Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kbjY-KcZRyxzHyRE_DFLRB6LK7k.cer
File: kbjY-KcZRyxzHyRE_DFLRB6LK7k.cer (raw, json)
Hash identifier: R95QfoUlmo8ligMBsCDl/Rr6vc0ZeGi8p6GOvVV4Xo4=
Subject key identifier: 91:B8:D8:F8:A7:19:47:2C:73:1F:24:44:FC:31:4B:44:1E:8B:2B:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01853F349445E2E72AB91106EDC2ED5D299A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/018b6c-7825-453b-bd79-69ce05a328e9/1/kbjY-KcZRyxzHyRE_DFLRB6LK7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/018b6c-7825-453b-bd79-69ce05a328e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Dec 2022 13:38:08 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 24895
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:34:94:45:e2:e7:2a:b9:11:06:ed:c2:ed:5d:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 23 13:38:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91b8d8f8a719472c731f2444fc314b441e8b2bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:85:c5:94:a9:b7:f0:4b:db:02:81:80:d6:
fd:5a:f4:4f:60:3e:97:b9:62:90:20:13:e0:3e:e4:
29:f0:87:7d:9a:8f:1e:25:02:69:62:b3:f9:1d:e4:
20:53:1c:a3:c4:2b:30:48:e4:04:1e:fe:74:47:f8:
b2:82:e3:0c:14:7d:1f:50:20:9f:10:b4:2b:52:a0:
9e:00:ae:eb:cc:2e:e3:7a:26:99:f2:cd:36:9d:71:
c2:eb:65:ec:7f:88:2e:88:dd:c1:9e:cc:7d:4e:d3:
f5:37:3b:86:97:61:f7:e2:1e:4c:8e:02:95:d7:73:
98:58:d4:be:98:5b:3c:94:59:e5:e0:1a:f7:42:04:
c0:9f:2a:e3:2f:57:67:ce:1a:d2:55:5b:c9:ee:9b:
90:f1:e2:95:aa:2d:0d:1b:e1:9b:39:96:b9:30:46:
fb:85:85:13:49:b6:23:1d:44:2a:8f:98:13:43:1b:
cb:33:8e:20:8d:51:c2:1b:4f:2d:b5:de:b1:ba:8d:
bb:28:51:ab:9e:fe:1b:ae:6c:08:5b:b1:d9:fb:e6:
af:f6:62:28:43:a4:57:48:38:26:c1:91:34:1a:c2:
1c:31:fc:5d:5c:1b:84:19:b7:99:2f:23:da:be:12:
dc:00:a2:c5:9e:c9:e8:8d:64:4d:2d:af:c3:3d:2a:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:D8:F8:A7:19:47:2C:73:1F:24:44:FC:31:4B:44:1E:8B:2B:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/018b6c-7825-453b-bd79-69ce05a328e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/018b6c-7825-453b-bd79-69ce05a328e9/1/kbjY-KcZRyxzHyRE_DFLRB6LK7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24895
Signature Algorithm: sha256WithRSAEncryption
a1:33:a5:e1:f1:00:33:fe:71:0f:e3:dd:78:10:b9:f3:8e:9f:
cb:cb:9a:fb:22:2b:0c:61:f9:b9:ea:4d:97:d3:8c:a6:7f:c8:
1f:e4:9f:3d:e0:eb:48:ef:4e:4b:b5:9f:09:1a:b9:6b:77:92:
72:87:13:f7:10:25:4e:44:89:d8:55:77:25:7e:af:02:5e:d4:
45:9b:28:2e:1e:54:4c:45:f4:aa:69:8d:cd:5b:30:a0:d2:ef:
52:3b:54:d7:93:dd:71:a5:6c:1d:1f:93:45:a4:79:9d:3e:9d:
e0:ee:42:58:ad:5a:be:cb:c6:93:e5:3e:98:11:4c:7e:e5:da:
f9:29:a6:7f:4f:45:12:0a:0f:ef:6e:70:9f:8b:86:ba:e1:b3:
9c:ed:de:de:3c:eb:b2:ed:7f:f1:45:e6:3f:17:89:4f:b4:f3:
e0:05:7f:4c:7e:fd:ef:9e:04:03:ef:82:5b:3a:59:15:79:ca:
18:6a:47:46:a1:08:46:5c:b9:37:e0:3d:02:ea:5d:e4:a7:8f:
b8:d3:81:b4:c8:7b:88:e2:0d:d9:15:9b:cd:24:c5:85:8d:1f:
32:1d:64:fc:33:cb:84:fb:bd:bc:3e:91:a3:54:08:32:20:05:
f6:bb:4f:84:ff:ce:7d:5c:94:04:40:20:37:31:a2:62:19:be:
62:0c:a2:9c
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYU/NJRF4ucquREG7cLtXSmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMjIzMTMzODA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWI4ZDhmOGE3MTk0NzJjNzMxZjI0NDRmYzMxNGI0NDFlOGIyYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySGFxZSpt/BL2wKBgNb9WvRPYD6X
uWKQIBPgPuQp8Id9mo8eJQJpYrP5HeQgUxyjxCswSOQEHv50R/iyguMMFH0fUCCf
ELQrUqCeAK7rzC7jeiaZ8s02nXHC62Xsf4guiN3Bnsx9TtP1NzuGl2H34h5MjgKV
13OYWNS+mFs8lFnl4Br3QgTAnyrjL1dnzhrSVVvJ7puQ8eKVqi0NG+GbOZa5MEb7
hYUTSbYjHUQqj5gTQxvLM44gjVHCG08ttd6xuo27KFGrnv4brmwIW7HZ++av9mIo
Q6RXSDgmwZE0GsIcMfxdXBuEGbeZLyPavhLcAKLFnsnojWRNLa/DPSriGwIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFJG42PinGUcscx8kRPwxS0Qeiyu5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzAxOGI2
Yy03ODI1LTQ1M2ItYmQ3OS02OWNlMDVhMzI4ZTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvMDE4YjZj
LTc4MjUtNDUzYi1iZDc5LTY5Y2UwNWEzMjhlOS8xL2tialktS2NaUnl4ekh5UkVf
REZMUkI2TEs3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAmE/MA0GCSqGSIb3DQEBCwUAA4IBAQChM6Xh8QAz/nEP
4914ELnzjp/Ly5r7IisMYfm56k2X04ymf8gf5J894OtI705LtZ8JGrlrd5JyhxP3
ECVORInYVXclfq8CXtRFmyguHlRMRfSqaY3NWzCg0u9SO1TXk91xpWwdH5NFpHmd
Pp3g7kJYrVq+y8aT5T6YEUx+5dr5KaZ/T0USCg/vbnCfi4a64bOc7d7ePOuy7X/x
ReY/F4lPtPPgBX9Mfv3vngQD74JbOlkVecoYakdGoQhGXLk34D0C6l3kp4+404G0
yHuI4g3ZFZvNJMWFjR8yHWT8M8uE+728PpGjVAgyIAX2u0+E/859XJQEQCA3MaJi
Gb5iDKKc
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:58 2025 by rpki-client