Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer (raw, json)
Hash identifier: gjrl41fXnZZ07DBfTYkK0iZaL3SoPSfk8N8nvXNz35w=
Subject key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC0693ADE4BDB590E8223C512C8D79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34092
AS: 57033
AS: 60860
IP: 5.56.24.0/21
IP: 81.22.128.0/20
IP: 89.185.0.0/19
IP: 93.185.208.0/20
IP: 109.72.112.0/20
IP: 185.30.200.0/22
IP: 2a04:4c40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:06:93:ad:e4:bd:b5:90:e8:22:3c:51:2c:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:10:16:c4:9c:e6:3a:8d:cf:f6:38:d7:2c:
14:a6:63:92:43:43:e4:ff:0d:a0:86:21:9f:86:64:
6e:c7:9a:49:d3:b3:41:d7:a1:aa:0c:1a:d8:ca:0f:
b8:c6:83:ed:1c:cc:f4:ce:f8:fb:59:14:1f:c8:12:
47:60:62:81:9c:70:64:cb:41:1c:bf:ce:22:ce:e7:
cd:54:eb:e9:7d:db:c9:09:2e:58:28:47:6a:ce:30:
79:8e:d3:71:39:d7:76:0e:e9:24:83:5c:f2:d6:00:
09:68:b1:f4:9c:8b:c1:25:66:6c:3d:0d:28:6e:48:
e1:91:ea:f6:8b:a1:d0:a3:14:a4:4e:79:88:3e:66:
31:5d:4c:92:d0:a9:7c:8c:37:cb:f7:1e:1d:17:b5:
fc:aa:11:49:a0:ce:db:17:64:f6:de:0d:2c:c1:07:
51:62:58:35:a6:93:7b:65:a3:23:49:6a:ec:3b:b4:
04:29:ad:f0:8e:96:da:65:d3:c7:0e:fa:e2:32:13:
49:03:48:5d:63:f5:e6:66:3a:f8:61:aa:f8:59:72:
ef:1a:74:e2:23:19:23:cc:d1:35:8e:50:57:79:75:
9d:e4:59:fb:86:36:0d:0d:86:67:db:07:4c:c5:36:
2a:e1:6c:fc:55:af:57:1a:d3:09:d1:96:cf:9b:ee:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.24.0/21
81.22.128.0/20
89.185.0.0/19
93.185.208.0/20
109.72.112.0/20
185.30.200.0/22
IPv6:
2a04:4c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34092
57033
60860
Signature Algorithm: sha256WithRSAEncryption
16:2b:51:db:83:c9:c0:c8:e3:77:f1:cf:f8:04:64:c3:ce:e8:
44:5f:9b:de:16:f6:7a:33:20:01:ec:aa:4d:37:38:1e:a8:f9:
73:f6:0c:34:f4:57:d4:7b:c3:6b:d4:6f:5e:77:ca:7d:4d:c2:
a6:7e:f9:3f:35:8b:30:27:8e:86:0f:c7:13:bb:70:f1:c3:ef:
d8:0a:0d:8f:dc:a4:0b:9b:22:19:b6:27:af:5d:5a:5c:8d:de:
83:b2:f5:30:c0:8b:f7:83:1a:43:82:4b:e1:1f:24:95:bd:7d:
fa:1f:67:af:54:b6:ec:a5:aa:22:cf:ce:83:c0:05:96:65:e1:
04:67:0d:e7:25:65:86:fb:6d:10:bb:ee:1d:4f:ad:60:04:0c:
85:39:e3:ae:62:46:14:32:50:4c:c6:1a:21:c7:47:a3:c1:4c:
d7:9d:d2:2d:57:b8:d0:9a:eb:e6:8d:47:53:1c:2b:a6:13:50:
f5:98:b5:eb:b4:0b:38:3b:a1:9d:5f:6b:c4:9e:e2:8f:08:96:
f7:e1:34:bb:29:2a:cc:1d:d6:18:10:9d:6d:dd:e6:e6:1f:80:
4d:03:f6:77:81:2f:af:ea:67:e5:ae:85:de:85:57:76:48:30:
3a:e1:f4:ff:3a:f3:00:d4:93:ea:8e:f1:36:88:e5:4a:3d:e4:
1c:b2:d8:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:54 2025 by rpki-client