Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
File: MzBvg92caNG7WukbUMJukpyB0v0.cer (raw, json)
Hash identifier: vF7qTJl0IqhhWkQ4U5AvWBfgOc1c8D6OS/ZJDtB8aAo=
Subject key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195D2884C7B91662ED2422AE665AB77DA29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 26 Mar 2025 12:58:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a14:b580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:88:4c:7b:91:66:2e:d2:42:2a:e6:65:ab:77:da:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 12:58:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:20:e5:5b:c0:8c:88:96:bf:47:c0:47:c4:
31:d0:66:52:a4:79:94:a4:c3:80:75:d0:8c:da:6f:
61:cf:d8:0e:24:9e:2e:c3:c2:4c:a0:a7:e5:3c:90:
5d:1b:15:91:84:e6:ee:3e:e0:ee:0d:4f:cb:93:ee:
d0:0f:3a:26:c3:fd:ac:0f:02:4f:6a:c6:47:0b:0d:
a5:8b:d2:9e:7d:2e:d2:e4:73:68:68:83:28:bc:2f:
34:87:03:fd:93:89:48:71:f3:5c:2e:88:a4:aa:d4:
38:3e:b4:66:e9:eb:f5:d0:cd:9a:35:2a:6d:60:46:
a2:5a:af:1d:d7:42:ab:56:f9:c5:48:37:6d:01:f7:
a6:ad:00:99:f0:2a:3c:a1:68:8b:d9:c8:c4:c8:e9:
cf:3d:79:5d:b0:1e:ec:34:98:5f:b4:72:b7:59:a0:
3c:e4:c7:ea:d0:63:8c:c7:5d:1c:25:b2:46:6e:97:
05:35:a2:89:a1:e9:fd:55:4f:62:3a:be:36:40:3b:
52:91:89:f8:3f:f7:2f:cb:43:f3:92:36:b8:8f:43:
9b:ee:85:d2:0b:d8:cb:c2:7c:ed:e2:aa:cd:3c:b7:
88:7a:c0:de:10:60:0a:f6:72:d2:25:a2:54:ab:63:
86:a6:70:3e:61:72:3c:3a:79:f7:86:72:09:99:3f:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b580::/29
Signature Algorithm: sha256WithRSAEncryption
87:8e:19:17:9e:b5:3b:7f:70:66:90:b6:3f:59:71:9d:27:46:
11:2d:10:24:33:52:d8:d1:8f:7a:92:9b:81:f8:24:69:b6:95:
1c:da:d7:1c:c1:96:cc:83:f1:1c:af:d4:9a:05:6a:4f:29:81:
47:c9:cb:bc:7a:65:50:8e:52:49:f9:1d:fc:58:63:bd:f5:24:
81:0d:d5:d6:9e:41:b0:45:d9:c7:2a:5d:ca:68:fc:05:f6:76:
d1:79:6a:4a:98:8c:23:92:1a:f2:2f:66:fd:94:29:01:31:fc:
f7:7f:a2:62:11:43:71:4a:7b:71:13:41:20:b9:39:36:77:80:
26:24:7b:e3:5f:0d:6d:e7:1f:17:3c:81:0a:b4:93:44:28:77:
45:b8:e8:72:6c:02:e3:40:cc:9c:18:ad:15:9e:88:74:ad:4d:
90:41:d3:ec:b3:9e:b0:1a:66:eb:a9:f3:ef:ee:89:28:f6:28:
52:30:04:3e:bf:75:6c:b9:63:24:27:4d:23:2a:07:ac:c3:35:
63:54:81:78:b1:73:36:ab:ea:66:a0:cb:4f:9b:da:ca:1a:bd:
66:2b:d4:21:36:93:95:2a:02:cc:e1:6c:01:f1:07:3f:61:8f:
2f:68:11:f2:05:81:aa:c1:ec:5b:a1:71:82:42:c7:75:8f:4e:
34:46:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:09:59 2025 by rpki-client