Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.cer (raw, json)
Hash identifier: M3B7wJgRudMh53PFxZQao6en38sRhgy99XA6hf7NwRQ=
Subject key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1C6CCD715BE6F669D9CED81A25E60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2458::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c6:cc:d7:15:be:6f:66:9d:9c:ed:81:a2:5e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:3b:88:8e:e5:de:2b:3d:4f:a6:df:b9:6c:
c7:94:7c:9d:21:6d:8d:70:03:09:6d:39:fc:b4:85:
cf:53:22:93:16:e7:9a:34:a2:5e:2a:e2:0e:a2:92:
31:22:bc:36:00:6f:4b:f8:c2:d1:2d:11:c2:f0:cf:
3d:cc:70:59:0c:89:e7:72:07:34:a5:69:d2:e9:40:
56:be:7c:a3:2f:7f:10:dd:87:b4:81:84:04:3d:06:
13:8e:64:29:64:43:c0:96:4f:af:18:93:47:1a:8d:
db:79:f5:87:03:94:3c:1c:26:94:75:ce:b0:db:24:
25:c5:af:ad:44:fb:f9:57:4a:b6:a5:d5:53:d3:d2:
3f:f4:cf:61:d4:4b:d0:9d:66:c5:24:ac:96:35:c5:
46:cc:3a:6b:3d:58:f1:60:41:56:7e:5e:ab:4d:8b:
35:d1:93:19:b0:fe:7f:f8:78:01:c1:5f:a7:a0:d4:
71:e2:56:f9:67:c4:d2:ba:52:66:0c:32:1f:9b:3f:
11:d6:69:50:a9:b6:9c:37:e2:35:08:df:f7:6a:ee:
04:4d:29:4d:ac:35:20:d3:b4:91:24:26:0b:c6:5d:
48:ce:be:a5:05:86:5e:73:5c:1a:21:93:70:d4:67:
b9:d7:f0:a8:9c:a5:75:6b:79:16:b1:bb:4c:91:31:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2458::/48
Signature Algorithm: sha256WithRSAEncryption
7f:92:8b:d1:43:dc:11:96:bd:77:82:ab:e8:ff:4e:90:df:66:
00:01:1f:2a:cd:0c:b4:af:77:ac:8f:ce:6f:08:d6:71:91:70:
83:bf:28:ef:1f:c9:aa:66:ba:cb:e5:fd:2a:e2:69:24:6a:fa:
56:9e:ef:f8:03:55:98:f4:7f:5d:8b:cf:20:0c:a5:9d:af:59:
3b:f1:cb:58:44:fb:ad:4b:0f:a5:9c:3a:f0:27:63:87:d4:0b:
da:49:4f:fc:18:6d:3b:da:54:56:d9:33:7d:f1:2d:b6:64:22:
b7:82:72:a2:4f:46:d1:fb:2c:9d:4d:f2:a0:87:6b:97:1b:aa:
ab:21:14:d8:40:ea:3b:12:dc:9f:8d:71:6a:e7:ec:d1:f6:a6:
a4:7f:11:b0:78:91:86:8f:d1:ae:99:dd:17:30:07:aa:fb:d5:
31:38:b8:a6:e6:00:99:7d:ae:79:ef:29:ee:d4:c6:93:2d:a7:
30:ee:fe:3f:73:d1:98:3d:d3:20:dc:14:ed:9b:72:7c:28:59:
ff:fd:be:16:18:a2:27:50:9a:f6:7c:bc:48:a4:2b:22:79:20:
9f:77:70:45:18:26:da:ea:ec:86:c0:94:f9:2f:a1:08:0c:41:
23:d0:6f:17:27:08:22:92:72:ba:f5:a7:fa:f7:a2:a1:20:ab:
92:3c:9d:6e
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQhscbM1xW+b2adnO2Bol5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmQ3ZjY5YTA0YmQ5Y2FkNTIzYjM5Zjc3YTJkZGFiNDRjMjkxMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6M7iI7l3is9T6bfuWzHlHydIW2N
cAMJbTn8tIXPUyKTFueaNKJeKuIOopIxIrw2AG9L+MLRLRHC8M89zHBZDInncgc0
pWnS6UBWvnyjL38Q3Ye0gYQEPQYTjmQpZEPAlk+vGJNHGo3befWHA5Q8HCaUdc6w
2yQlxa+tRPv5V0q2pdVT09I/9M9h1EvQnWbFJKyWNcVGzDprPVjxYEFWfl6rTYs1
0ZMZsP5/+HgBwV+noNRx4lb5Z8TSulJmDDIfmz8R1mlQqbacN+I1CN/3au4ETSlN
rDUg07SRJCYLxl1Izr6lBYZec1waIZNw1Ge51/ConKV1a3kWsbtMkTEv+QIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFJLX9poEvZytUjs593ot2rRMKRGSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzUwZDg1
NS1jZDgxLTQ4MWEtOTVlZi1iODQ0ODdmOTIwZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvNTBkODU1
LWNkODEtNDgxYS05NWVmLWI4NDQ4N2Y5MjBlNC8xL2t0ZjJtZ1M5bksxU096bjNl
aTNhdEV3cEVaSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCRYMA0GCSqGSIb3DQEBCwUAA4IBAQB/
kovRQ9wRlr13gqvo/06Q32YAAR8qzQy0r3esj85vCNZxkXCDvyjvH8mqZrrL5f0q
4mkkavpWnu/4A1WY9H9di88gDKWdr1k78ctYRPutSw+lnDrwJ2OH1AvaSU/8GG07
2lRW2TN98S22ZCK3gnKiT0bR+yydTfKgh2uXG6qrIRTYQOo7EtyfjXFq5+zR9qak
fxGweJGGj9Gumd0XMAeq+9UxOLim5gCZfa557ynu1MaTLacw7v4/c9GYPdMg3BTt
m3J8KFn//b4WGKInUJr2fLxIpCsieSCfd3BFGCba6uyGwJT5L6EIDEEj0G8XJwgi
knK69af696KhIKuSPJ1u
-----END CERTIFICATE-----
Generated at Thu Apr 10 10:11:22 2025 by rpki-client