Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
File: MfePPgBBCSbb2JyOj1xACxArA3k.cer (raw, json)
Hash identifier: Z5zeRg+BxVGZ7vgWcM/JYi5gZA9YGdb68WTT3ArxRJo=
Subject key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3B7F6BA0B9F10FA201FD95D6A1885
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198256
IP: 217.194.128.0/23
IP: 217.194.158.0/23
IP: 2a14:6f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b7:f6:ba:0b:9f:10:fa:20:1f:d9:5d:6a:18:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:fe:3a:2e:3b:04:bf:ff:2f:1b:76:39:10:
20:a9:f6:84:e5:8d:24:d5:b9:7f:6c:d1:1c:d0:bb:
1d:64:9a:6b:78:e4:95:11:91:1b:f2:25:d5:cb:3e:
95:75:ea:c3:13:81:bb:8d:68:3c:ac:ba:9e:c5:63:
69:26:54:07:2b:b6:dd:eb:c4:83:15:87:30:fb:94:
e8:36:6d:36:61:db:ac:0b:a0:83:86:7b:3f:bc:b6:
d1:38:a5:71:48:06:c9:c3:d4:00:59:f3:99:55:17:
de:b7:d8:ff:bf:74:28:e6:cf:00:b4:59:ac:20:31:
f7:07:14:7e:d6:c4:c9:08:be:d7:b3:3e:e8:92:3f:
48:ea:97:c9:d6:53:5d:a9:7a:07:12:e6:be:e0:a5:
2d:05:be:a0:e0:22:53:b2:7f:ab:29:7d:08:8f:26:
c1:13:12:a3:7b:07:f2:76:6c:bd:58:0b:4e:ad:4f:
0f:70:a7:d5:f3:4e:a0:8d:8e:fa:8f:fe:6c:81:b6:
b3:94:c7:01:ab:a5:e1:6a:c0:97:67:b4:7c:e3:df:
6f:71:82:da:9a:33:94:27:7f:65:f8:67:51:57:1c:
6c:81:69:bd:ec:06:2b:81:50:8e:cb:59:8e:59:01:
d6:48:77:9a:c2:9e:d7:e2:2e:fd:92:f3:5c:29:5d:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.128.0/23
217.194.158.0/23
IPv6:
2a14:6f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198256
Signature Algorithm: sha256WithRSAEncryption
4d:11:6d:96:b9:90:a0:e0:16:4f:25:4f:eb:a2:59:30:9a:87:
31:3c:9f:bb:2b:6f:9b:23:39:30:b7:a6:d8:f9:3b:e0:9c:a7:
77:c2:c9:9c:70:fb:33:09:cd:b5:33:02:25:97:94:b8:c1:6d:
89:e5:bc:a9:7f:3d:a8:e7:ce:6d:d9:66:92:73:88:28:1d:33:
79:6c:b5:91:37:86:e2:0e:da:19:2e:ce:0e:17:cd:15:bb:f8:
2d:1f:69:47:b6:93:70:79:ec:4c:1e:0f:0c:18:6b:07:ab:20:
0c:c4:01:d9:b0:04:e0:15:89:64:81:5f:91:b9:c2:f9:fe:7f:
e1:2d:a5:c4:ec:c9:87:48:7a:fb:ae:6f:1a:f8:6a:e6:1b:82:
11:2d:68:1e:e0:11:61:70:bf:c2:24:d4:4a:04:b8:52:ad:25:
0e:23:ea:a8:01:32:dd:9c:c6:b6:a7:b6:ce:06:cb:0b:d0:c9:
4a:e0:9d:48:ae:21:3c:e5:ec:46:b6:5d:e6:58:c0:e5:f8:de:
b6:8e:c7:ca:89:b1:2b:eb:3a:92:91:3f:54:63:1c:ac:45:05:
5b:a0:a8:24:67:fd:95:6b:13:71:e9:4b:d6:92:d4:79:c5:b1:
b1:41:eb:95:2a:0d:f9:b5:99:5d:92:8e:62:8f:88:04:09:61:
67:8e:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:45 2025 by rpki-client