Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.cer (raw, json)
Hash identifier: jeSxsJv6HIoLj92p8aDPx0EScYQkQV7AwXt9u/zWTSk=
Subject key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3764227B5D3C924A0802610423B8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216031
IP: 194.49.111.0/24
IP: 194.49.115.0 -- 194.49.116.255
IP: 194.50.3.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:76:42:27:b5:d3:c9:24:a0:80:26:10:42:3b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:0d:85:fc:51:b1:17:df:8b:cd:02:c8:d3:
5f:45:e3:f4:26:5a:93:2d:b5:7a:a2:32:da:82:05:
fb:8a:ab:c4:5b:9e:0a:94:51:96:6c:ca:d6:0d:96:
fb:a0:8a:a4:1a:26:af:ee:a6:34:32:68:0c:3c:e5:
dc:e4:66:94:7c:6b:cb:99:dd:b8:bf:35:e2:03:ce:
f3:6e:91:08:a4:6e:50:c5:38:e7:8b:dc:ca:a6:cd:
ed:fd:80:4b:3c:58:67:dc:ea:8a:fc:ad:a9:1f:5a:
47:7a:e3:c5:e2:5a:4d:fd:4b:39:4e:67:4e:57:8e:
fb:d1:0e:17:28:be:17:a3:fa:bb:4d:e0:8c:ee:55:
a5:c4:08:b8:2f:0c:b0:16:a8:76:94:d4:27:c0:a5:
1a:3d:11:12:4c:19:21:7d:da:61:54:b3:28:06:78:
4f:de:d9:24:ca:0f:87:f3:97:6d:43:5b:dc:64:5f:
28:48:2e:fc:c9:63:af:40:12:57:12:f6:f5:e2:2c:
cb:4f:cf:75:7a:c4:30:23:eb:0d:94:9e:2e:19:1c:
46:4c:78:76:8e:87:f1:86:81:dd:db:6f:69:6b:5d:
78:e3:e9:7a:a5:dd:b8:7d:b5:18:cc:d2:f9:3d:a4:
cd:e4:d8:01:b7:6f:52:81:82:aa:fa:b8:89:60:2d:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.111.0/24
194.49.115.0-194.49.116.255
194.50.3.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216031
Signature Algorithm: sha256WithRSAEncryption
70:5b:e8:4f:aa:2c:ab:50:c3:9b:2a:60:6e:e6:19:87:0e:70:
54:83:25:25:24:40:7b:27:e0:1e:3f:b7:b5:ad:db:8f:e3:fc:
36:89:32:91:37:fd:08:47:71:9c:88:bb:43:d1:e3:b5:37:92:
2d:f1:9c:72:e9:5b:0a:21:76:06:08:be:2e:85:35:8b:2a:c2:
d6:84:48:b0:28:2c:0b:1a:78:df:99:ab:bc:3c:11:5c:ee:09:
21:00:97:10:ae:a5:4a:2c:32:87:42:25:e6:8b:d4:a0:22:bc:
40:ba:6e:93:02:96:0c:b6:79:3b:56:12:a2:14:81:29:5c:ca:
9c:47:95:a4:6b:48:6d:9b:1d:12:ca:4f:b7:fa:a8:08:d4:15:
87:d1:94:0c:7b:dd:51:f6:f5:96:54:99:1f:1d:b0:ce:c5:f8:
f9:1d:fc:fd:62:39:30:db:61:2b:4a:78:c1:2c:54:98:2e:0c:
73:48:98:ed:5e:97:17:e4:fc:1c:92:42:d8:88:b7:35:07:41:
47:ee:b2:2a:57:2d:81:b8:18:55:39:22:4b:31:0b:34:93:78:
34:12:c6:ac:82:fb:4e:0e:99:a5:38:6b:b7:77:b0:59:92:5b:
45:48:a9:df:29:09:cc:d3:90:94:0c:77:8b:07:6a:45:4a:d3:
1e:ae:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:06:32 2025 by rpki-client