Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.cer (raw, json)
Hash identifier: DJcTtJYSRLI7JZbNa/rOu4frd9GTZhUK9ND1V9kkwnM=
Subject key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424449390DED35D70B1071AEDBEFE9D66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43713
IP: 91.198.119.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:93:90:de:d3:5d:70:b1:07:1a:ed:be:fe:9d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:2d:9b:c2:01:5f:95:18:6a:b7:dc:cc:a2:
fb:03:3c:95:23:aa:40:9c:10:2a:a6:ed:6d:3d:a2:
94:57:e1:df:65:35:0a:d9:18:14:95:b9:b1:72:55:
73:df:8c:20:c1:f1:61:d0:59:e2:bc:46:15:3b:4b:
f6:db:4c:b7:a7:25:f1:80:9b:7a:41:ea:f6:5e:24:
a5:7a:f2:77:2d:24:45:85:e0:3f:1b:1a:ac:48:70:
d8:9d:fa:a3:09:4d:a3:6a:99:be:11:9c:ea:72:7a:
eb:c0:45:b2:a9:3b:2c:52:6f:de:97:0f:fc:dd:84:
6f:fe:42:aa:da:54:58:d6:95:f6:de:f1:13:9c:93:
3e:a6:6b:e6:f0:21:3a:00:9d:ae:6d:a1:b4:18:63:
3f:52:5b:ec:80:9b:f2:13:2a:d9:24:96:76:b4:13:
54:1c:87:44:e1:c1:36:29:68:20:9c:b1:a6:aa:a2:
25:e0:fb:56:08:f8:cc:11:6d:d3:5d:2f:65:5c:8b:
49:cc:6a:d2:9e:0e:f4:d7:3b:78:67:86:dc:7f:3c:
05:43:54:66:f6:d7:ab:f5:a4:52:81:2a:4e:f9:95:
e3:44:d9:35:49:52:72:cf:66:34:d9:03:7a:9e:23:
4c:93:71:0e:9d:8c:b5:ef:cc:2b:f9:13:ff:2a:1c:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.119.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43713
Signature Algorithm: sha256WithRSAEncryption
28:b4:8e:e9:a4:7e:1a:72:de:58:75:4d:27:18:54:28:58:26:
3c:f7:9e:e7:85:06:ca:e8:77:9f:bd:84:6c:bc:78:98:63:37:
a8:8d:40:71:af:4d:e8:16:f3:d0:f6:c8:ea:5f:48:0a:d4:dd:
11:e9:20:23:89:d1:af:ab:f4:ac:4a:df:17:51:97:6c:2b:32:
e3:39:6d:52:12:b4:d0:a9:a2:3f:7e:97:f2:4b:da:28:73:08:
5d:b8:4f:06:1a:db:90:a9:04:90:0d:36:f0:2c:3b:6f:16:03:
29:6c:79:65:d5:cd:01:63:b3:51:96:96:b7:e1:83:d3:c8:0c:
12:9e:68:ef:7d:9a:03:9e:64:77:85:a0:ea:d0:e3:6c:14:52:
28:cd:63:69:18:a3:c7:cc:0c:1a:cb:a3:79:53:b0:bf:79:ad:
69:20:d3:50:62:bc:90:6a:83:af:ed:9e:0a:04:90:aa:f1:13:
ba:c1:57:8d:57:cb:31:08:b6:12:65:cf:bb:5f:3a:f4:bd:79:
43:c2:d2:3d:fb:d0:0a:77:69:b7:72:7f:eb:15:06:11:36:5d:
f1:0f:d1:4d:e7:5f:5a:d1:71:b5:c8:1b:bf:6b:27:1f:23:0b:
52:65:21:f7:80:4c:2c:1e:f4:46:01:8e:76:19:84:03:42:2c:
21:f4:78:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:34 2025 by rpki-client