Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.cer (raw, json)
Hash identifier: Uv5TUbS7vkugK/bLr7qWb4YAeg2FPqTHYEIJILtbL3Q=
Subject key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7397D60BA3C2C0D8B90CF579EB8D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20909
IP: 91.217.171.0/24
IP: 193.178.214.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:39:7d:60:ba:3c:2c:0d:8b:90:cf:57:9e:b8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=314d088578ec0e29b04b43e901493586726364fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:21:e7:c0:2b:e8:9d:fc:1d:59:52:77:64:
d1:5f:2d:0f:f5:bd:b3:21:27:98:05:5c:00:5d:09:
ae:d9:f3:6b:b2:2c:f1:c3:b1:9e:8f:15:9e:37:3f:
50:7e:87:31:20:8e:da:62:1a:2e:b1:e2:98:f1:b6:
f2:1e:6b:6c:a5:11:fe:7b:00:65:fb:97:99:fa:90:
8f:4e:f2:8f:d5:96:d1:39:13:5a:bd:3f:a2:27:a5:
f9:79:7b:f4:a7:26:f5:c8:a4:56:6c:5b:aa:d7:8a:
66:23:6a:2c:f1:14:ab:22:bc:8f:76:96:a7:8c:21:
a3:2a:55:58:93:cc:ab:00:5a:7d:44:4c:b0:27:19:
79:9b:5f:1f:cf:c1:c1:30:fc:31:66:37:2d:91:f1:
eb:b5:e9:ea:1a:6d:c5:67:2d:0f:24:3e:f6:dd:02:
2d:37:ee:b7:93:bb:18:e5:24:98:80:c2:b2:5a:89:
1b:78:92:a3:3f:03:38:92:80:3f:7b:d2:78:6d:59:
24:5d:f2:d0:27:76:31:98:08:c1:2a:c4:b6:80:82:
f4:5f:6b:87:71:f6:01:6a:cd:36:c4:e7:04:fd:b0:
77:7f:b2:d7:a7:23:c7:74:7b:b0:e0:6e:2b:b2:72:
f9:d5:29:62:ad:84:b4:fb:e2:1d:16:57:1b:0e:58:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.171.0/24
193.178.214.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20909
Signature Algorithm: sha256WithRSAEncryption
57:cc:19:28:f2:2c:bb:9c:4f:9c:e8:96:e6:4d:9b:95:96:86:
8c:fe:2c:23:f3:37:20:d4:c6:22:2c:1d:9e:f6:38:51:19:6b:
74:28:b9:f0:5a:22:b2:f5:d3:cc:66:c7:08:7c:fd:22:6d:74:
1e:6e:70:0b:f4:d3:7c:2e:c7:4f:2b:ae:0e:44:49:8e:57:60:
29:dd:1a:07:17:aa:c5:54:eb:51:de:ca:8f:11:39:92:fb:d5:
68:a3:de:e3:e4:04:1d:dd:32:67:1c:e4:1c:04:31:c0:56:64:
a2:55:36:c5:7f:94:ac:3c:c5:a5:7f:ec:8d:3c:67:d2:2c:0e:
d5:d7:35:6a:6a:a7:47:82:49:a0:00:a7:4d:51:a6:56:5e:56:
4b:9f:08:68:14:50:98:c6:3a:36:3d:45:26:7d:d2:0d:82:5e:
b9:eb:2f:f1:f6:86:1e:ba:9b:76:c1:9f:2a:24:6a:8e:48:4a:
55:c7:7e:c5:09:21:0e:05:61:31:37:b8:ca:17:8b:28:d2:2e:
6a:40:1b:a0:82:2f:19:c3:65:bf:23:02:85:4d:0b:a2:00:c6:
9f:b1:a5:1c:9e:95:0d:17:e8:48:f8:f3:b1:6f:5a:54:5c:e0:
a7:28:c7:c9:a2:17:fa:38:80:9f:ef:42:08:bf:81:47:16:fb:
13:7b:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:30 2025 by rpki-client