:e1:7a:73:76:55:db:a1:c8:cb:2d:
31:63:13:18:15:6c:32:76:07:e9:f1:89:fc:b2:e7:
31:54:95:f1:0a:07:0d:17:63:94:39:8c:ac:76:8e:
da:68:5a:9b:d1:e3:a2:6e:af:4c:98:2b:77:02:8b:
fe:a2:bb:74:a3:a8:f4:f3:b5:9a:d6:1c:e9:a8:46:
a9:a1:4c:b6:75:be:e2:65:0c:52:f7:72:0d:5a:35:
df:62:4a:5c:73:e3:22:71:e2:ee:93:d6:2e:eb:a7:
42:25:8c:60:2f:85:59:2c:68:6b:93:55:13:60:18:
0a:26:06:b3:7a:82:5d:50:0d:bb:a3:ea:6d:0b:6b:
3c:99:72:dc:be:cf:86:d6:e5:d7:fc:dc:4d:9b:a8:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:db4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214083
Signature Algorithm: sha256WithRSAEncryption
77:ae:76:49:04:96:77:55:2a:47:65:e8:b2:3e:24:91:71:e7:
59:0c:13:8e:6a:37:13:60:6f:86:4c:40:15:e1:03:51:f5:1d:
5e:2e:38:39:b6:ac:55:fa:d7:21:93:38:f7:34:53:53:cf:86:
2b:d1:1a:51:88:49:b7:fb:e4:50:91:f8:df:59:e3:26:93:7d:
7d:f7:5c:da:a4:75:f7:34:15:33:2d:46:28:15:fe:fc:52:ab:
ff:44:17:7e:cd:18:03:fd:1b:91:6a:de:7f:89:ac:ee:21:53:
70:ba:9e:a9:65:48:05:94:c6:cf:37:70:20:1a:fb:e9:bc:d6:
1b:b2:12:9b:47:6f:ec:bd:a1:c1:4c:96:f5:e7:8b:7f:31:e8:
cb:20:f8:44:f3:7e:cb:98:a1:fd:1c:23:87:ea:b0:84:23:11:
3a:cf:48:5e:36:90:ab:2f:98:bd:58:c4:99:ed:f7:f3:7a:d3:
08:62:7d:3b:0a:58:c3:f0:ac:01:94:9a:b3:fe:00:98:17:17:
57:21:73:8e:16:d6:83:22:01:ab:e7:32:59:9e:f7:e0:1e:8a:
5b:5a:1b:40:4c:67:e4:5d:61:9a:31:6e:e2:bf:89:ab:47:39:
5d:62:2f:83:f9:c7:67:23:c7:11:2f:e3:db:2a:58:6a:ac:ac:
9e:e0:4e:7e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQf+nBHCfYMeo+xntxdJh65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmQ3NDI2MTZhNjgwNDFmN2YwZmNkMDc5MmYzOGU0MTAzYTc5ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/UDvVnrT0CAkwvmubEO4ve4iUORs
Bo2Mi6M8dAgngC7mK7MlFzuFziEsk+XNfo8f87BlXa/tMEBIqStQIKT3g/8oewuG
/awNAQvphrNCIhXtfEFAzQY9jvQxnSlIk14ReZRHZLauB8+BuE2STOF6c3ZV26HI
yy0xYxMYFWwydgfp8Yn8sucxVJXxCgcNF2OUOYysdo7aaFqb0eOibq9MmCt3Aov+
ort0o6j087Wa1hzpqEapoUy2db7iZQxS93INWjXfYkpcc+MiceLuk9Yu66dCJYxg
L4VZLGhrk1UTYBgKJgazeoJdUA27o+ptC2s8mXLcvs+G1uXX/NxNm6gfHQIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFHLXQmFqaAQffw/NB5LzjkEDp53CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzJiYmQy
MS1kMTQ3LTRjNzgtOGQyZS1hMjA5YjkwZjI3ZDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvMmJiZDIx
LWQxNDctNGM3OC04ZDJlLWEyMDliOTBmMjdkOS8xL2N0ZENZV3BvQkI5X0Q4MEhr
dk9PUVFPbm5jSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA20MBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNEQzANBgkqhkiG9w0BAQsFAAOCAQEAd652SQSWd1UqR2Xosj4kkXHnWQwT
jmo3E2BvhkxAFeEDUfUdXi44ObasVfrXIZM49zRTU8+GK9EaUYhJt/vkUJH431nj
JpN9ffdc2qR19zQVMy1GKBX+/FKr/0QXfs0YA/0bkWref4ms7iFTcLqeqWVIBZTG
zzdwIBr76bzWG7ISm0dv7L2hwUyW9eeLfzHoyyD4RPN+y5ih/Rwjh+qwhCMROs9I
XjaQqy+YvVjEme3383rTCGJ9OwpYw/CsAZSas/4AmBcXVyFzjhbWgyIBq+cyWZ73
4B6KW1obQExn5F1hmjFu4r+Jq0c5XWIvg/nHZyPHES/j2ypYaqysnuBOfg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:40:44 2025 by rpki-client