Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
File: MHoDlQLUamuZCREM4qsTlod70I4.cer (raw, json)
Hash identifier: UgLKlIbFxAmZSyThBDhf3Y4R7x9eRLg8gfKV+BOPURc=
Subject key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B4A1FA79E813DA947AE06BE2B46080
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.15.143.0/24
IP: 194.45.144.0 -- 194.45.153.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:a1:fa:79:e8:13:da:94:7a:e0:6b:e2:b4:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:bf:ad:9c:a6:6d:fe:a1:d2:92:c0:b8:f4:
aa:26:cb:9f:24:e7:af:a2:e9:3b:a5:42:74:96:2f:
7d:1f:b1:39:db:a0:80:5a:43:a3:75:26:a8:ea:41:
70:94:8e:e0:6f:ea:f1:d9:a1:18:63:f9:65:96:08:
04:2e:80:12:ff:62:86:94:55:0d:1f:67:09:3b:e2:
78:ec:96:de:f9:2f:02:82:19:b6:fa:58:3f:75:e8:
6b:2b:4c:70:8e:e1:64:37:99:d6:83:9a:45:1b:01:
89:12:e1:a0:51:03:0d:60:dd:b1:50:78:b4:38:01:
d3:e4:3b:83:1c:91:e6:c7:bc:1c:3d:02:6a:21:3d:
75:25:a1:86:3d:ac:80:a8:c2:15:63:18:42:4b:ea:
ce:cc:11:46:bf:09:da:a6:ba:4a:7c:52:7e:29:be:
75:0a:d3:32:dd:a6:24:68:aa:6f:e1:da:d5:29:06:
c9:58:1d:c1:85:da:75:c3:06:72:f3:47:ef:a4:7f:
ae:37:a3:bc:eb:01:c9:cf:e1:6d:98:c3:03:a0:13:
31:40:05:7f:06:c9:25:c7:89:41:7c:6f:e4:39:e2:
81:b5:08:b0:5e:ae:e9:31:b6:8d:a0:9a:a7:36:db:
6f:7b:f3:9e:4b:3e:b6:b2:86:dd:b7:4f:d4:07:ca:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.143.0/24
194.45.144.0-194.45.153.255
Signature Algorithm: sha256WithRSAEncryption
8c:4f:53:bf:65:3e:97:34:99:12:52:82:87:7b:c0:0e:12:1e:
53:2c:85:97:8f:b6:89:dd:e9:77:58:35:f4:91:ad:92:3b:1f:
50:f3:8d:49:6c:55:27:af:74:88:51:1b:83:98:b7:cc:36:64:
7f:de:fc:54:2a:b0:be:c7:a4:50:80:e1:9c:a4:54:05:13:36:
0d:a8:6a:67:b8:b6:a2:29:43:3c:d5:c9:b5:69:9f:6d:1e:4b:
22:fd:4c:41:55:3c:97:2a:34:be:09:f7:8d:62:85:e5:ed:bb:
c2:92:71:5b:09:c3:ce:a7:5d:cd:c5:41:5f:70:69:9c:4e:40:
a0:27:4d:64:42:c1:96:f1:53:99:29:8d:ea:fa:7d:8e:a7:ee:
34:11:5a:fc:87:66:a4:2b:0e:dc:f7:69:e1:24:27:1d:d6:84:
95:f5:e6:d5:67:46:d1:d8:23:1d:5f:a0:0e:34:65:aa:be:c3:
4b:57:5a:69:f2:8a:58:a6:68:1f:be:45:eb:cb:16:fd:5e:06:
89:07:17:6a:18:b3:57:fc:3a:9b:fa:79:ef:9c:99:14:48:66:
df:88:70:3f:39:bd:2f:4e:7d:cd:6c:e8:b8:9a:7d:74:75:d7:
99:b7:81:2c:16:d7:5f:94:b9:e5:33:d0:b8:43:93:1d:7c:07:
b0:ff:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:46 2025 by rpki-client