Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
File: MseO7vestFH8N1df65EU38zBzfs.cer (raw, json)
Hash identifier: TL/p4DlZQn8ED6EliQ+0uTJrZ+W6Wn8CIhxBd1mJDSo=
Subject key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425216D7382587089DD4BDD8F2FBA84D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202349
AS: 209235
AS: 210505
IP: 91.199.48.0/24
IP: 146.19.117.0/24
IP: 185.1.68.0/24
IP: 185.130.194.0/24
IP: 212.18.99.0/24
IP: 2001:7f8:118::/48
IP: 2a09:c0c0::/29
IP: 2a0d:c780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6d:73:82:58:70:89:dd:4b:dd:8f:2f:ba:84:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:d2:40:45:64:69:a4:c8:d1:c1:60:a5:fb:
fb:b3:78:0e:2e:b9:2b:53:90:63:17:2d:aa:4f:1f:
97:fe:46:54:f5:52:40:23:de:04:2b:65:85:63:44:
b5:13:8b:69:f4:0f:ff:37:4c:48:15:07:11:9e:4b:
80:e9:3d:7a:77:25:ee:a2:56:45:1a:6c:c0:0a:be:
1f:38:f7:99:f5:98:53:d4:3c:80:e6:d0:38:0f:ff:
8f:60:46:27:3a:b0:85:e9:f4:e1:5d:29:af:3f:b1:
47:97:83:da:54:83:5f:d6:b4:13:ed:ee:1d:a5:cf:
4e:69:7e:18:6f:1b:97:64:1b:85:02:75:19:ff:42:
6a:4a:64:3b:e0:25:33:79:5f:fe:f4:15:13:e2:ef:
1f:b5:85:12:37:cb:ac:35:4b:18:f5:c7:2f:2a:79:
a5:0e:51:24:c1:99:f5:2b:a4:19:46:4d:80:f3:4f:
a5:a8:93:95:08:fd:a1:b5:b7:70:75:17:1f:b0:e2:
de:59:3f:21:27:1f:4d:c3:cc:3d:58:d8:8d:24:d2:
9d:3f:6b:d8:8f:3c:2c:1f:b1:9e:77:bc:a6:8d:72:
4a:f6:31:14:f5:a2:03:89:20:3c:41:fc:89:65:e5:
18:b5:07:3f:0a:f9:c7:47:ae:f4:ed:02:26:34:ca:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.48.0/24
146.19.117.0/24
185.1.68.0/24
185.130.194.0/24
212.18.99.0/24
IPv6:
2001:7f8:118::/48
2a09:c0c0::/29
2a0d:c780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202349
209235
210505
Signature Algorithm: sha256WithRSAEncryption
4e:b0:b3:57:27:6e:98:cf:a8:27:2c:e4:9e:55:41:79:ea:ae:
59:8e:ae:ac:b8:4f:c5:16:a5:f9:37:8e:a0:f9:12:32:f7:71:
d2:19:3f:a5:f5:a5:9c:43:b9:87:53:d0:e2:22:35:c3:57:d1:
6d:ed:cf:95:2d:3a:85:9e:c4:16:fa:65:4a:1e:7b:ec:22:2d:
26:a5:82:20:47:e5:a9:18:cb:de:d0:4d:1e:ca:b5:fe:76:bb:
af:72:7f:e4:bb:5d:d0:e6:d1:78:1d:9e:ce:1c:84:69:ec:95:
7c:5b:b7:77:9e:36:3f:b0:80:55:3d:55:70:0b:35:0c:b7:ed:
a5:c6:3c:67:0e:84:e7:70:02:44:cf:ff:38:03:92:b6:f5:04:
a4:bb:2c:8a:71:a5:63:c2:f3:16:31:45:c8:e9:cb:cf:4d:7a:
3c:26:24:ae:54:ac:c1:66:43:a8:70:5c:78:0d:08:3c:c8:e1:
f9:ce:5f:7b:76:d6:31:0f:49:82:fa:f9:d7:8e:88:14:7b:58:
17:d5:a4:8f:2f:a0:e9:bd:bf:e4:8e:00:ea:7e:a2:5f:55:55:
87:de:78:9f:e0:f3:a7:1b:d4:88:7a:c4:2b:b8:94:6d:cf:39:
12:f3:32:87:0f:c0:02:97:1e:14:60:ef:c8:8a:a1:4b:12:bc:
19:b1:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:21 2025 by rpki-client