Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer
File: MsAbG4QPOM4GcfccO0cn6B9porc.cer (raw, json)
Hash identifier: QKtocFCFP+o9r/xs9txsZ/VVvqq5Sq4/AIf5/z2WUN4=
Subject key identifier: 32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A25AFC8A37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:54:01 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.157.168.0/22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697311201847 (0xa25afc8a37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:97:35:33:8a:8a:ac:3b:03:10:0e:4e:40:
4e:0c:f6:d4:6a:77:f1:40:77:eb:70:60:a8:ed:66:
28:05:ff:2c:7b:d9:80:2e:e3:a2:ac:35:44:8e:99:
25:93:22:3c:ba:f6:b2:26:e7:44:5d:95:24:4b:b4:
7e:57:e1:e3:54:9d:93:1e:1d:9b:bf:7a:a2:4b:4c:
a6:14:2f:36:37:fe:85:13:da:34:1e:fa:e2:ab:d6:
f1:91:ed:9e:bd:e4:f3:bc:55:92:00:93:77:fd:d8:
a2:10:ba:d1:ac:bf:62:22:fa:3b:f7:b3:26:54:db:
bf:8c:cb:70:5e:37:31:1c:2a:30:4f:af:5a:a0:ff:
d8:4a:68:56:f6:c2:91:d2:21:fe:bf:ca:49:59:f5:
92:80:2d:e3:93:03:f5:f5:56:d5:4e:af:54:fa:6e:
d6:75:ff:92:28:37:f7:47:15:16:06:2d:b3:3b:2b:
b7:b9:b9:b9:1d:8c:fb:3a:bc:8e:c4:9c:10:1a:5d:
be:aa:04:34:4e:62:1e:13:9e:f9:55:1d:cb:ed:12:
61:ac:4e:4a:fb:ca:ac:0b:a4:70:e1:b1:60:5e:87:
0f:69:e4:2c:ab:5b:8e:16:87:64:44:8a:a0:a4:8f:
34:ed:4e:4e:6a:f0:b9:be:26:42:fe:5b:b7:2d:23:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.168.0/22
Signature Algorithm: sha256WithRSAEncryption
08:bd:a3:d0:75:21:91:1a:c3:16:54:eb:ba:f3:06:ae:93:27:
ff:33:b4:22:69:aa:ff:72:75:dd:df:6a:05:f4:20:25:97:b2:
f7:a9:62:07:8b:59:6c:da:c1:d0:8b:e3:75:e1:d6:1d:bd:36:
8e:e2:02:35:21:b6:7e:67:91:39:ce:61:aa:d3:ad:68:8d:d8:
48:a7:09:7d:96:b9:b9:8b:a7:bc:43:08:3f:98:e1:7d:f2:03:
4f:64:d0:c5:7a:69:70:b6:ba:5c:e5:ed:10:d0:ee:94:cd:02:
7e:f0:f2:31:cf:9f:01:d3:2d:49:6d:44:e9:98:6e:a2:22:23:
ef:fd:12:4d:09:67:fc:79:f6:35:d6:cb:b3:e6:a0:75:b1:63:
a4:c6:fb:ea:b3:c9:1d:fb:9b:bc:12:ca:1d:0d:0f:6f:2b:d8:
96:7b:53:20:fe:2c:d5:04:07:4f:a1:dc:04:92:ef:3b:25:c4:
27:2a:e2:9d:b1:1a:77:ca:f4:5f:63:5d:da:f4:bb:2d:f5:a6:
3d:ca:8d:d9:51:1d:88:bc:97:11:31:26:fd:2f:d3:57:17:4c:
ef:91:17:61:dd:9b:c0:d3:a6:94:ad:b7:2f:e8:9e:07:78:9f:
22:43:a1:a0:e6:12:ab:5f:59:b8:98:fa:4a:ad:83:5f:61:6d:
e3:46:6d:58
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKJa/Io3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDg1NDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzMmMwMWIxYjg0
MGYzOGNlMDY3MWY3MWMzYjQ3MjdlODFmNjlhMmI3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAq8aXNTOKiqw7AxAOTkBODPbUanfxQHfrcGCo7WYoBf8s
e9mALuOirDVEjpklkyI8uvayJudEXZUkS7R+V+HjVJ2THh2bv3qiS0ymFC82N/6F
E9o0Hvriq9bxke2eveTzvFWSAJN3/diiELrRrL9iIvo797MmVNu/jMtwXjcxHCow
T69aoP/YSmhW9sKR0iH+v8pJWfWSgC3jkwP19VbVTq9U+m7Wdf+SKDf3RxUWBi2z
Oyu3ubm5HYz7OryOxJwQGl2+qgQ0TmIeE575VR3L7RJhrE5K+8qsC6Rw4bFgXocP
aeQsq1uOFodkRIqgpI807U5OavC5viZC/lu3LSPkvQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFDLAGxuEDzjOBnH3HDtHJ+gfaaK3MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzJmYzQxZS05OGNlLTQwNWYt
OGIzMC0xNzNjYTA3M2UzNzEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMmZjNDFlLTk4Y2UtNDA1Zi04
YjMwLTE3M2NhMDczZTM3MS8xL01zQWJHNFFQT000R2NmY2NPMGNuNkI5cG9yYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZ2oMA0GCSqGSIb3DQEBCwUAA4IBAQAIvaPQdSGRGsMWVOu68wau
kyf/M7Qiaar/cnXd32oF9CAll7L3qWIHi1ls2sHQi+N14dYdvTaO4gI1IbZ+Z5E5
zmGq061ojdhIpwl9lrm5i6e8Qwg/mOF98gNPZNDFemlwtrpc5e0Q0O6UzQJ+8PIx
z58B0y1JbUTpmG6iIiPv/RJNCWf8efY11suz5qB1sWOkxvvqs8kd+5u8EsodDQ9v
K9iWe1Mg/izVBAdPodwEku87JcQnKuKdsRp3yvRfY13a9Lst9aY9yo3ZUR2IvJcR
MSb9L9NXF0zvkRdh3ZvA06aUrbcv6J4HeJ8iQ6Gg5hKrX1m4mPpKrYNfYW3jRm1Y
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:04 2025 by rpki-client