Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer (raw, json)
Hash identifier: wnVNiU+F8iIPVMVkZ9xm1njcCb8+ZGAFpA+QVNd2/bY=
Subject key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D606444641FD7EE8A03BF16C856D95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15902
IP: 194.42.40.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:06:44:46:41:fd:7e:e8:a0:3b:f1:6c:85:6d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d6:53:bf:38:6f:e0:7f:3d:05:5f:50:26:55:
6c:0d:f1:06:24:82:83:3b:b4:30:2e:0b:8c:9c:32:
92:db:04:95:ad:cd:aa:1b:9f:54:39:63:f7:93:3e:
4e:44:80:13:17:12:f7:f6:d2:52:bc:4d:0f:a3:ad:
aa:cf:9d:42:0b:a6:9e:49:cd:f2:7e:16:52:1f:24:
a4:93:f9:bf:3f:22:64:81:4e:e9:66:08:a4:ed:e2:
50:b0:8a:84:8c:5a:a1:e6:46:99:ad:4b:90:eb:58:
f7:79:c9:74:60:ea:e0:96:80:d5:c5:95:f8:36:b2:
31:74:0a:06:1f:cb:cb:d0:a7:03:d6:2a:9b:43:b1:
97:28:e6:1e:6a:e5:ed:82:0c:33:45:bd:f3:35:54:
53:a8:3e:2b:37:95:f0:1f:22:6b:95:7b:8d:0d:89:
93:ba:45:3d:03:41:6c:a0:c3:49:e5:f1:93:28:3e:
f4:8d:97:6a:d3:d1:37:cb:16:60:87:f3:41:09:d1:
69:8b:d5:33:b8:39:7b:c1:8f:c9:4c:88:90:76:ee:
ba:3d:e4:82:e8:c0:fc:9d:52:b8:5a:af:fb:f6:03:
90:78:d9:eb:57:ed:3e:69:fb:9d:d9:2d:cd:a9:74:
08:3e:15:45:d3:a3:0c:3a:0d:b7:67:1d:3b:26:ba:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.40.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15902
Signature Algorithm: sha256WithRSAEncryption
4f:99:38:25:0e:8c:79:5e:17:e3:1e:e4:94:03:82:60:b6:6c:
64:4a:eb:6b:3e:8d:b5:0f:77:8b:e9:f7:53:f9:20:36:ba:02:
db:f2:33:0c:94:87:78:24:21:d3:cb:30:2e:5a:03:9a:b4:83:
b8:20:c1:0d:f5:ca:79:c1:b1:73:3d:b2:f2:a1:b0:1d:3d:32:
70:e2:4d:f0:1a:72:4e:dd:e9:97:85:b5:d0:3d:83:72:c4:d0:
64:c6:ed:41:14:81:de:f4:a2:80:fe:56:8b:3f:c3:37:a7:f3:
e0:80:19:ca:44:b7:c8:18:df:3a:86:8b:3f:05:38:49:41:f7:
c1:3d:54:b6:af:54:12:de:c5:4a:76:cb:a6:67:9b:a3:27:51:
8d:b7:5f:7d:fa:a0:6a:61:b3:d9:eb:a9:33:2a:78:68:71:7a:
41:34:ea:50:d5:3e:5a:aa:53:29:9e:2e:72:d5:ba:b2:6d:3c:
53:01:92:eb:2b:3d:68:d3:1b:7e:6e:b2:c3:b4:e0:1b:8b:ae:
65:d3:be:db:a9:c1:bb:c5:6b:f2:55:27:0a:cf:92:46:13:1a:
99:b0:78:91:64:b8:99:5a:8a:3d:ad:39:31:8d:df:a0:6a:69:
2c:72:81:29:0d:81:c2:a9:ea:18:da:40:ee:f5:dd:27:de:ae:
04:8b:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:26 2025 by rpki-client