Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer (raw, json)
Hash identifier: l+SwemNh7dYNLw0yjDB5p/pXZB0Mz4E6bItlQfwt0Ao=
Subject key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214459C83A3A95888F8BD60FB6BBA9A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39228
IP: 81.21.48.0/20
IP: 2a02:24c8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:59:c8:3a:3a:95:88:8f:8b:d6:0f:b6:bb:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:a0:ae:b6:43:83:3f:c6:12:7a:33:c8:00:
7b:a6:3e:15:0c:26:c4:17:37:db:f3:24:07:19:cd:
cc:54:63:3e:ec:06:6a:07:40:ec:d0:48:e3:7c:61:
62:e8:f8:9b:44:1f:d6:0e:a8:e8:b5:77:f0:ff:d7:
49:14:ce:4f:3f:ea:c1:a1:6d:b2:67:b0:c8:bb:e7:
05:26:44:be:f0:5f:19:bf:30:5d:a8:a5:9f:6b:08:
d6:22:70:b3:ec:5b:3d:e2:2e:8e:8b:66:25:39:71:
b7:8e:fe:d3:d8:cb:de:22:f2:a9:45:92:76:85:0a:
3c:ca:55:9e:46:f4:93:db:56:2f:d9:96:a5:27:13:
5e:aa:84:39:5c:2e:e0:fe:d7:31:2d:7e:ca:16:8e:
63:2c:74:10:99:95:1a:d3:0c:11:85:db:a6:90:26:
38:7a:9c:7e:bc:34:78:2e:a7:fd:8d:33:38:4f:2a:
f8:f8:a4:da:0c:92:1a:e8:05:f2:a5:8d:67:74:ac:
c8:86:92:d8:04:b0:54:4d:d4:7a:2c:91:d1:6e:9a:
81:b6:79:b4:c3:f5:8c:f8:28:e8:31:cc:3d:65:fe:
d7:9f:fa:c3:22:51:90:c7:a2:98:a3:51:89:d1:9c:
2f:50:dc:b4:81:8c:77:4b:b2:2c:b4:ec:06:2a:e5:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.48.0/20
IPv6:
2a02:24c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39228
Signature Algorithm: sha256WithRSAEncryption
99:c9:2c:83:59:13:0e:84:76:53:22:29:e3:ad:87:95:56:63:
5d:e1:1c:ad:12:1d:82:61:37:4c:7a:f2:b5:ae:6b:d9:6a:c0:
f9:ce:f5:bf:8e:44:5b:91:1a:02:bf:3c:9d:55:da:f0:2d:88:
e1:3d:f3:d9:9d:7c:81:03:22:73:2f:1a:8f:83:6c:9b:4b:0b:
98:3d:53:8f:82:76:7d:4a:f7:75:6f:82:97:84:cc:32:13:00:
f5:c9:3c:a3:da:11:01:e2:19:04:9c:09:c5:3b:a0:7e:99:b3:
30:5c:a4:99:04:d1:df:95:e4:24:18:2d:8a:5a:63:7b:db:eb:
ed:23:9c:30:b9:7a:3d:04:77:8c:00:45:9d:fd:72:ea:9d:80:
a5:c7:50:b0:7f:c5:f9:20:c1:de:7e:ed:a7:fd:07:5a:42:15:
44:0f:63:36:eb:45:9f:a1:fd:ad:a6:6e:97:bc:d9:82:13:3e:
7e:0c:85:16:d9:db:16:fc:5e:57:37:ab:df:c9:21:f9:62:fc:
ea:e9:b3:55:9a:42:a4:54:00:02:fc:8f:62:2c:6e:40:e2:4a:
ce:ea:ba:3b:ec:77:04:fc:20:c9:ff:f8:ac:05:48:d4:42:0c:
c4:49:77:30:f9:0c:7f:2c:b2:05:c9:1f:d5:5e:ef:69:94:18:
bf:94:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:57 2025 by rpki-client