Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
File: MCemMbtnOOtou26mxCTvSn0Uw8s.cer (raw, json)
Hash identifier: nAQFepv8t2K6oM6k2t654JJCfgKx+EhiAsAWXWVJH/g=
Subject key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369BDBF9D4CB185840EEB0382D7F9E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8916
AS: 48663
IP: 185.56.44.0/22
IP: 185.87.56.0/22
IP: 188.246.192.0/19
IP: 193.108.199.0/24
IP: 213.5.88.0/21
IP: 2001:67c:1b8::/48
IP: 2a03:9800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:bd:bf:9d:4c:b1:85:84:0e:eb:03:82:d7:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:c2:ac:a9:58:b4:8c:4f:5f:e8:a1:54:2f:
31:72:13:ea:f8:20:c4:79:5e:4c:72:e3:1e:f9:20:
be:b7:8a:4d:8c:42:2e:c6:d2:90:a2:0f:06:f4:1a:
bb:66:43:b9:2b:4b:b9:35:d0:f6:3f:c7:ca:5d:64:
8e:f1:50:8f:3d:e7:83:ae:4c:93:b4:91:a0:29:ed:
5e:aa:9e:31:00:74:4d:ca:75:b8:28:7d:92:97:91:
3d:b8:67:69:86:2f:01:c4:f7:a8:0e:36:98:ff:5c:
4f:be:c8:81:78:ff:35:dc:19:41:48:97:4d:0c:fa:
2f:b8:42:6b:fa:af:08:b2:1e:90:98:57:3a:67:77:
65:6e:e0:ee:84:7b:33:71:ff:71:e1:79:56:5c:ce:
3e:0f:c9:67:75:26:53:99:58:37:af:7d:90:d9:be:
a2:7f:61:25:3a:0f:92:96:45:a1:11:4a:b7:38:86:
74:2c:30:18:df:58:51:3b:9a:a7:b4:8d:43:27:a3:
6a:7b:99:1a:22:1f:51:b9:73:43:57:2f:fc:d3:59:
6e:13:41:dd:a7:fe:30:a6:fa:72:07:6a:fb:42:e9:
f6:cd:db:85:0d:35:25:17:59:b6:7c:23:e0:6a:3c:
bd:91:95:89:2c:85:5a:d2:30:6d:49:09:e2:52:d2:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.44.0/22
185.87.56.0/22
188.246.192.0/19
193.108.199.0/24
213.5.88.0/21
IPv6:
2001:67c:1b8::/48
2a03:9800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8916
48663
Signature Algorithm: sha256WithRSAEncryption
6d:89:cd:13:07:ec:04:2b:47:49:7c:1e:46:46:15:5b:3b:19:
fa:f8:b7:be:fb:ec:b1:ff:22:99:19:a2:8c:a2:87:68:25:5c:
47:bc:7e:07:ab:d2:4a:4d:b7:b5:ca:44:32:f1:e6:1d:27:a7:
eb:fb:28:49:3f:1e:4d:e6:07:25:02:56:c8:78:e6:63:c4:a2:
3f:ce:cb:27:8e:c5:e4:11:3c:b7:3f:dd:70:d4:41:c6:bd:22:
4b:0b:e8:ec:ba:d9:5b:73:b8:68:1a:d3:23:b4:12:72:4c:15:
46:e4:f0:bc:15:8b:5d:c4:88:d5:d5:43:2c:54:59:d6:b6:0d:
c4:1e:49:79:af:02:9a:03:80:19:03:ec:1c:68:54:37:52:c0:
cf:1d:a8:e5:e1:81:7b:09:91:f8:d8:01:a8:f9:02:3e:57:f6:
71:c7:0b:89:9b:b2:a0:16:cb:e3:e9:e9:a8:86:56:e6:31:14:
fc:e0:86:ea:a2:cc:c4:8e:1e:40:5a:cd:ea:29:65:67:c8:6e:
51:47:4e:0d:c5:34:32:2d:eb:57:3b:48:dc:14:04:42:89:80:
de:4c:63:ff:64:6d:21:86:3a:dc:bc:c7:5e:a5:e3:36:e5:cd:
d8:b5:ba:ca:ca:cd:98:36:d5:1f:89:48:27:f8:01:37:f7:3f:
c3:0f:2a:98
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgISAZQjab2/nUyxhYQO6wOC1/ngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDI3YTYzMWJiNjczOGViNjhiYjZlYTZjNDI0ZWY0YTdkMTRjM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K/CrKlYtIxPX+ihVC8xchPq+CDE
eV5McuMe+SC+t4pNjEIuxtKQog8G9Bq7ZkO5K0u5NdD2P8fKXWSO8VCPPeeDrkyT
tJGgKe1eqp4xAHRNynW4KH2Sl5E9uGdphi8BxPeoDjaY/1xPvsiBeP813BlBSJdN
DPovuEJr+q8Ish6QmFc6Z3dlbuDuhHszcf9x4XlWXM4+D8lndSZTmVg3r32Q2b6i
f2ElOg+SlkWhEUq3OIZ0LDAY31hRO5qntI1DJ6Nqe5kaIh9RuXNDVy/801luE0Hd
p/4wpvpyB2r7Qun2zduFDTUlF1m2fCPgajy9kZWJLIVa0jBtSQniUtJLjQIDAQAB
o4IC1DCCAtAwHQYDVR0OBBYEFDAnpjG7ZzjraLtupsQk70p9FMPLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzhkNzhl
Yi0yODMyLTQwODMtYWUxZi0xZGQ2ZDI4MWM4OGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvOGQ3OGVi
LTI4MzItNDA4My1hZTFmLTFkZDZkMjgxYzg4YS8xL01DZW1NYnRuT090b3UyNm14
Q1R2U24wVXc4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF
BwEHAQH/BEAwPjAkBAIAATAeAwQCuTgsAwQCuVc4AwQFvPbAAwQAwWzHAwQD1QVY
MBYEAgACMBADBwAgAQZ8AbgDBQMqA5gAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkC
AiLUAgMAvhcwDQYJKoZIhvcNAQELBQADggEBAG2JzRMH7AQrR0l8HkZGFVs7Gfr4
t7777LH/IpkZooyih2glXEe8fger0kpNt7XKRDLx5h0np+v7KEk/Hk3mByUCVsh4
5mPEoj/OyyeOxeQRPLc/3XDUQca9IksL6Oy62VtzuGga0yO0EnJMFUbk8LwVi13E
iNXVQyxUWda2DcQeSXmvApoDgBkD7BxoVDdSwM8dqOXhgXsJkfjYAaj5Aj5X9nHH
C4mbsqAWy+Pp6aiGVuYxFPzghuqizMSOHkBazeopZWfIblFHTg3FNDIt61c7SNwU
BEKJgN5MY/9kbSGGOty8x16l4zblzdi1usrKzZg21R+JSCf4ATf3P8MPKpg=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:45 2025 by rpki-client