Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MbJkCvbPqWJrb5JqWvH7pqzuBlw.cer
File: MbJkCvbPqWJrb5JqWvH7pqzuBlw.cer (raw, json)
Hash identifier: 8kVWT2ThYlGVbka5Rch00qQ24GyYJH/2BgkumctDxm8=
Subject key identifier: 31:B2:64:0A:F6:CF:A9:62:6B:6F:92:6A:5A:F1:FB:A6:AC:EE:06:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A55B7E6D9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/269683-b473-4506-8882-ddd451ff42b4/1/MbJkCvbPqWJrb5JqWvH7pqzuBlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/269683-b473-4506-8882-ddd451ff42b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:00:59 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 194.104.97.0 -- 194.104.98.255
IP: 194.104.112.0/24
IP: 194.104.126.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710204616090 (0xa55b7e6d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31b2640af6cfa9626b6f926a5af1fba6acee065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:13:ea:1c:0f:38:de:fd:55:35:c6:94:f8:
8f:cf:4b:8c:ef:6c:e7:ad:1b:34:5f:30:56:ad:d3:
cd:20:5b:89:47:91:61:07:e4:88:39:83:bc:20:0f:
18:2f:88:48:19:47:d3:66:f3:8c:ed:ac:44:3a:85:
6e:56:09:bc:88:b5:ed:1f:61:9e:96:42:e0:63:43:
85:aa:f9:42:b1:65:16:1e:72:0c:61:f0:6d:9d:3a:
fd:fa:8e:ad:c8:71:70:7d:43:0e:87:74:6a:0c:a9:
91:6a:8d:d3:a1:07:4f:7c:67:10:3c:59:14:e3:ec:
28:92:1e:c3:19:a0:90:c5:a3:08:67:61:10:fa:57:
f8:5e:e9:73:08:1c:08:2d:6a:45:c4:a8:fa:c0:0c:
ac:ba:68:1c:eb:aa:32:7e:f0:12:ff:d3:b7:10:ae:
cf:01:c7:04:78:9d:16:5b:00:79:9f:d0:76:a9:e0:
f8:5a:a2:72:55:a4:d3:b0:3c:22:8a:ab:54:15:a6:
aa:08:ed:ab:10:3b:13:94:28:c9:3a:0b:d9:70:46:
34:6d:d8:04:b8:b9:8f:86:69:93:0c:43:81:f4:da:
88:1c:d5:d5:cd:c2:07:45:01:1e:e8:25:30:a3:59:
b7:98:24:41:55:3c:55:55:a1:d8:d7:9b:e7:62:ba:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B2:64:0A:F6:CF:A9:62:6B:6F:92:6A:5A:F1:FB:A6:AC:EE:06:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269683-b473-4506-8882-ddd451ff42b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269683-b473-4506-8882-ddd451ff42b4/1/MbJkCvbPqWJrb5JqWvH7pqzuBlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.97.0-194.104.98.255
194.104.112.0/24
194.104.126.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7a:75:0d:f6:17:c0:cc:df:ff:3e:bb:cc:cd:43:21:d3:f4:
6c:74:46:36:17:de:89:77:77:b2:ed:ff:65:e5:96:cb:c1:97:
9b:3b:06:73:69:e5:5d:83:e2:71:91:38:b3:1f:b6:42:43:9a:
2d:73:f4:bb:f1:fb:66:f7:d5:46:54:09:cf:d2:75:78:e6:81:
66:2c:f7:e9:cf:52:4a:23:91:8e:9f:8a:09:0e:e3:31:4e:f6:
de:e3:31:89:c2:dc:1b:4c:de:78:26:33:63:73:29:de:75:be:
4e:85:f1:db:77:dd:21:f6:b4:67:81:7e:79:87:70:4b:9b:37:
c2:42:5d:1d:06:1a:e1:d6:e7:02:c6:35:04:7e:75:1d:5b:88:
ef:45:70:61:0d:32:65:23:cd:46:fd:15:b5:30:82:c9:18:55:
5d:15:bf:52:82:81:d6:3d:82:d9:32:88:0a:1f:29:fb:28:9b:
9c:bd:d1:6a:c6:5c:52:d2:44:34:ca:7b:8e:e6:93:bf:33:77:
31:31:5d:a2:e1:ee:13:45:12:89:76:67:f8:c0:9c:22:95:18:
23:bd:64:bf:e9:a0:d3:18:a1:12:5a:52:d9:e0:bf:25:1e:ce:
73:ad:64:bc:4c:0b:cd:a1:58:b8:49:44:2d:84:8c:3e:ae:ae:
72:b0:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:21 2025 by rpki-client