Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
File: ktkImo4yjTLW3hbX2iV7gRsFI50.cer (raw, json)
Hash identifier: i8bQKJsciIKuj2Bt+ex/sW+nw5gmi8lsm37BTf3YDw0=
Subject key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7F2CD289216552453E34663B1EAC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210996
AS: 211015
AS: 211077
IP: 31.14.31.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f2:cd:28:92:16:55:24:53:e3:46:63:b1:ea:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:00:ec:af:0a:bb:b9:ec:5c:f8:8c:b1:80:
e8:67:af:12:fd:d2:d6:bb:ce:cc:0d:39:23:02:75:
6e:59:52:eb:64:c7:a9:ed:ab:10:33:3d:c5:9f:39:
4f:20:82:85:13:2c:ba:ae:6a:1f:7d:11:72:7e:b6:
98:42:3d:39:7f:6d:37:3c:85:b7:59:7f:bb:0d:c4:
b8:a3:e0:7b:fa:9f:45:1d:ef:27:2e:c9:6f:06:1a:
dc:84:d6:8d:48:36:3d:f1:d5:9c:e1:00:31:ed:b8:
48:30:fc:06:79:a5:bb:15:69:99:ed:ae:73:6e:c9:
c6:16:d3:e8:62:06:4a:47:ea:76:df:bf:cf:b4:3e:
2c:80:9e:75:9f:bd:da:76:76:c1:09:4d:92:ed:cd:
cd:51:86:f1:b7:fe:1d:88:4c:70:21:77:7e:57:ae:
8b:dc:f4:60:1b:9c:b4:22:f4:5f:ba:51:7d:16:67:
6d:f0:e2:2d:0f:ec:cd:b5:96:a5:ba:43:3e:64:3a:
52:e2:ff:1a:1d:03:a1:09:6d:93:64:39:43:d2:51:
66:85:ac:1e:f1:c3:e0:e5:5c:05:18:08:4f:b9:2a:
2f:08:a7:2f:21:c2:d8:4b:4d:d9:b5:a7:55:3d:59:
34:91:a4:56:44:dc:b9:34:c2:97:9e:7a:b6:d6:e0:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.31.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210996
211015
211077
Signature Algorithm: sha256WithRSAEncryption
7c:c0:d8:25:70:20:d1:19:f1:cf:91:c3:15:21:96:9a:80:25:
6c:95:59:6c:84:4e:c1:96:54:a3:c5:d9:8d:ec:70:2b:dd:be:
c7:b3:29:ac:5a:15:38:0c:a1:95:2c:21:44:ac:d4:d7:00:31:
3c:87:80:7e:0b:85:68:87:83:9c:34:97:b6:21:2b:a0:c0:f5:
52:00:c1:66:29:0b:c5:a5:5a:45:84:ab:7e:84:e5:c8:4d:0f:
c2:b7:31:4f:ec:f8:78:ed:f8:66:01:4b:cb:3f:32:53:e7:55:
6b:34:fe:e0:66:f6:37:df:a0:56:18:f3:fc:92:e2:62:3e:67:
50:e6:b9:41:d1:1e:92:3f:12:66:2b:f5:79:d3:16:90:f0:e9:
c3:c9:b2:c2:8a:d5:a2:ba:38:d1:54:3a:f4:f5:8b:9e:b8:58:
6f:50:d2:c6:73:4e:0c:b9:69:37:83:1d:d6:7c:21:a2:fe:ec:
e4:f8:7e:06:36:27:d9:68:d8:a1:2f:96:dd:7e:12:09:ec:b9:
8c:33:2e:b4:2e:ef:44:42:97:38:ac:d2:89:82:dc:ae:75:28:
d5:43:ca:21:8c:b5:8a:7d:80:83:a9:67:ee:95:9e:ca:1b:fa:
1f:f5:71:0c:bb:21:f3:16:61:0b:0b:0b:00:aa:4a:0d:bd:79:
a7:b8:fd:e6
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZQj1/LNKJIWVSRT40ZjserDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmQ5MDg5YThlMzI4ZDMyZDZkZTE2ZDdkYTI1N2I4MTFiMDUyMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJYA7K8Ku7nsXPiMsYDoZ68S/dLW
u87MDTkjAnVuWVLrZMep7asQMz3FnzlPIIKFEyy6rmoffRFyfraYQj05f203PIW3
WX+7DcS4o+B7+p9FHe8nLslvBhrchNaNSDY98dWc4QAx7bhIMPwGeaW7FWmZ7a5z
bsnGFtPoYgZKR+p237/PtD4sgJ51n73adnbBCU2S7c3NUYbxt/4diExwIXd+V66L
3PRgG5y0IvRfulF9Fmdt8OItD+zNtZalukM+ZDpS4v8aHQOhCW2TZDlD0lFmhawe
8cPg5VwFGAhPuSovCKcvIcLYS03ZtadVPVk0kaRWRNy5NMKXnnq21uAt+wIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFJLZCJqOMo0y1t4W19ole4EbBSOdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzQzMTYz
NC0zNWNiLTQ1NDUtODc3Yi1kZjNjMDdmMzQxMWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvNDMxNjM0
LTM1Y2ItNDU0NS04NzdiLWRmM2MwN2YzNDExZS8xL2t0a0ltbzR5alRMVzNoYlgy
aVY3Z1JzRkk1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAHw4fMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8C
AwM4NAIDAzhHAgMDOIUwDQYJKoZIhvcNAQELBQADggEBAHzA2CVwINEZ8c+RwxUh
lpqAJWyVWWyETsGWVKPF2Y3scCvdvsezKaxaFTgMoZUsIUSs1NcAMTyHgH4LhWiH
g5w0l7YhK6DA9VIAwWYpC8WlWkWEq36E5chND8K3MU/s+Hjt+GYBS8s/MlPnVWs0
/uBm9jffoFYY8/yS4mI+Z1DmuUHRHpI/EmYr9XnTFpDw6cPJssKK1aK6ONFUOvT1
i564WG9Q0sZzTgy5aTeDHdZ8IaL+7OT4fgY2J9lo2KEvlt1+EgnsuYwzLrQu70RC
lzis0omC3K51KNVDyiGMtYp9gIOpZ+6Vnsob+h/1cQy7IfMWYQsLCwCqSg29eae4
/eY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:56 2025 by rpki-client