Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
File: METmC7lxMuqEmlP8VUu7xjlIsBY.cer (raw, json)
Hash identifier: dv5WAi2CaBdvw6GvxmyMhYhc8whCYqdor9+Vot/LqdM=
Subject key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F242AB8BA2A2629C58D325DA8A0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207543
IP: 193.227.242.0/23
IP: 193.228.10.0/23
IP: 2a0a:e940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f2:42:ab:8b:a2:a2:62:9c:58:d3:25:da:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3044e60bb97132ea849a53fc554bbbc63948b016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:6f:b4:7f:09:37:fb:20:15:13:0d:7d:96:
4a:6a:57:a8:d4:df:c2:bb:8b:6c:41:b4:f7:29:54:
c7:2b:e4:5a:6f:32:ea:e2:c3:21:13:98:09:6d:bd:
50:a9:fd:2d:c7:73:da:8a:44:de:af:0d:04:53:1a:
74:0e:a7:d7:4c:f1:0c:2a:0a:d5:01:2b:2d:24:40:
54:2f:d0:e8:ab:3d:fd:79:84:cb:2f:37:b1:c7:43:
82:84:75:9b:03:40:e2:22:21:a4:ec:f4:a8:8f:2c:
16:08:75:6d:db:75:b3:ee:f4:96:f9:fe:86:71:6c:
7b:4c:98:e5:f2:54:ba:72:1d:16:17:20:e2:a0:1b:
b4:e5:ec:e9:06:77:ea:10:8d:01:62:94:32:65:45:
1b:9f:56:de:6c:c4:fb:41:bc:c6:01:60:f0:3e:65:
ad:08:1a:cd:67:cf:ab:07:14:2e:bc:a1:c0:89:50:
58:78:d8:14:6d:1b:53:05:a4:a1:5c:83:57:52:7e:
9e:4d:d9:92:69:81:4f:43:6b:24:4d:ba:d1:ed:ad:
dc:2f:08:44:cf:be:ff:df:4a:bb:3b:2c:1a:3f:44:
cc:21:b9:77:84:02:85:35:b8:ed:48:aa:5a:af:97:
70:14:5b:af:5a:1a:bb:01:f5:54:e0:26:c9:a3:3f:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.242.0/23
193.228.10.0/23
IPv6:
2a0a:e940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207543
Signature Algorithm: sha256WithRSAEncryption
11:90:1a:f1:80:58:c9:17:9b:60:ed:b3:a1:c4:9c:c9:a0:d0:
78:8d:33:03:e8:b2:51:ea:91:a9:e0:bd:53:54:98:7e:15:e5:
46:c7:4c:97:fa:85:95:4b:c4:35:78:cb:be:7d:76:84:69:46:
df:b0:07:0e:59:68:17:19:a4:5a:e4:56:a6:7a:5a:41:50:18:
06:04:cb:0a:d6:86:dc:83:38:72:19:1d:e8:ec:05:b1:ee:5a:
bf:30:1b:05:d9:98:10:a7:35:2e:30:d2:68:c1:09:bb:9b:ac:
a7:c3:3c:0b:b6:9d:f0:30:fc:41:d0:15:cf:16:8c:df:72:05:
96:d2:1f:d9:15:18:04:79:a7:11:62:33:d9:5e:d0:4e:34:e3:
5a:75:91:23:45:c0:ac:21:f4:ed:2c:33:0b:5d:bf:f3:c5:06:
17:83:54:52:03:67:b4:cd:a3:fa:bf:c3:27:93:cd:bb:f3:a8:
81:38:32:87:4d:79:e3:53:73:55:bd:52:e8:bf:05:ae:3a:41:
78:3f:e1:c4:e9:9a:68:73:38:38:7e:31:e7:9e:de:26:b0:9a:
f3:07:12:8d:a9:dd:ab:10:5c:f4:18:bb:cc:d7:a5:58:5d:f8:
f9:65:c4:91:41:3f:94:91:c0:7c:e6:13:31:d0:a9:4c:d0:33:
7d:1a:cf:27
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQhsfJCq4uiomKcWNMl2ooLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDQ0ZTYwYmI5NzEzMmVhODQ5YTUzZmM1NTRiYmJjNjM5NDhiMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ARvtH8JN/sgFRMNfZZKaleo1N/C
u4tsQbT3KVTHK+RabzLq4sMhE5gJbb1Qqf0tx3PaikTerw0EUxp0DqfXTPEMKgrV
ASstJEBUL9Doqz39eYTLLzexx0OChHWbA0DiIiGk7PSojywWCHVt23Wz7vSW+f6G
cWx7TJjl8lS6ch0WFyDioBu05ezpBnfqEI0BYpQyZUUbn1bebMT7QbzGAWDwPmWt
CBrNZ8+rBxQuvKHAiVBYeNgUbRtTBaShXINXUn6eTdmSaYFPQ2skTbrR7a3cLwhE
z77/30q7OywaP0TMIbl3hAKFNbjtSKpar5dwFFuvWhq7AfVU4CbJoz+9EwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFDBE5gu5cTLqhJpT/FVLu8Y5SLAWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2VlZjcw
ZS04MjBjLTQ1YjEtYWIxOS00MzFmOTFkYTRlMjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZWVmNzBl
LTgyMGMtNDViMS1hYjE5LTQzMWY5MWRhNGUyOC8xL01FVG1DN2x4TXVxRW1sUDhW
VXU3eGpsSXNCWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBwePyAwQBweQKMA0EAgACMAcDBQMqCulAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMqtzANBgkqhkiG9w0BAQsFAAOCAQEAEZAa
8YBYyRebYO2zocScyaDQeI0zA+iyUeqRqeC9U1SYfhXlRsdMl/qFlUvENXjLvn12
hGlG37AHDlloFxmkWuRWpnpaQVAYBgTLCtaG3IM4chkd6OwFse5avzAbBdmYEKc1
LjDSaMEJu5usp8M8C7ad8DD8QdAVzxaM33IFltIf2RUYBHmnEWIz2V7QTjTjWnWR
I0XArCH07SwzC12/88UGF4NUUgNntM2j+r/DJ5PNu/OogTgyh01541NzVb1S6L8F
rjpBeD/hxOmaaHM4OH4x557eJrCa8wcSjandqxBc9Bi7zNelWF34+WXEkUE/lJHA
fOYTMdCpTNAzfRrPJw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:55 2025 by rpki-client