Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
File: MDquN78-v5XxS62GR9PVjvbng7I.cer (raw, json)
Hash identifier: fXaQcSFBSgXVVC/Tk0/kak7Dj5AG0xGG4uuscBzjdJU=
Subject key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB821540102F73AAF5FFB1F46C6BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49463
IP: 5.179.120.0/21
IP: 31.216.16.0/20
IP: 46.21.112.0/20
IP: 185.7.160.0/22
IP: 2a02:27d0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b8:21:54:01:02:f7:3a:af:5f:fb:1f:46:c6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:3b:07:c3:95:b2:5a:ac:e2:d2:12:25:6b:
20:40:d3:c6:db:37:c8:bc:f8:8c:76:5c:a4:71:64:
0a:dc:be:15:40:c3:3f:28:46:81:8a:50:64:fc:e4:
ed:58:ba:4a:e3:28:bf:82:80:39:7c:54:42:6f:9d:
9e:a3:f1:81:78:ce:06:f4:a3:34:0d:f0:3a:d5:5f:
d7:19:8b:a9:3b:a5:c5:a9:84:ea:be:49:db:95:cb:
92:8e:24:fe:e3:5f:f6:c1:8d:1e:08:21:4c:db:0e:
78:90:1e:7c:2f:6c:1b:d2:f8:9d:d9:8b:fc:84:04:
63:da:d7:cb:c5:fe:22:77:d1:1c:f8:25:1c:e2:0b:
2d:bd:38:21:87:a2:a9:e3:c2:54:8e:8d:41:b6:c7:
6b:ab:63:f8:cf:47:6d:db:4b:07:04:79:7e:a9:eb:
c8:82:99:97:fc:82:f0:3e:f5:1f:f6:75:67:f9:78:
81:4c:42:be:fa:d7:0c:db:d9:c9:d3:ca:c0:cc:97:
ea:ee:26:07:29:d0:36:73:f2:43:46:6e:b1:fc:24:
ab:aa:7c:7e:3b:e5:ab:3c:ae:09:4b:3f:42:31:b8:
58:95:6c:70:72:3b:84:a6:dc:3c:8b:95:ac:49:94:
70:95:00:1f:ea:07:38:e6:9c:1f:d6:4d:c4:05:ab:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.120.0/21
31.216.16.0/20
46.21.112.0/20
185.7.160.0/22
IPv6:
2a02:27d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49463
Signature Algorithm: sha256WithRSAEncryption
52:ae:57:c8:4d:7b:c9:aa:4c:0e:d1:88:48:cd:04:2a:2d:83:
00:f9:0e:6a:9b:53:85:79:d4:c1:8e:a6:e0:43:5d:62:02:9f:
f4:94:2c:bb:fd:3e:b9:de:c6:7f:35:61:18:93:a6:a4:34:1e:
79:8b:6a:18:6e:d4:8a:7b:40:07:15:a2:10:51:7a:b5:74:5a:
83:28:bc:76:6d:cd:a1:fe:77:f0:f1:e0:d4:f9:3d:e2:c2:ed:
1d:a3:7e:4f:22:98:49:10:05:e5:41:ca:c9:5c:c2:e6:bb:5a:
41:64:f2:f3:4e:24:58:98:c9:de:55:b9:f3:63:02:58:d6:3d:
0c:61:45:e9:5d:31:bf:10:7f:94:d1:ac:58:a3:50:f4:23:68:
fc:e5:d5:ea:62:3c:6d:4b:da:2c:12:85:50:c2:ca:f7:a7:7b:
22:a7:98:ef:2f:6f:46:2e:e3:a3:d7:a6:a2:42:1a:99:0a:bd:
75:b6:10:e7:3b:cd:95:94:ff:dd:62:9e:4b:69:7a:7c:ef:20:
da:06:34:53:36:be:dc:e1:be:ce:06:fc:35:8d:e3:c8:d1:e1:
19:c0:e4:92:c1:80:e6:ac:24:b3:e0:d2:71:37:3e:91:42:e7:
57:66:8b:aa:84:6b:70:67:2a:8e:03:dc:5e:6c:34:8d:a8:fc:
3b:07:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:35 2025 by rpki-client