Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
File: MT3NGHEiZlBFhpdnM8ofkvYmH14.cer (raw, json)
Hash identifier: dOpkOSQvA0amHaEzkLUgYQHEwcAv7ZfgsH+wEzvh/mo=
Subject key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425219FDA054D08991A11745D0DE860FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211658
IP: 185.167.219.0/24
IP: 193.239.178.0/24
IP: 2a0d:c700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9f:da:05:4d:08:99:1a:11:74:5d:0d:e8:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=313dcd18712266504586976733ca1f92f6261f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:88:8b:92:92:ee:92:e5:ba:66:9b:76:8e:
1d:b5:6e:bb:48:2b:79:85:ef:02:9f:d1:d1:fd:88:
d8:5c:51:a9:b2:da:98:1b:2c:cf:1a:f7:7b:d4:70:
e7:bb:70:f9:e9:24:3b:57:75:e4:65:d2:bb:0c:cb:
eb:18:7d:08:6e:f6:38:6b:33:73:4d:03:a4:28:ac:
51:e8:9b:70:97:1e:fa:26:fa:3a:14:7b:ce:f6:d5:
df:92:7b:58:4f:d5:ba:2d:a4:7a:9c:ef:1c:11:2d:
2c:8d:6d:4c:7a:8d:09:35:ff:19:59:b5:77:3b:8b:
c0:07:ca:e8:a3:72:7a:f3:4b:e0:e6:53:0c:2a:eb:
5e:bb:a2:f8:1e:65:8e:7e:f8:b2:5f:fd:08:62:7b:
62:6d:4b:fc:16:3a:79:3e:91:2d:63:d8:5e:82:27:
99:8b:53:e1:83:f2:4f:4c:aa:6d:64:92:aa:4c:5a:
b5:86:c7:f7:af:e7:2b:0e:cb:15:0b:62:1f:79:3d:
d8:ce:b8:32:bd:67:90:97:d1:8a:f8:53:74:97:c2:
62:ae:6a:5f:3c:f8:eb:03:a5:a4:c0:82:89:c1:2a:
43:0c:b5:e3:13:03:04:dc:eb:1a:77:f9:33:52:5b:
6c:99:c2:92:57:f5:85:9e:af:1c:88:69:24:a5:cc:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.219.0/24
193.239.178.0/24
IPv6:
2a0d:c700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211658
Signature Algorithm: sha256WithRSAEncryption
8a:60:80:e7:1c:de:ca:5f:14:22:3a:2e:bb:4b:61:f3:36:1a:
6d:6a:03:a5:9c:b2:eb:ea:e4:c0:de:63:c0:ca:67:c3:0e:71:
f5:89:64:9a:96:dc:d7:7d:e4:4b:88:0e:00:c9:64:ad:d7:a5:
c8:62:23:df:d2:e0:d7:90:89:99:41:a8:7e:f9:92:d4:4e:ef:
b5:3c:fc:5e:f3:39:e4:ae:fd:0a:a3:5a:1b:13:4f:2f:fb:f2:
23:72:25:e1:eb:cf:66:ae:41:f5:c7:0a:03:8d:51:91:d2:99:
b6:13:e8:9c:95:0c:24:7e:98:ca:a9:3d:d3:24:9d:3e:40:5b:
58:e2:e4:99:6f:d2:2e:d0:d5:bc:9c:5e:f4:c5:7f:e7:03:ee:
fc:00:5a:2c:77:22:a2:e6:46:82:9c:0c:87:2b:af:d4:6d:37:
90:67:03:85:cf:98:fb:33:05:fc:78:43:a7:2d:86:b5:fe:6c:
4f:8f:23:0f:b9:3e:d3:be:cf:af:13:37:60:78:1b:6e:18:c7:
40:fc:5d:73:dc:8f:92:74:ed:83:02:2f:54:a7:93:93:2a:23:
af:a1:b1:ca:73:d8:27:74:e4:b8:3e:ce:ce:8b:62:9a:d9:9c:
64:93:66:6b:7e:83:30:df:40:6c:e3:11:90:42:0f:86:af:f8:
54:51:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:15 2025 by rpki-client