Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer (raw, json)
Hash identifier: FJ8M2SYq6c5eW+KXNNUtBGsYgJQJHXGh8qEgX3D9q/s=
Subject key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DEA6992E6B43C074B84A1E0668C9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.96.138.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ea:69:92:e6:b4:3c:07:4b:84:a1:e0:66:8c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:87:7a:f1:10:c6:d8:59:7a:80:58:b2:36:
c3:24:76:22:f0:eb:17:40:9b:87:f3:86:9c:6a:10:
d1:68:08:40:21:95:5e:42:e3:5d:3d:6b:94:e1:06:
6c:e2:42:85:3f:bd:fa:a6:f0:8a:51:a2:ce:67:ee:
84:16:3c:ae:d3:58:a0:85:9f:3a:e6:dc:d0:11:aa:
75:d0:72:40:0c:ac:3b:cd:af:2b:74:20:98:a5:25:
57:cd:f4:6a:48:7e:83:76:8d:84:2a:91:90:5b:0e:
a6:35:8b:b0:c0:b9:87:9e:c0:e9:86:2b:05:be:36:
f5:00:09:de:c7:02:9f:ef:db:72:ed:3e:35:45:9a:
c8:bf:c6:d1:ef:79:12:8e:1a:73:8b:21:a4:e5:91:
58:87:9c:ff:92:58:b6:6e:b5:f5:6c:a4:3d:c7:d1:
25:80:a4:5f:57:13:a1:0e:8a:a9:21:c1:c6:27:26:
f7:1c:52:d9:c6:f4:91:5b:4a:92:51:7a:2a:08:82:
2a:b5:b5:26:4e:91:e1:1f:45:b0:ff:07:7c:7e:cb:
7a:a5:b4:e3:3c:72:f6:f9:7a:22:60:3f:9d:2f:88:
31:4e:77:ee:4c:48:d5:3d:d0:69:6a:2c:9d:00:0f:
71:e3:9f:e1:e3:62:11:cc:37:64:96:1e:63:9c:c7:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:18:c3:7e:d3:b3:58:e3:4f:90:b2:f7:d6:f9:e1:28:38:1d:
05:5e:4c:65:12:97:71:05:a6:3d:c0:02:6f:64:35:6d:e4:cc:
3d:16:15:fd:c1:46:f1:c7:25:7a:58:63:29:97:48:92:e6:e1:
b4:bb:41:6d:f8:a0:fe:6c:1e:c5:80:6a:ba:02:6f:a0:cb:d5:
1c:eb:b8:ee:b6:27:c2:52:64:ce:88:d6:ff:4d:ae:40:e7:7a:
ab:3b:9c:86:4a:c7:5a:f8:43:1c:cc:17:f1:5e:f8:36:c8:3f:
67:32:a0:f7:48:ce:4e:98:44:51:2c:1b:20:15:4d:d3:3e:54:
c1:97:99:66:97:41:1a:ea:67:a2:d2:a9:19:cc:21:e6:bb:f1:
d5:94:2f:03:e2:3f:16:d4:d6:df:fc:79:3f:56:84:a3:64:b9:
20:2f:4f:68:fb:dc:47:22:ad:c2:a7:09:cb:dc:cc:86:0e:7c:
3f:87:53:45:0b:85:3c:7e:c6:16:00:1a:70:6b:e5:b7:3f:d7:
83:08:92:09:13:f2:48:21:7f:94:36:ce:59:f3:ce:d8:b8:7f:
d8:4e:83:9d:e7:27:aa:02:26:2d:b6:42:47:e5:6c:27:6c:da:
b5:1e:4a:16:c9:d3:93:d9:84:1b:f3:fd:13:54:e7:5f:01:49:
61:f1:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:26 2025 by rpki-client