Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
File: m-CmEeBni40ynuVQMSskbg3PRpg.cer (raw, json)
Hash identifier: 7210D26xXss+HE8QhrfxIWuSCVyeRrR3WGVRPObxgcI=
Subject key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143B04D7E824E2F1FAED6D57DBE27B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6744
IP: 150.140.0.0/17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b0:4d:7e:82:4e:2f:1f:ae:d6:d5:7d:be:27:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:0f:87:97:96:9e:b7:a3:48:10:64:b7:e4:
a3:1e:0b:8d:e1:b9:ee:48:6d:81:45:19:e1:8a:e5:
9c:98:2a:64:c9:e7:cc:41:96:33:0d:e6:c7:67:51:
94:dd:33:09:37:a8:09:ac:35:0c:95:13:21:c9:33:
a1:db:bf:88:51:6d:d1:a1:ce:bd:bd:c7:46:b7:58:
29:0d:29:d2:6b:c3:a6:cb:ee:ff:4f:e6:3f:ed:4d:
a4:fd:21:d8:f8:e7:55:28:a3:fa:7e:30:1a:23:06:
a9:f8:aa:98:b2:a0:62:ab:0e:6b:94:23:41:ff:ba:
c9:a5:6d:49:62:05:92:02:50:ca:38:1e:95:7c:1b:
da:89:f6:13:8c:88:92:66:81:5e:ec:e1:b1:d8:72:
97:6d:b0:4e:dd:81:24:e7:d1:0f:a8:30:b9:52:54:
0b:12:9e:94:3e:f8:3c:83:04:a3:90:28:86:df:75:
f2:85:54:46:8b:6e:14:9c:43:ee:1a:17:d4:e7:9d:
d1:b4:2b:c6:d7:7f:2e:85:72:f7:37:39:09:97:9b:
3d:06:b2:ba:20:14:a9:7a:11:0f:d7:0f:c6:d2:d5:
20:03:8a:40:b9:d2:69:a1:ef:c6:fc:17:9d:e3:45:
c7:d4:60:ef:fe:4a:8c:42:3e:af:43:61:ec:b6:a4:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.140.0.0/17
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6744
Signature Algorithm: sha256WithRSAEncryption
4d:b2:ac:00:a2:aa:99:9e:8b:af:53:b5:c0:9c:f1:c7:1b:ca:
91:9e:c5:d3:cc:ad:6b:33:5a:4b:aa:6e:fb:6a:38:ce:e7:ab:
18:52:da:63:98:f3:eb:ea:01:5d:90:f5:92:32:4a:5b:91:4f:
94:ff:d3:39:d1:cd:ec:1e:59:45:be:ac:d9:76:6f:c5:0c:b9:
dc:c0:35:17:12:ff:cf:af:0c:23:16:aa:f7:77:9d:da:c1:c3:
3a:10:25:e4:2b:5d:88:bb:4d:ad:fb:8e:e4:fd:a8:c8:b4:1a:
e2:84:03:5a:2f:6e:7f:df:2a:17:8a:70:f5:4f:88:e5:58:4b:
fb:74:f1:3e:31:17:2e:9c:dd:a2:09:ae:87:c2:bf:f3:fa:c2:
40:6b:c7:71:86:75:1c:cd:c9:e8:ac:8f:5c:7e:54:62:0d:15:
82:7e:79:99:3c:51:4a:d0:0a:4a:90:0e:9f:06:fe:7d:cb:ed:
25:91:bf:83:f2:c8:de:5e:1f:da:2d:cb:02:57:7f:90:ce:3c:
8b:94:c0:03:2a:65:dc:36:c5:8c:cf:a6:8d:aa:ec:b1:17:ff:
83:97:1d:2a:a2:68:46:ab:d9:7d:cb:88:7d:e4:95:3f:be:ae:
78:c6:97:a4:b3:5c:40:b4:82:a0:f0:5e:b8:d3:9e:de:a7:5e:
f2:d4:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:39 2025 by rpki-client