Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.cer (raw, json)
Hash identifier: uDUqv74e6f+/7DvNO8qDbuXyqoXcEX8gSELWIMiYd4g=
Subject key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FAF3A8F57AA3C7B8DCA2E485C2B4B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44036
IP: 91.199.7.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f3:a8:f5:7a:a3:c7:b8:dc:a2:e4:85:c2:b4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:63:51:54:26:96:99:4c:be:2c:08:68:e4:
6d:98:1c:c3:6d:28:b7:50:1f:f9:2f:44:34:18:85:
ef:5e:21:22:ab:5b:c5:99:31:fd:05:78:0b:08:d1:
52:ee:8f:ec:ec:fd:68:8a:62:cf:ef:58:c7:4c:76:
f8:3b:e8:97:2d:c3:8a:ba:46:13:fb:86:b9:4e:68:
81:8c:46:fd:ed:7f:d6:c1:30:ce:06:9d:f4:e1:52:
b9:d4:54:60:e4:ff:21:22:cd:24:86:e7:48:2b:35:
47:4f:b0:93:c9:87:fa:1d:db:4e:7d:96:bd:0e:db:
07:83:3c:a3:56:10:e4:db:25:55:9e:83:ea:9c:18:
94:85:9a:7a:1f:dc:8e:18:4e:1b:45:ec:8f:26:78:
77:3c:91:5d:f6:e0:86:d2:9c:9d:a5:41:60:95:8c:
0c:d9:51:2a:c9:cb:79:a2:94:f2:b8:b8:b8:1c:ac:
0b:5f:74:6e:a2:96:32:e0:d0:0e:aa:f5:ba:2a:3d:
eb:7d:1c:4a:c4:85:04:ef:82:d9:98:6e:11:24:18:
5e:c0:43:a4:25:1e:8f:ea:40:59:b5:03:e2:9a:61:
cd:9c:8a:17:0a:93:65:2f:90:54:78:d4:1b:b3:2c:
d4:48:3f:6a:41:37:6d:1f:80:d6:3e:f5:20:3f:30:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.7.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44036
Signature Algorithm: sha256WithRSAEncryption
82:41:37:9b:16:11:cd:73:a6:3c:c1:fd:a6:b7:e2:ea:1f:1a:
4b:26:d8:78:d3:6e:27:46:83:16:a2:ac:5d:bc:ea:3b:24:b5:
1c:e2:89:fb:f9:64:f9:a1:9f:94:d6:a7:ac:c9:fd:80:d9:1b:
62:fe:4a:12:cf:a6:4a:4c:62:b1:14:dc:b9:ee:f9:d3:14:29:
60:19:33:8a:95:86:ef:95:d8:90:28:12:9e:9b:2e:55:a8:c7:
0f:30:88:f1:73:c4:08:43:75:61:64:27:8f:af:cf:f0:71:46:
d7:15:e9:3c:ba:ab:71:72:ff:20:89:8b:53:d3:cc:ea:6a:c0:
79:b0:c9:4d:4e:a0:f6:3e:c1:6c:a0:10:4c:31:72:1c:51:e8:
06:70:19:f4:2c:06:2f:99:59:47:ef:04:bc:76:9b:76:bf:03:
ce:5f:6c:73:b2:48:01:89:94:a9:b5:f7:19:27:d5:ef:8c:86:
25:74:5d:27:57:fd:f4:83:59:3b:aa:96:3d:9e:00:7a:96:e9:
5d:97:cc:f6:8d:cf:16:92:5a:55:c0:ac:50:93:f2:54:cb:f5:
52:69:bb:72:5f:c4:cb:31:a5:ce:ee:15:14:9e:a9:86:bd:b5:
e1:5c:10:ef:bd:41:f0:29:a5:95:da:78:1d:90:79:20:2f:5f:
ee:39:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:10 2025 by rpki-client