Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
File: MHR0lP9OJleNneq-LubQBLP-LYw.cer (raw, json)
Hash identifier: tVs32okkN3xM3zr6+vo9SekrWJ4XMk3Emg3x+6KJLPs=
Subject key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444948864CC1DAC8AE937775CDF45A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.31.108.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:94:88:64:cc:1d:ac:8a:e9:37:77:5c:df:45:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:15:9e:dc:bc:cd:13:d2:d2:5f:8a:78:0a:
b2:91:91:a3:ec:97:1f:94:85:08:b2:53:79:03:34:
36:fb:5b:55:c6:0c:e6:c2:73:1b:fc:32:a7:f9:42:
26:e1:9b:ef:12:3e:9f:b7:8d:f6:e5:1a:bc:d4:7e:
16:ca:6b:72:fc:38:e2:e7:a7:8e:0f:95:52:bc:35:
a6:83:bd:81:48:6d:0f:72:b8:9a:53:08:16:bb:b6:
ac:ab:83:e6:1d:b4:7b:2f:23:6d:e6:18:6b:c2:6d:
64:2f:26:eb:f8:36:d2:87:fe:f7:05:9e:b5:b2:08:
e7:ff:98:27:8a:1b:1f:e8:99:84:fb:00:4d:63:27:
31:e7:e8:f6:3e:4e:50:99:3d:76:b0:19:1f:0b:6f:
f7:e5:e1:d4:3e:92:1d:71:24:af:02:63:40:b1:6f:
29:ce:31:52:48:01:d7:0b:04:8b:73:eb:5b:33:fb:
78:c0:61:3f:63:24:1a:11:d1:cd:aa:99:23:55:16:
ba:29:f9:c9:93:83:f1:e7:fd:9c:59:6c:55:3c:c3:
a1:b8:43:ab:fe:86:05:cf:ac:9e:a8:94:79:ae:eb:
0b:52:a3:cf:00:3e:1d:2c:5d:6f:dc:9f:35:33:80:
b3:e6:72:f4:fe:4a:23:83:86:95:65:58:d2:4d:32:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9f:68:52:c4:bb:24:ed:18:5d:77:21:a5:54:c5:8a:84:0e:
24:ea:fc:f3:91:53:00:f2:64:1b:4c:f4:3b:58:8e:ab:a8:72:
ad:e0:d3:75:74:50:3a:39:c9:03:38:60:57:fe:5a:33:06:46:
cf:af:f9:f7:f6:d8:55:aa:ba:2d:9a:5b:46:00:e5:d7:80:10:
61:8a:34:32:81:c6:1b:87:cb:79:e9:b4:9a:27:5d:ce:59:c2:
07:2b:27:be:05:59:39:11:0f:18:25:33:43:5d:ad:ec:16:f4:
60:db:62:40:2f:50:cf:70:9d:4f:18:8d:88:44:5d:1e:fe:62:
67:70:6d:8c:e2:c3:c8:96:2b:62:7f:44:ee:89:bc:66:78:2a:
bf:8e:a7:ef:8d:43:31:ca:c3:53:86:0c:ff:73:0d:62:de:41:
ef:67:4e:94:42:88:7d:38:91:ed:6f:f2:97:ee:78:6b:8f:6d:
6e:cb:8b:fc:be:29:38:35:39:70:73:fd:f0:4f:4f:f2:f7:0f:
0d:a7:27:e0:25:6b:3f:a2:2c:8c:cc:d7:b0:91:d1:60:b7:ea:
e9:cc:13:2a:2b:0c:a8:d8:79:e0:1d:74:2d:96:94:6c:a2:1f:
9f:b9:70:64:12:31:4c:5e:0a:da:72:60:48:2f:a1:66:d3:9d:
b6:60:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:29 2025 by rpki-client