Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
File: MtRJGf3QivuaTQqHeJIwESUd1_A.cer (raw, json)
Hash identifier: FvAAKN3BvCG/mWIsChGzh0mJm9vzPF7CexCzshOTx8c=
Subject key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423699E588B936FA0C33FFFE48F62BF29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.5.145.0 -- 185.5.146.255
IP: 193.142.132.0/22
IP: 193.228.72.0/22
IP: 194.33.156.0/22
IP: 194.34.128.0/22
IP: 194.110.48.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9e:58:8b:93:6f:a0:c3:3f:ff:e4:8f:62:bf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:99:a3:41:e9:da:08:7c:cb:15:7c:2b:ff:
97:4a:30:68:3f:53:da:92:bb:c6:fa:e2:36:7c:5f:
1f:39:44:c7:da:0d:8d:3e:35:aa:b6:01:56:e0:eb:
8a:16:46:20:66:78:23:0a:5d:2e:0b:cb:63:dd:65:
7b:00:ef:6b:7e:05:ba:ed:7b:5a:04:23:13:6b:be:
68:1f:d2:66:c9:97:3a:02:74:03:b6:15:3b:2c:86:
8c:ca:a3:29:7a:38:0b:de:0f:37:aa:cd:99:ba:e4:
62:2d:bf:d5:31:06:b5:3e:7f:7c:93:66:a5:43:10:
0f:b9:bc:6d:01:3a:f3:d6:53:cf:fe:18:e7:4e:c4:
c7:c2:59:6c:96:04:7c:26:f4:ff:34:a4:b4:f8:bc:
d9:79:ad:72:ab:3c:33:93:5c:e7:7d:17:c8:b1:61:
61:6c:39:c1:7d:42:fb:19:f2:90:75:28:d5:72:ac:
2a:fa:f1:42:bb:b8:85:9b:06:d9:70:38:fa:ae:72:
4d:e4:d4:fc:7a:20:35:98:c7:e6:fe:70:9b:cd:7c:
f8:8e:48:a4:01:e8:82:32:f4:96:18:c3:bf:77:a6:
b2:7b:58:ec:af:2a:47:ad:43:84:50:ed:00:5d:d7:
5a:aa:c3:e5:e2:bd:e2:40:fb:b9:cf:ac:ff:b9:78:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.145.0-185.5.146.255
193.142.132.0/22
193.228.72.0/22
194.33.156.0/22
194.34.128.0/22
194.110.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:60:0b:62:4a:56:05:2f:d6:f3:e7:02:64:c8:4b:31:5e:8c:
21:af:ea:78:50:f2:98:01:f4:b4:30:6a:d4:ee:e1:d5:9b:ba:
28:76:32:6f:0f:7b:08:d1:9c:91:7e:36:c8:65:58:64:6e:6e:
e5:fd:84:4d:42:38:fc:d3:3d:94:a9:55:f0:41:eb:f7:f5:26:
19:fc:46:fc:4f:c6:ca:ce:8d:bf:6c:26:47:ee:25:8f:d3:7e:
91:11:a9:05:a5:aa:87:02:3e:ba:2f:11:3b:09:0e:9f:ac:b5:
62:4d:71:4e:33:b2:52:8e:e8:9b:5d:75:9b:92:f8:34:e8:13:
86:84:54:23:1e:a9:d8:e0:56:08:29:fd:ad:c2:14:4a:a3:54:
fa:33:0d:ac:bf:88:2b:59:cd:57:04:93:9c:07:8d:d6:00:80:
a6:bf:34:16:9b:1c:68:71:ca:9a:ed:96:54:16:86:79:d1:c6:
d5:c8:66:7b:49:8f:d1:d9:54:41:d6:38:12:d6:e0:80:e4:13:
8d:ff:08:c1:f2:c6:95:70:ac:a0:4d:51:12:5e:7e:25:4c:76:
d6:65:4a:01:3a:e9:80:c0:15:59:b7:93:3b:0d:e5:2a:ca:63:
9a:dc:63:1d:95:73:10:fa:71:a0:3a:23:02:ef:d9:64:f2:84:
13:45:88:3a
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZQjaZ5Yi5NvoMM//+SPYr8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmQ0NDkxOWZkZDA4YWZiOWE0ZDBhODc3ODkyMzAxMTI1MWRkN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhWZo0Hp2gh8yxV8K/+XSjBoP1Pa
krvG+uI2fF8fOUTH2g2NPjWqtgFW4OuKFkYgZngjCl0uC8tj3WV7AO9rfgW67Xta
BCMTa75oH9JmyZc6AnQDthU7LIaMyqMpejgL3g83qs2ZuuRiLb/VMQa1Pn98k2al
QxAPubxtATrz1lPP/hjnTsTHwllslgR8JvT/NKS0+LzZea1yqzwzk1znfRfIsWFh
bDnBfUL7GfKQdSjVcqwq+vFCu7iFmwbZcDj6rnJN5NT8eiA1mMfm/nCbzXz4jkik
AeiCMvSWGMO/d6aye1jsrypHrUOEUO0AXddaqsPl4r3iQPu5z6z/uXid1wIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFDLUSRn90Ir7mk0Kh3iSMBElHdfwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2ZkMjI5
NC1jZjM3LTRmYzktOWVkZC1hNGY3YjA4OGJjMWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZmQyMjk0
LWNmMzctNGZjOS05ZWRkLWE0ZjdiMDg4YmMxYS8xL010UkpHZjNRaXZ1YVRRcUhl
Skl3RVNVZDFfQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF
BwEHAQH/BDYwNDAyBAIAATAsMAwDBAC5BZEDBAC5BZIDBALBjoQDBALB5EgDBALC
IZwDBALCIoADBALCbjAwDQYJKoZIhvcNAQELBQADggEBAE9gC2JKVgUv1vPnAmTI
SzFejCGv6nhQ8pgB9LQwatTu4dWbuih2Mm8PewjRnJF+NshlWGRubuX9hE1COPzT
PZSpVfBB6/f1Jhn8RvxPxsrOjb9sJkfuJY/TfpERqQWlqocCProvETsJDp+stWJN
cU4zslKO6JtddZuS+DToE4aEVCMeqdjgVggp/a3CFEqjVPozDay/iCtZzVcEk5wH
jdYAgKa/NBabHGhxyprtllQWhnnRxtXIZntJj9HZVEHWOBLW4IDkE43/CMHyxpVw
rKBNURJefiVMdtZlSgE66YDAFVm3kzsN5SrKY5rcYx2VcxD6caA6IwLv2WTyhBNF
iDo=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:24 2025 by rpki-client