Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.cer (raw, json)
Hash identifier: RcrwYKXri3PVQwB7MaVkBRCreIi8de5CmsMn8kuE+H4=
Subject key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA60109AB5E23220634E6B2AF19AD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42824
IP: 193.104.189.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:60:10:9a:b5:e2:32:20:63:4e:6b:2a:f1:9a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:0e:5e:27:66:35:a4:49:34:92:32:56:ec:
8a:89:f8:44:79:39:fe:07:cf:d2:5f:f6:78:6c:f6:
1b:f8:d5:d2:14:a6:40:ec:10:9b:94:23:d5:e3:2b:
78:eb:63:e1:c5:1d:df:54:35:80:c4:9d:dd:e7:a9:
2c:ba:69:71:32:33:bd:47:82:cc:95:7b:38:37:c3:
d7:ac:85:18:7b:82:fe:67:99:00:2c:23:4d:07:46:
ee:58:f5:d7:b2:2b:f3:b8:12:57:d8:2b:67:59:1a:
e2:ec:07:41:f5:99:36:d9:fc:21:73:8b:fe:99:f4:
90:bb:c2:44:e4:14:8e:61:c3:02:bb:20:8c:59:5f:
7b:61:35:37:34:d9:9d:26:a3:b2:6f:12:ce:5d:c6:
fc:3a:cb:09:d9:9a:31:ce:71:80:42:3e:1e:80:f7:
39:ff:8c:21:e8:1b:16:15:ae:c5:1f:bd:fe:f8:e2:
ae:f7:38:36:f1:e7:47:eb:37:32:37:7c:21:7f:3a:
8d:4d:ed:c5:38:73:be:18:4f:c7:d4:26:15:be:66:
9e:98:3e:ff:ed:ed:78:f0:41:25:5b:e0:79:1e:6b:
17:90:24:82:76:30:1e:33:8c:97:63:28:90:8f:a5:
06:33:77:65:bd:36:6d:da:e3:fc:77:2e:7b:7f:3e:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.189.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42824
Signature Algorithm: sha256WithRSAEncryption
41:89:f4:e6:4f:92:df:2a:98:6a:1e:a5:00:66:08:b6:70:87:
e4:fd:81:41:87:c2:93:d7:9e:78:63:10:1f:26:8f:4a:07:94:
a0:99:29:75:d5:a8:b2:d3:66:1b:2f:84:15:74:2e:c0:ff:c2:
75:4b:52:f6:c7:e5:d6:d1:fc:33:f7:43:0f:44:ce:09:89:31:
35:1d:98:05:57:ee:2c:28:78:89:51:95:87:4a:9a:52:dd:97:
a6:da:b9:55:52:01:86:45:61:38:d7:6e:c9:af:db:03:b9:e7:
26:9f:97:3d:52:6d:67:75:4c:6c:87:de:68:9c:c7:54:ec:33:
23:03:ae:41:78:ec:60:4e:a9:5b:43:a5:8e:2e:69:1f:b7:03:
90:5a:24:c7:7f:dc:77:33:ce:a4:ec:c6:3d:6f:09:3e:58:8e:
73:c8:b4:51:c4:32:b6:14:67:e0:c4:87:e5:85:34:b2:53:6a:
95:36:c8:6d:fb:16:00:e4:10:db:d9:01:1b:86:31:87:4a:67:
c5:d8:ee:0e:ba:b6:37:91:a5:91:0b:db:c8:5f:7b:16:50:de:
da:36:5c:ca:68:d6:ea:9b:9d:6d:93:d2:69:67:23:27:07:29:
1e:1f:91:06:94:1d:15:9d:f2:2c:5e:e8:1c:e2:23:87:a4:f8:
14:e8:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:21 2025 by rpki-client