Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
File: MJAbMGF-hmq8nOULrb6IRl048Dc.cer (raw, json)
Hash identifier: OyGGhp8ks34Qx04kDHGaIc0IL/jGOPTbf/iPw2Kn6O8=
Subject key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421441DDC4530E0555D79BC9C96ED91DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214985
IP: 5.42.204.0/24
IP: 2a14:1400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1d:dc:45:30:e0:55:5d:79:bc:9c:96:ed:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30901b30617e866abc9ce50badbe88465d38f037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:b2:04:ac:f7:cb:e0:b7:ce:51:3f:fd:65:
d8:45:69:18:c7:c2:40:7b:39:2d:e8:7a:b1:6a:96:
e7:d3:73:00:b4:fd:26:55:dc:c6:fe:05:de:80:56:
8d:a2:9a:63:c2:36:8b:cf:10:fe:09:bd:8f:43:c1:
86:e2:7c:95:1a:cf:3f:bc:aa:b5:7c:be:d3:dc:14:
f0:58:11:1b:21:5f:33:d8:e3:0f:44:c3:81:80:5a:
be:f4:e0:2d:12:98:72:d8:2a:5a:4b:19:85:ee:ca:
67:65:c7:bd:34:69:30:35:9a:ab:85:43:72:1e:7d:
a9:9d:95:9b:79:60:c0:3b:4b:31:13:95:08:f3:33:
32:7d:a4:47:2a:bf:a3:6d:3b:93:69:83:9a:01:0d:
8d:45:ba:11:ce:66:38:3d:70:46:2a:46:09:aa:42:
68:eb:79:f4:ea:30:b8:11:20:3a:41:00:51:f9:a0:
b3:25:09:10:ef:81:4e:2c:0c:8c:f3:0e:a4:7b:92:
e6:a8:5c:90:ed:63:4c:d6:34:10:67:af:d1:1f:97:
94:3e:82:38:d4:db:fa:ce:aa:3e:dd:1f:85:e3:ea:
56:cb:c6:4b:b3:1a:b3:27:af:3e:bc:83:9c:a0:c0:
fa:7b:f1:f1:1b:d9:4a:0c:3e:ed:de:34:f7:ba:f8:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.204.0/24
IPv6:
2a14:1400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214985
Signature Algorithm: sha256WithRSAEncryption
2f:3c:06:3c:b7:d5:48:ba:a1:08:90:7e:a4:80:4f:8e:fb:f2:
6b:fc:45:b6:ec:24:be:32:a1:e0:52:da:32:c8:8f:01:33:f2:
4c:eb:b3:a6:22:4c:ce:38:20:1e:bd:b4:a2:a2:14:d3:3b:2a:
6b:cb:0d:9b:01:a5:97:79:5c:9a:36:a9:f2:fd:7c:f3:00:42:
c4:f8:4f:6c:fd:35:0f:c6:65:1f:33:33:11:f4:08:d4:9f:94:
9f:94:a0:0d:dd:69:1c:ed:82:f7:d8:3d:8a:bb:4a:5a:f1:a9:
79:f5:80:60:36:4d:9d:b9:83:95:23:b8:be:31:f5:cc:3d:91:
48:3e:06:8c:27:37:39:e1:07:70:e3:80:2f:ac:2a:32:94:95:
78:9e:3d:b2:ee:22:12:bb:8e:a7:ac:48:19:27:73:7e:95:4a:
56:a4:17:31:55:2d:98:60:f5:f9:a5:07:0b:ea:e4:16:19:09:
97:dc:dd:0d:40:bb:a3:fa:ff:5a:25:2a:3f:67:a6:47:cf:ca:
ac:fa:60:61:c0:67:da:99:b9:0a:03:8e:9e:3c:b0:87:f8:ee:
73:4a:3a:ed:17:1d:c6:82:99:19:ad:03:f2:88:04:c4:78:2a:
40:7d:08:01:9d:e3:8c:07:c0:b9:fc:c8:92:42:47:50:cd:a9:
22:c0:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:25 2025 by rpki-client