Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer (raw, json)
Hash identifier: 20SOhMpMuBM/ZZKTiMDgZ6SLKML+FxXPhxFFhZY/pPc=
Subject key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428263A1A0C23186785FA4C5FAB3F491E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208757
IP: 45.86.48.0/22
IP: 45.95.72.0/22
IP: 45.158.200.0/22
IP: 2a0e:d980::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:3a:1a:0c:23:18:67:85:fa:4c:5f:ab:3f:49:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988296c50d94bbed225f2867231fa5093debea91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:9e:cb:1d:b7:89:3d:39:43:e9:b3:19:ed:
ce:cd:e9:96:ec:1c:c2:ea:7b:98:78:9e:fd:4a:1d:
0e:db:7c:7e:e0:2a:db:dc:58:76:cc:6c:eb:e8:62:
d3:b0:1f:4e:4c:a1:7d:7d:73:43:2b:f6:df:85:64:
01:41:b0:67:d6:51:69:d7:57:df:ad:25:c5:ac:67:
1d:79:11:62:a2:66:05:2b:a9:56:9c:0a:56:ca:69:
e3:d2:cd:73:2f:5a:8e:c2:de:16:2d:b4:da:8b:17:
f0:be:b0:9a:0c:6a:e8:b9:13:6b:9d:71:5d:23:38:
ab:94:ab:2c:8c:53:28:47:35:40:0e:b4:54:e5:18:
b4:29:ea:82:24:1f:ad:67:98:86:01:41:af:3e:ee:
3b:99:d7:e6:83:ba:88:31:cc:c9:f7:05:b8:34:4f:
39:a4:20:51:06:76:33:2b:9b:18:a5:39:72:24:06:
0a:a2:de:6e:c8:bf:51:1b:ba:24:0c:ae:7d:34:9a:
8f:0e:ed:6d:89:ea:fa:ca:48:b1:db:51:ea:00:16:
1f:fe:bc:10:6c:84:f9:52:f3:a8:ce:d3:a3:0c:f3:
d2:f6:58:5f:2f:29:20:d6:b0:26:25:f3:82:c8:b3:
2e:cd:38:05:1f:09:23:41:65:26:4e:66:ea:86:4b:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.48.0/22
45.95.72.0/22
45.158.200.0/22
IPv6:
2a0e:d980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208757
Signature Algorithm: sha256WithRSAEncryption
11:db:b1:0a:a4:bb:9a:8b:2c:6f:c2:0c:a3:16:01:c9:7d:ab:
40:5e:21:d4:f0:17:f4:01:d6:d3:00:23:6e:e7:23:49:d2:c0:
b0:fa:24:7f:4b:d6:37:33:e8:59:91:96:9e:0e:dc:1a:c4:33:
17:84:91:dc:bc:19:82:37:b2:7d:47:d7:12:f7:3b:df:cf:34:
b1:2e:65:25:79:e1:79:41:dc:1e:3f:50:af:be:df:9a:4b:c2:
9c:5e:68:22:af:00:2b:6b:d1:4d:9b:7e:f3:6a:33:99:a1:d7:
19:04:f4:76:55:3d:fa:fd:3c:e4:e3:80:6d:ee:76:ca:87:d0:
e4:20:26:20:24:df:d0:0c:68:eb:74:13:f0:62:ed:50:62:77:
7b:88:e5:44:e5:72:21:23:17:26:c8:29:d9:9a:5d:7e:dc:7a:
49:f1:7b:82:52:36:3a:0b:e5:21:dd:a8:b0:80:eb:39:44:25:
ea:e8:1a:71:71:f8:91:65:5a:c3:f1:3b:b6:cc:a6:2f:2e:53:
02:be:55:4b:47:90:75:1d:a8:b7:bb:28:fd:51:96:16:14:28:
2f:f6:60:b2:93:b6:41:a2:38:fa:0e:7a:9c:30:23:48:be:eb:
b7:d7:72:12:0b:e5:c5:fd:d5:2a:2f:dd:4e:0d:1c:21:5a:cf:
29:2f:1b:b1
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQoJjoaDCMYZ4X6TF+rP0keMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MzAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODgyOTZjNTBkOTRiYmVkMjI1ZjI4NjcyMzFmYTUwOTNkZWJlYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAmeyx23iT05Q+mzGe3OzemW7BzC
6nuYeJ79Sh0O23x+4Crb3Fh2zGzr6GLTsB9OTKF9fXNDK/bfhWQBQbBn1lFp11ff
rSXFrGcdeRFiomYFK6lWnApWymnj0s1zL1qOwt4WLbTaixfwvrCaDGrouRNrnXFd
IzirlKssjFMoRzVADrRU5Ri0KeqCJB+tZ5iGAUGvPu47mdfmg7qIMczJ9wW4NE85
pCBRBnYzK5sYpTlyJAYKot5uyL9RG7okDK59NJqPDu1tier6ykix21HqABYf/rwQ
bIT5UvOoztOjDPPS9lhfLykg1rAmJfOCyLMuzTgFHwkjQWUmTmbqhktNawIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFJiClsUNlLvtIl8oZyMfpQk96+qRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2Y3NjBk
MC0yZjY3LTQzMDctOWYwYy0zOTkzYjUwYjIwNjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZjc2MGQw
LTJmNjctNDMwNy05ZjBjLTM5OTNiNTBiMjA2NC8xL21JS1d4UTJVdS0waVh5aG5J
eC1sQ1QzcjZwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCLVYwAwQCLV9IAwQCLZ7IMA0EAgACMAcDBQMq
DtmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvdTANBgkqhkiG9w0BAQsFAAOC
AQEAEduxCqS7mossb8IMoxYByX2rQF4h1PAX9AHW0wAjbucjSdLAsPokf0vWNzPo
WZGWng7cGsQzF4SR3LwZgjeyfUfXEvc73880sS5lJXnheUHcHj9Qr77fmkvCnF5o
Iq8AK2vRTZt+82ozmaHXGQT0dlU9+v085OOAbe52yofQ5CAmICTf0Axo63QT8GLt
UGJ3e4jlROVyISMXJsgp2Zpdftx6SfF7glI2OgvlId2osIDrOUQl6ugacXH4kWVa
w/E7tsymLy5TAr5VS0eQdR2ot7so/VGWFhQoL/ZgspO2QaI4+g56nDAjSL7rt9dy
Egvlxf3VKi/dTg0cIVrPKS8bsQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:48:21 2025 by rpki-client