Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.cer (raw, json)
Hash identifier: q/0IvOGjq60BWBFInOpN/hi8LMn1vcgCGv+56NRRC8k=
Subject key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252232B09C277914A0FFF76FC134FFBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208423 -- 208424
AS: 208984
AS: 210272
IP: 5.102.44.0/22
IP: 2a13:3780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:b0:9c:27:79:14:a0:ff:f7:6f:c1:34:ff:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ce77f7d916513b84914849950fe43f55694fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:b7:01:e0:7c:d0:d4:32:0d:cf:df:3c:77:
b4:21:3e:90:d4:4f:b8:26:80:50:83:5b:0d:9b:37:
1a:e2:f0:3f:5b:24:24:5a:37:ab:4f:01:a2:68:28:
1f:74:90:a8:cb:1b:7b:77:f6:6c:7e:ee:41:5b:b6:
b1:e0:a3:27:79:c0:7b:cf:06:d6:3d:65:f9:97:00:
22:3c:77:55:58:36:04:89:2b:c3:9f:b0:85:44:28:
d8:44:5b:87:0d:e0:7f:a2:51:fd:75:2f:45:aa:e4:
27:aa:f8:e5:40:72:20:bf:f3:58:ac:86:e4:e6:fb:
7f:f7:2a:09:69:03:68:26:c0:b4:15:b3:fe:66:ce:
7c:03:c9:e5:8d:28:15:b1:1e:bd:b5:0f:a0:9e:44:
02:81:00:a1:e6:8e:ba:e2:e4:38:a6:0f:7a:ca:9e:
a6:ba:8f:a3:f8:16:1e:40:ba:f2:a6:21:cc:19:b3:
09:68:50:0e:91:80:dd:04:08:46:d2:0b:93:8c:32:
7e:5c:88:12:e8:ea:99:ff:66:77:25:8d:77:a4:34:
0d:ed:6b:f1:b4:d7:9f:a8:c3:72:e1:48:12:24:58:
f1:65:37:72:ac:c2:ea:1f:8a:a9:9d:1d:fd:39:d1:
df:46:0c:d4:d0:27:1b:c6:41:dc:5d:8c:3f:cb:c4:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.44.0/22
IPv6:
2a13:3780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208423-208424
208984
210272
Signature Algorithm: sha256WithRSAEncryption
08:9a:28:27:13:af:ef:eb:bd:18:2a:f8:96:fa:63:88:d2:48:
ca:71:a0:46:c4:93:62:6b:f4:c0:6c:6a:fe:2e:de:a8:fc:df:
cf:e6:f5:ff:b8:a0:fb:ce:52:35:7e:66:76:81:51:5f:20:37:
23:d6:02:bd:db:96:45:47:9e:e1:49:b6:f9:a1:3e:27:fd:08:
4a:fc:00:0a:d0:48:2c:58:a3:66:52:4a:36:c6:dc:69:ff:dd:
14:bc:fb:4c:18:26:2b:77:41:05:5c:26:75:d4:f1:e7:a4:82:
39:26:86:88:01:4b:77:7a:d3:1d:7e:7d:17:2e:be:62:4f:a4:
83:d3:2e:f3:0c:72:df:50:46:c2:d7:b5:ac:d2:21:e7:83:f4:
bb:63:c6:09:25:13:fc:92:1e:04:6c:d3:41:0a:c1:d5:fa:82:
e9:23:56:88:ee:26:65:bb:66:d0:b8:5e:0c:5e:d9:63:35:19:
00:cb:3c:ee:4a:1e:29:48:7c:d8:c9:d3:47:13:ef:43:db:90:
24:fa:54:7d:58:ab:85:39:25:d4:dc:6a:22:57:6e:88:7a:ef:
0f:6e:0a:89:85:0b:f6:4a:a0:d9:08:a5:85:af:7e:03:7a:5f:
b4:2b:62:58:1b:aa:4c:0e:f4:3a:ce:ef:f8:cb:a7:53:b9:68:
ff:16:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:10 2025 by rpki-client