Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer (raw, json)
Hash identifier: 8IARcbNheMol9FjTOHc2J1THhQ6HU4gVFrn2U1eSoyI=
Subject key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB6EBD548B201670F9E1C15B70DE35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43210
IP: 195.95.179.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6e:bd:54:8b:20:16:70:f9:e1:c1:5b:70:de:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9944078b40772b172c7046e7446204980ceae139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:60:4e:87:09:f5:1d:57:aa:5c:f1:9b:ec:
6f:c4:3b:69:68:de:5e:bf:97:ad:59:f9:50:9c:36:
b6:b5:b3:2a:e6:9c:53:18:7d:f2:21:ea:f0:57:0b:
d0:5f:42:47:aa:01:14:53:56:41:30:e1:7a:36:e5:
23:8c:08:51:0b:99:c2:ba:cb:ae:22:dd:21:e7:ca:
fa:fa:f2:c8:02:18:c0:22:84:14:50:da:c3:d6:10:
b7:89:d8:6a:ea:ae:18:ad:f2:2b:aa:0b:2f:ed:9e:
68:40:13:24:f4:b0:44:b2:09:bb:2e:bf:fa:c3:ba:
47:83:f0:f3:3d:c6:d5:81:7e:f6:34:a8:0f:e2:51:
8b:af:27:d5:63:f1:b4:f6:c4:bd:2b:90:67:7c:34:
f7:d5:ad:7f:df:3f:14:e5:1f:8c:ba:d3:45:76:5b:
0f:bc:db:61:72:35:3d:29:3d:50:d2:41:19:82:a4:
81:df:99:b8:44:b4:f5:20:5a:a5:17:dd:a0:60:07:
e0:fa:bb:37:11:e7:5a:a4:4a:60:02:d1:d0:75:68:
10:3f:12:88:16:52:dd:e6:8d:0a:70:02:9d:9b:33:
99:50:b9:a5:63:9a:11:a3:f8:cd:6a:a5:3f:ca:1f:
3b:9c:27:39:0c:50:c2:ce:72:aa:d0:6a:96:c7:48:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.179.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43210
Signature Algorithm: sha256WithRSAEncryption
78:3b:fc:cb:91:be:1c:97:50:77:9d:7d:64:46:ca:60:e5:6e:
2a:41:6a:a3:fd:1f:61:54:0b:ef:50:7c:d3:2a:6f:f5:18:d2:
cc:81:73:b0:dd:f1:c7:c0:88:09:3c:b6:92:a2:b3:d6:81:3b:
15:77:5d:c7:ba:82:93:12:ec:8b:61:56:95:4b:f8:e9:13:dc:
b2:04:fb:1e:b9:a0:19:29:cb:ad:60:d2:d7:d9:90:20:1b:52:
03:39:55:7c:d7:bf:88:7d:2d:4d:3f:2b:41:51:f0:c2:60:37:
a3:15:a8:93:b8:4d:d3:bb:e2:e5:ab:d5:3b:e8:5d:d9:7b:81:
14:81:b2:e2:59:6d:17:0d:07:47:fd:f1:0d:ce:b1:d8:eb:52:
31:38:53:85:64:f3:da:5f:64:6c:3f:b3:cc:fc:10:58:81:66:
44:9e:db:dc:a6:c2:7e:73:2f:c1:7f:86:12:37:75:05:24:02:
03:20:45:d5:94:95:42:71:82:8d:d2:fe:10:73:ac:3e:ae:72:
6b:d8:d0:bc:0c:ff:58:bd:4d:d3:7a:3f:a3:e6:b2:c1:dc:7d:
be:e1:fc:b6:89:0c:e5:b0:e0:7c:98:7f:bc:c5:8e:35:6d:5d:
b2:43:7c:0f:24:e0:1a:c7:0e:93:5d:70:40:7d:5f:49:0c:9d:
e3:00:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:10 2025 by rpki-client