Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
File: f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer (raw, json)
Hash identifier: ZnCiMoQLuY2dyy8cjsTZGw0vdCgaehm6beLdQgH8sts=
Subject key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420682349DFF5B97403394DDF7F1171C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215288
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:23:49:df:f5:b9:74:03:39:4d:df:7f:11:71:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:ed:97:10:5f:84:ad:77:2e:8c:ce:61:af:
38:4a:5c:db:4b:cf:0d:94:8c:60:d4:52:32:bc:23:
c7:2e:1b:93:e0:dd:6f:b7:6d:47:eb:ad:07:7c:3e:
5f:cd:02:d4:d8:54:2a:32:16:2f:fb:74:17:f9:3f:
b0:8e:78:dc:f0:19:2f:83:d4:2e:13:38:90:6c:99:
ae:61:14:56:d6:99:89:5c:d9:9e:ed:b5:47:6a:59:
10:d7:41:4b:31:fe:87:3a:1b:28:ca:63:20:71:f5:
52:ce:9c:f0:e4:d7:c0:b6:c6:6e:16:cd:85:c0:b5:
3d:13:bc:4e:80:8d:58:cd:52:6a:90:14:0e:4c:23:
cc:c2:cf:8f:97:5f:15:b2:96:3c:f3:59:48:c4:d5:
fa:1f:27:f0:a6:b7:d8:82:0b:b2:c2:7e:6f:d6:7c:
07:54:62:5d:fe:f4:56:58:19:cd:22:93:23:3e:e0:
53:68:0a:db:f2:ab:3e:36:4e:80:31:a5:02:47:ac:
7f:6f:13:7f:11:c9:30:a9:2b:37:2c:50:58:fc:fa:
76:6f:d9:bb:75:f2:ac:ad:24:c7:91:43:97:ab:85:
fd:89:c9:c7:6e:29:3d:f5:cc:eb:f5:cd:62:00:e3:
23:4c:4d:dc:ba:29:6e:52:97:b5:5c:01:fd:32:02:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215288
Signature Algorithm: sha256WithRSAEncryption
a8:48:bd:72:e7:1f:cb:4c:4a:2d:e8:11:72:2c:40:55:60:b6:
46:db:79:e2:b5:c2:bf:ee:46:ae:57:c3:ef:9f:64:a6:7e:8e:
02:ae:67:9d:23:49:64:a4:70:a7:a2:15:a1:26:2c:54:cc:be:
43:5b:5a:16:3a:96:d7:2e:6f:d0:da:72:d4:ce:ad:5f:01:75:
5c:6b:59:6f:5b:5d:90:f4:f7:3d:b0:0f:6b:2d:b6:58:56:37:
0b:52:51:56:0e:59:f9:dc:90:b4:c9:4e:33:59:e1:4a:51:c5:
e6:3d:63:06:bd:8a:f4:2f:45:b2:99:cf:42:7a:07:43:4d:96:
77:35:70:6f:be:52:57:8f:51:c9:3d:d1:50:66:d8:30:c8:ac:
8a:07:bd:4b:52:21:7b:34:7f:5a:ef:34:2e:4b:ae:24:b8:ab:
1a:2d:b6:b6:0a:d2:8d:12:91:33:e1:05:80:46:15:83:0e:f6:
2b:7d:79:14:3b:79:9d:7d:27:6b:b5:f7:2d:d7:1c:1f:2d:c9:
6e:10:31:86:bb:4f:4f:c5:00:08:63:39:29:1b:80:30:e9:4a:
62:e8:72:c3:0a:80:db:ae:e5:50:18:a7:85:33:01:a1:46:eb:
92:6c:6c:c7:a9:7f:3a:ff:06:29:8e:5e:fe:0c:1b:ee:ed:c2:
9a:72:9e:24
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZQgaCNJ3/W5dAM5Td9/EXHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmQxZGQ1MjJmNjEzNGYwNzAxOTVjNWMwZTJkNGMxMWNmYTZhOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHrtlxBfhK13LozOYa84SlzbS88N
lIxg1FIyvCPHLhuT4N1vt21H660HfD5fzQLU2FQqMhYv+3QX+T+wjnjc8Bkvg9Qu
EziQbJmuYRRW1pmJXNme7bVHalkQ10FLMf6HOhsoymMgcfVSzpzw5NfAtsZuFs2F
wLU9E7xOgI1YzVJqkBQOTCPMws+Pl18VspY881lIxNX6HyfwprfYgguywn5v1nwH
VGJd/vRWWBnNIpMjPuBTaArb8qs+Nk6AMaUCR6x/bxN/EckwqSs3LFBY/Pp2b9m7
dfKsrSTHkUOXq4X9icnHbik99czr9c1iAOMjTE3cuiluUpe1XAH9MgJMvwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFH/R3VIvYTTwcBlcXA4tTBHPpql9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M4NmI2
NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzg2
YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUyMWI3LzAvN0ZEMURENTIyRjYx
MzRGMDcwMTk1QzVDMEUyRDRDMTFDRkE2QTk3RC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDSPgw
DQYJKoZIhvcNAQELBQADggEBAKhIvXLnH8tMSi3oEXIsQFVgtkbbeeK1wr/uRq5X
w++fZKZ+jgKuZ50jSWSkcKeiFaEmLFTMvkNbWhY6ltcub9DactTOrV8BdVxrWW9b
XZD09z2wD2sttlhWNwtSUVYOWfnckLTJTjNZ4UpRxeY9Ywa9ivQvRbKZz0J6B0NN
lnc1cG++UlePUck90VBm2DDIrIoHvUtSIXs0f1rvNC5LriS4qxottrYK0o0SkTPh
BYBGFYMO9it9eRQ7eZ19J2u19y3XHB8tyW4QMYa7T0/FAAhjOSkbgDDpSmLocsMK
gNuu5VAYp4UzAaFG65JsbMepfzr/BimOXv4MG+7twppyniQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:47 2025 by rpki-client