
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer (raw, json)
Hash identifier: icoLZ4AQNTI12V5kEya7h/AED6qno3qau7OHFeMINY8=
Subject key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5CB871DAE7D5EE1829802245D415F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216049
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cb:87:1d:ae:7d:5e:e1:82:98:02:24:5d:41:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:8e:00:64:12:60:02:a1:1d:a6:56:e4:98:
3e:db:4d:96:84:ff:c8:70:b1:25:1c:dd:1d:bf:6b:
94:82:cb:2d:05:6b:88:34:17:83:81:11:1d:45:11:
f8:b3:d0:6b:ff:22:e9:0c:3c:06:95:36:fe:0b:0d:
c7:b9:9e:5b:ea:84:99:e8:87:86:bc:41:f2:cb:4c:
75:ab:d5:a0:70:60:78:c4:0d:85:63:5d:c4:2c:56:
b3:8a:86:36:4d:b4:7a:99:91:0c:21:f3:95:83:82:
53:8e:45:28:c7:72:65:1c:1b:cb:f2:f9:84:7d:2a:
de:7d:5c:c4:b4:93:a6:ee:c6:fe:37:e0:14:7e:5e:
9d:38:a7:8c:e1:60:be:53:1f:f6:61:8d:17:7c:f9:
dd:c4:61:19:f5:4a:43:65:39:a2:60:34:8b:48:6e:
69:a6:d6:17:a0:96:f9:ae:9a:cb:82:ee:35:9b:7d:
2d:92:d1:5c:fe:0b:8b:dc:59:14:80:98:44:d9:e3:
0a:43:b8:91:ab:9a:e2:d1:50:9d:86:be:2f:b8:af:
ce:84:8f:7a:59:3f:99:c5:01:e7:73:75:8f:a3:32:
01:92:79:93:d9:04:13:22:cd:68:9e:b9:af:88:17:
43:4f:46:cc:3e:d0:db:ea:a4:b2:e8:d2:3a:57:af:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216049
Signature Algorithm: sha256WithRSAEncryption
a3:b6:b2:21:9e:a9:c0:44:48:83:b8:c5:31:a9:51:ac:eb:c5:
32:ae:37:ca:e1:80:e5:77:98:91:ef:d3:3d:81:75:71:49:f3:
e5:b7:ba:22:12:f8:f4:b8:7b:e8:39:47:c5:79:da:9c:89:99:
de:5d:82:5b:91:02:b8:11:bf:92:7e:71:a4:34:43:e0:12:80:
d9:75:bd:d5:bb:27:f4:50:45:70:30:a6:cf:1f:e9:52:4a:50:
ab:03:1d:d1:17:46:2d:b4:be:b0:1d:a8:a1:64:86:60:78:26:
52:46:0e:08:46:9e:6a:22:e0:53:67:ea:4b:4d:cf:3d:df:9d:
d8:59:8b:07:2b:43:05:26:54:0a:45:a2:21:d1:39:1b:82:16:
e3:6c:60:38:1a:79:b9:30:a5:11:3f:02:0a:85:9a:c5:78:38:
68:54:d4:d6:a5:84:38:22:44:7e:ca:60:51:11:e1:82:bd:1f:
cd:7c:2c:58:a6:2d:31:81:fd:be:b7:9e:05:bd:c0:d5:23:57:
2a:af:c3:6b:1d:11:8f:28:8f:48:49:0c:dd:4a:d7:1b:fd:a9:
64:19:f9:f9:49:8a:5d:b5:87:41:82:b6:c8:f6:b0:11:8f:c7:
96:f7:67:4a:21:77:91:74:1e:be:c8:22:7c:34:67:c7:d0:57:
fc:27:ce:1c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQg1cuHHa59XuGCmAIkXUFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2M1NmVjMTMwZDk4YWYyZDBkMjk0NTlmMjBmYTc5YmQ2MzU5MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1GOAGQSYAKhHaZW5Jg+202WhP/I
cLElHN0dv2uUgsstBWuINBeDgREdRRH4s9Br/yLpDDwGlTb+Cw3HuZ5b6oSZ6IeG
vEHyy0x1q9WgcGB4xA2FY13ELFazioY2TbR6mZEMIfOVg4JTjkUox3JlHBvL8vmE
fSrefVzEtJOm7sb+N+AUfl6dOKeM4WC+Ux/2YY0XfPndxGEZ9UpDZTmiYDSLSG5p
ptYXoJb5rprLgu41m30tktFc/guL3FkUgJhE2eMKQ7iRq5ri0VCdhr4vuK/OhI96
WT+ZxQHnc3WPozIBknmT2QQTIs1onrmviBdDT0bMPtDb6qSy6NI6V69NTwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFKPFbsEw2Yry0NKUWfIPp5vWNZAVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzIwZDlj
Yy0xNDNmLTRlZTgtOGM2OS1iM2U5YmU3NDI4OTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvMjBkOWNj
LTE0M2YtNGVlOC04YzY5LWIzZTliZTc0Mjg5NC8xL284VnV3VERaaXZMUTBwUlo4
Zy1ubTlZMWtCVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNL8TANBgkqhkiG9w0BAQsFAAOCAQEAo7ayIZ6pwERI
g7jFMalRrOvFMq43yuGA5XeYke/TPYF1cUnz5be6IhL49Lh76DlHxXnanImZ3l2C
W5ECuBG/kn5xpDRD4BKA2XW91bsn9FBFcDCmzx/pUkpQqwMd0RdGLbS+sB2ooWSG
YHgmUkYOCEaeaiLgU2fqS03PPd+d2FmLBytDBSZUCkWiIdE5G4IW42xgOBp5uTCl
ET8CCoWaxXg4aFTU1qWEOCJEfspgURHhgr0fzXwsWKYtMYH9vreeBb3A1SNXKq/D
ax0RjyiPSEkM3UrXG/2pZBn5+UmKXbWHQYK2yPawEY/HlvdnSiF3kXQevsgifDRn
x9BX/CfOHA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:50 2025 by rpki-client on console.sobornost.net