Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
File: MRRFNToII-2u8So6M1b6gJjhXqw.cer (raw, json)
Hash identifier: 699N4y5qxSgKVttaERZERxW8B5Vdy8gX2Mka4tv5gX4=
Subject key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC6395EFA7E7E72A835F2A80DA3BA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205037
IP: 161.51.255.0/24
IP: 193.23.163.0/24
IP: 2001:67c:2c6c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:63:95:ef:a7:e7:e7:2a:83:5f:2a:80:da:3b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311445353a0823edaef12a3a3356fa8098e15eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:6c:3c:60:38:e7:80:b8:5a:19:ea:f4:7e:
af:2a:8a:60:e8:80:8a:b4:91:e2:62:09:80:56:d4:
59:c1:1d:3e:88:b8:ac:84:7d:ed:8c:aa:15:48:ab:
ae:03:11:95:40:89:7e:23:65:d9:86:bd:f7:30:fd:
d1:77:2a:d6:de:c0:87:3a:26:2e:29:97:c0:9f:b6:
1a:c0:f9:94:77:2f:90:92:ae:27:22:ba:b3:05:e7:
d5:91:af:25:94:4f:6d:c7:46:d4:a0:a9:2a:f0:76:
25:17:87:20:67:ce:58:cd:da:33:96:5d:f9:f4:19:
16:5f:31:37:68:08:66:85:d6:c0:07:64:dc:55:38:
44:1a:9b:18:bd:4e:c4:47:ba:d8:07:79:3b:f2:31:
8b:27:fa:bd:e9:0c:86:3d:dd:bf:cf:a9:13:dc:c2:
5e:1f:88:38:c6:d1:5a:f2:1d:08:c4:a1:bf:b8:7f:
b6:fe:45:41:3e:d4:87:1b:53:c4:2a:ce:b3:4f:04:
81:ca:cd:37:f9:aa:d2:f0:e8:e4:c9:3e:2b:aa:48:
55:c7:90:e8:c8:ec:c1:a9:7c:b9:55:16:a7:f3:05:
b4:36:ed:ce:f5:3b:36:98:b6:38:31:f5:5a:8c:57:
18:73:c3:e4:24:08:17:f8:86:b9:49:20:62:2d:38:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.51.255.0/24
193.23.163.0/24
IPv6:
2001:67c:2c6c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205037
Signature Algorithm: sha256WithRSAEncryption
7e:60:52:20:1e:d5:cb:ea:ac:3a:89:d2:d1:82:9d:72:03:1f:
d7:11:3e:46:46:32:37:61:4d:bd:01:b9:a7:78:7d:87:33:7b:
b2:1c:bb:76:5b:fa:cb:66:df:d8:d2:4f:53:d1:84:2c:fa:5a:
05:14:c0:1e:af:7d:48:4d:5b:44:23:83:ae:ea:2a:99:26:9e:
8a:fc:7f:20:35:16:9c:30:e6:6a:04:1c:80:b3:0f:c6:9c:ba:
9e:e0:a5:9c:c3:c0:ea:fc:af:ba:a8:58:6e:ad:97:a6:06:41:
72:05:08:56:60:0b:32:98:6b:7a:c2:49:44:73:5c:b0:c6:82:
07:9e:b3:19:34:2e:82:00:6f:9e:bd:6e:44:45:4e:70:30:55:
04:9a:3a:81:d3:0a:b2:cf:cc:52:8d:4d:eb:fb:3c:ce:4f:96:
4f:0b:79:01:8e:b8:ff:23:f2:5c:f6:a8:24:fa:06:4c:06:36:
c2:da:2b:ca:c3:9b:ea:2c:e2:c5:4d:f5:9f:62:af:a7:77:87:
55:5d:85:12:40:d0:e1:e3:d2:11:c5:e1:6b:fb:32:ba:0f:50:
52:91:76:ec:a6:b7:a4:ea:72:21:b9:5a:8d:38:90:16:42:bc:
8d:16:84:33:cc:84:3e:ab:d4:8b:bd:d2:6c:a9:a2:fc:cb:b4:
cd:64:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:02:51 2025 by rpki-client