Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
File: M7GzE5YIPOntUeRiiY4pTtghWuc.cer (raw, json)
Hash identifier: 1X4ptFb3+mivV1lhVDm3356M2dgmx4rie6Km+dcqc6A=
Subject key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424459F099E7FE2DDBFAD0016E388ECC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5392
IP: 195.36.0.0/18
IP: 2a00:1988::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9f:09:9e:7f:e2:dd:bf:ad:00:16:e3:88:ec:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:3f:1e:14:03:28:49:23:a2:5b:c8:4c:4a:
b3:cb:0c:3e:42:9e:e6:dc:fc:90:4e:6b:cd:6e:a6:
76:1e:86:1e:a5:85:76:b1:a5:f0:c1:76:33:f0:1a:
4b:d9:69:66:78:c2:0e:76:35:5a:ab:29:08:3c:9f:
21:42:39:7e:c6:3c:09:f8:5e:92:b1:dd:73:30:c1:
46:f0:8d:0a:a7:de:bb:93:42:07:0f:dd:e7:3a:c0:
92:2b:32:a9:e6:9e:3c:08:e0:b9:07:06:20:4c:b3:
8f:49:ac:19:94:a0:a9:00:ee:54:ba:e4:c6:0f:30:
96:10:a2:ac:f3:2c:89:77:33:ae:a9:f7:58:ed:59:
65:01:23:f1:8f:ff:0c:f9:3c:86:9d:12:ab:7c:8e:
4f:e2:00:d8:4c:7f:d3:4a:ab:ba:e2:31:a1:06:ce:
12:ad:f0:8d:3b:8b:0c:63:49:5d:9f:69:60:0d:69:
ef:7d:45:72:a5:4c:74:48:3f:7a:b4:4d:a1:a4:1b:
1d:d0:8a:d2:d1:e5:05:1a:ad:de:6e:f8:1c:88:ed:
64:ad:c7:5c:4d:b4:8f:24:f1:95:e7:72:38:d5:29:
ed:b0:ff:f0:24:98:67:b9:fc:0d:f5:30:de:0e:ec:
86:46:ff:32:be:cb:f4:ee:1e:57:4c:55:5d:17:58:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.36.0.0/18
IPv6:
2a00:1988::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5392
Signature Algorithm: sha256WithRSAEncryption
4c:83:4b:3d:76:89:87:0a:bd:bc:73:32:53:6b:28:13:af:46:
e9:19:3a:40:6d:9c:03:d8:b8:89:6a:e5:84:74:bf:78:f2:63:
76:9f:b4:e8:a5:d9:3c:89:4f:fd:4c:9b:81:cb:ec:1a:7d:7d:
18:b6:fe:aa:f0:2e:06:8e:03:23:df:84:b6:2f:de:71:47:fd:
94:9a:ac:fc:76:03:33:d6:00:1d:39:15:e7:e1:ae:3e:c4:ff:
aa:79:c8:3b:62:f1:3a:c8:8e:e9:95:01:10:17:86:b8:42:c2:
ae:51:cc:3c:20:ee:5e:63:51:e6:c7:a5:4d:02:34:3d:24:01:
4b:cf:8a:cc:12:0c:0f:a8:7a:ac:4c:cd:48:69:3e:28:84:d5:
28:7d:9d:af:a6:e2:cc:66:ee:90:f4:ec:74:59:7c:01:89:9a:
50:60:bf:82:75:2a:af:83:50:1c:16:e3:fd:70:29:d6:1d:55:
e7:2e:e8:8f:b8:08:b8:f6:93:b3:99:3a:04:f2:1e:60:ba:62:
bc:7f:bc:7d:f4:db:b7:c9:1f:33:c0:3f:1f:d6:8a:4f:77:cc:
2a:02:24:8e:60:d4:20:3c:ee:c3:35:8d:66:96:0a:fa:af:81:
50:d1:11:9a:b5:73:f3:c0:27:e2:8c:85:4f:18:d5:91:16:70:
92:c6:a1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:51 2025 by rpki-client