Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
File: MRhMnotqpAfA1z7QugYwdfYxTjY.cer (raw, json)
Hash identifier: U4Q3gESRTEioOGMKuN4FVgmi9aZBLgvGV0o7mKY5Yus=
Subject key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01951924722B2A019A3E16C8D190054A1AAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 12:59:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.95.217.0/24
IP: 89.107.13.0/24
IP: 2a13:f440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:24:72:2b:2a:01:9a:3e:16:c8:d1:90:05:4a:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 12:59:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:46:64:3f:fa:0c:cd:6c:82:d8:52:60:89:
55:44:6a:86:7f:2d:32:82:7f:7f:fd:ce:f4:81:a1:
2a:a4:7b:f6:29:3f:71:23:ad:ee:52:2e:67:f5:58:
a5:91:0d:b2:3f:57:8e:7e:00:cd:a8:1a:b4:c0:47:
ea:a8:2b:cd:d1:50:e1:ff:3b:8c:48:dc:09:c0:76:
a2:39:c2:55:7e:1b:59:04:2e:0e:56:29:46:d3:fd:
38:66:c9:88:cb:65:eb:a1:c2:dd:90:d9:66:b6:32:
0a:ad:13:28:07:37:51:2b:f0:b0:f2:0a:b4:05:ff:
b7:18:ba:6f:72:d1:e6:1d:5a:bf:51:eb:64:52:03:
21:9f:49:2d:01:f0:8a:1e:38:15:23:53:2f:ae:cb:
e1:d8:37:74:33:7e:e0:88:4b:c4:53:e6:2b:9d:c0:
f3:87:96:26:2a:87:90:a4:76:6b:ef:3e:25:a7:58:
37:d1:8a:da:6f:22:bc:09:95:97:15:d7:be:91:bd:
e4:02:f0:6b:6f:94:c9:d8:6b:0b:81:50:9f:9e:f7:
9f:18:eb:9a:4c:11:f8:d8:57:59:bc:56:15:35:bf:
f8:cc:84:0e:10:a1:da:0a:95:07:1e:cf:4b:f5:59:
dd:e0:ca:8b:56:1f:2a:b9:ea:01:c5:df:92:22:a1:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.217.0/24
89.107.13.0/24
IPv6:
2a13:f440::/29
Signature Algorithm: sha256WithRSAEncryption
a3:81:71:c1:75:7f:98:fe:b4:fa:e8:0b:55:28:3c:55:34:29:
48:e8:86:b0:7c:27:19:82:7b:5f:1b:83:de:33:c8:c1:49:d3:
38:21:8d:d6:82:d9:de:be:f0:11:73:1c:0d:59:a2:f3:9c:19:
d6:65:75:15:84:1d:04:25:e5:c3:ee:e5:56:de:51:1a:f7:bb:
3c:b0:c7:c0:bb:2a:35:5d:81:89:3b:6d:b1:e7:f5:c6:62:1e:
5a:a5:8e:92:ba:22:54:80:f7:2a:c6:25:45:66:2a:0f:5d:43:
82:7d:cd:fc:84:34:f4:d8:91:f9:7b:9c:02:c3:f8:d5:e4:37:
f6:86:12:b2:ff:4c:46:7f:57:ef:65:51:ca:e3:e1:f4:76:d2:
36:b9:8a:0d:e5:70:a2:9d:c5:1d:21:cf:ac:82:6d:fb:67:96:
c8:89:4a:72:29:65:cf:3e:bb:ef:9a:cf:41:2c:cc:40:99:6e:
69:00:8e:04:5a:c9:b6:45:45:c7:0d:c7:50:74:da:bd:c1:c5:
d6:29:7d:dc:38:67:84:20:72:6a:e3:66:f7:23:b2:19:5b:12:
76:c0:c6:5d:ee:9a:88:9b:dc:78:07:31:fc:a5:9c:1c:58:66:
d9:78:7b:3b:0e:b1:9e:f6:16:79:13:ec:a3:aa:a4:43:32:fd:
f2:7f:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:22:59 2025 by rpki-client