Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
File: MQsFJRN4mUz6gIjSO27u1Onmqwg.cer (raw, json)
Hash identifier: E8E0H8Rh9F9bJctJ9GYzMHrCsNw6padV03pSzwJ/jow=
Subject key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA7A3876E90226FD5B9908ABCB5049
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a09:6800::/29
IP: 2a09:7e00::/29
IP: 2a09:9300::/29
IP: 2a09:ba40::/29
IP: 2a0b:7a80::/29
IP: 2a0b:9480::/29
IP: 2a0c:1240::/29
IP: 2a0d:3040::/29
IP: 2a0d:48c0::/29
IP: 2a0e:4580::/29
IP: 2a0e:7040::/29
IP: 2a11:1380::/29
IP: 2a11:15c0::/29
IP: 2a11:34c0::/29
IP: 2a11:9880::/29
IP: 2a12:2740::/29
IP: 2a12:3740::/29
IP: 2a12:4140::/29
IP: 2a12:46c0::/29
IP: 2a12:9500::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7a:38:76:e9:02:26:fd:5b:99:08:ab:cb:50:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:23:f9:9a:8b:25:7a:69:ac:52:55:a9:04:
e5:74:18:bc:56:c7:aa:9a:1f:b0:5a:fc:3a:0c:9d:
83:0f:6e:35:a4:c5:e4:41:b0:b8:ec:0b:4b:6c:ea:
15:7e:51:17:02:02:aa:4b:a4:fc:70:23:8e:5a:42:
cd:b3:22:4f:7e:dc:b0:5c:c5:d9:6a:9e:fb:dc:bc:
63:22:54:4e:6f:93:1f:bb:af:cb:ce:74:89:1b:16:
71:dd:26:2e:69:f6:59:9d:99:ae:7c:f1:ff:a8:42:
6b:33:6a:70:eb:a8:bf:d0:1a:67:52:e8:90:05:a9:
a0:68:62:bf:fb:2e:2b:89:9b:b6:43:a1:69:b7:a7:
e7:13:d2:42:5a:4b:58:10:ce:b4:34:d7:e4:a3:75:
65:34:d3:76:4b:40:e5:c0:b9:78:41:e0:d6:32:ec:
6a:e3:9b:7e:66:04:5f:75:20:c9:f8:d2:54:2d:6f:
47:b4:38:04:8c:d7:4a:c2:53:20:32:77:af:3d:e2:
46:da:01:5a:15:3c:3c:36:e7:a4:a1:35:30:be:0c:
8f:7c:28:16:26:e4:a0:c3:16:43:6e:74:21:74:ed:
64:0c:06:6d:07:59:3b:32:12:c9:40:c3:d6:46:54:
7a:33:6f:bf:fa:25:d9:bb:6a:71:1d:78:f7:ba:fb:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6800::/29
2a09:7e00::/29
2a09:9300::/29
2a09:ba40::/29
2a0b:7a80::/29
2a0b:9480::/29
2a0c:1240::/29
2a0d:3040::/29
2a0d:48c0::/29
2a0e:4580::/29
2a0e:7040::/29
2a11:1380::/29
2a11:15c0::/29
2a11:34c0::/29
2a11:9880::/29
2a12:2740::/29
2a12:3740::/29
2a12:4140::/29
2a12:46c0::/29
2a12:9500::/29
Signature Algorithm: sha256WithRSAEncryption
4a:5c:73:41:40:2a:06:aa:74:61:0c:dd:ba:2c:bb:d1:68:d2:
aa:89:a0:be:f1:41:c2:33:37:16:9a:8e:0f:bc:98:82:92:dd:
fd:73:c0:62:aa:4e:9b:b1:54:de:e0:89:1d:19:ed:b0:b0:c9:
23:ff:df:37:4c:3b:0d:ab:e7:56:95:a6:18:75:64:10:e4:6d:
94:bb:7c:9f:5c:c0:f9:81:24:bb:9b:35:c0:45:00:eb:62:b8:
0c:77:72:c0:bf:e5:8e:ba:78:a9:52:8f:5d:4e:12:fb:7c:47:
b6:63:0a:82:ed:0a:6f:ea:ed:57:18:93:ca:e5:62:44:d0:36:
d4:15:b8:81:de:d5:19:a3:7a:93:17:b8:b3:25:ab:c1:83:7b:
7d:d8:e2:e8:69:25:11:52:24:73:fe:f1:5e:39:3a:3e:9a:ec:
e2:b4:76:63:9b:6c:e1:19:88:1e:79:c0:27:2a:54:58:36:93:
7f:c2:ac:79:d7:64:5b:b8:91:33:0e:dd:e7:92:85:0e:f8:22:
59:f4:31:33:79:b6:02:e6:38:b6:ea:96:0c:e0:f7:67:0f:88:
d5:7b:cd:6c:e6:47:ac:9c:c3:a6:4f:f0:7e:de:93:9b:3a:b5:
95:34:d7:7e:da:0b:30:d3:36:19:8d:2c:ed:2a:1f:82:55:98:
95:14:a2:20
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAZQf+no4dukCJv1bmQiry1BJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTBiMDUyNTEzNzg5OTRjZmE4MDg4ZDIzYjZlZWVkNGU5ZTZhYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFYj+ZqLJXpprFJVqQTldBi8Vseq
mh+wWvw6DJ2DD241pMXkQbC47AtLbOoVflEXAgKqS6T8cCOOWkLNsyJPftywXMXZ
ap773LxjIlROb5Mfu6/LznSJGxZx3SYuafZZnZmufPH/qEJrM2pw66i/0BpnUuiQ
BamgaGK/+y4riZu2Q6Fpt6fnE9JCWktYEM60NNfko3VlNNN2S0DlwLl4QeDWMuxq
45t+ZgRfdSDJ+NJULW9HtDgEjNdKwlMgMnevPeJG2gFaFTw8NuekoTUwvgyPfCgW
JuSgwxZDbnQhdO1kDAZtB1k7MhLJQMPWRlR6M2+/+iXZu2pxHXj3uvs5kwIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFDELBSUTeJlM+oCI0jtu7tTp5qsIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzc3MTQ4
Ni1iZWUzLTQyNGEtYjM0MS03Y2ZkZjJkZjY2MzIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNzcxNDg2
LWJlZTMtNDI0YS1iMzQxLTdjZmRmMmRmNjYzMi8xL01Rc0ZKUk40bVV6NmdJalNP
Mjd1MU9ubXF3Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGpBggrBgEF
BQcBBwEB/wSBmTCBljCBkwQCAAIwgYwDBQMqCWgAAwUDKgl+AAMFAyoJkwADBQMq
CbpAAwUDKgt6gAMFAyoLlIADBQMqDBJAAwUDKg0wQAMFAyoNSMADBQMqDkWAAwUD
Kg5wQAMFAyoRE4ADBQMqERXAAwUDKhE0wAMFAyoRmIADBQMqEidAAwUDKhI3QAMF
AyoSQUADBQMqEkbAAwUDKhKVADANBgkqhkiG9w0BAQsFAAOCAQEASlxzQUAqBqp0
YQzduiy70WjSqomgvvFBwjM3FpqOD7yYgpLd/XPAYqpOm7FU3uCJHRntsLDJI//f
N0w7DavnVpWmGHVkEORtlLt8n1zA+YEku5s1wEUA62K4DHdywL/ljrp4qVKPXU4S
+3xHtmMKgu0Kb+rtVxiTyuViRNA21BW4gd7VGaN6kxe4syWrwYN7fdji6GklEVIk
c/7xXjk6Pprs4rR2Y5ts4RmIHnnAJypUWDaTf8KseddkW7iRMw7d55KFDvgiWfQx
M3m2AuY4tuqWDOD3Zw+I1XvNbOZHrJzDpk/wft6Tmzq1lTTXftoLMNM2GY0s7Sof
glWYlRSiIA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:48 2025 by rpki-client