Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
File: mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer (raw, json)
Hash identifier: iOi32iXqWQE2rXaWVB+jUcyN2tUtI4+BFBud/blu1fI=
Subject key identifier: 99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01864B1608301884977B6F0C0EDB1B9D78ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 13 Feb 2023 14:03:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199899
IP: 193.162.133.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:16:08:30:18:84:97:7b:6f:0c:0e:db:1b:9d:78:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 14:03:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:b0:be:ed:4e:51:28:97:8e:74:06:b0:dd:
c2:8b:2e:b6:ef:c5:3b:b2:c3:87:2f:35:1e:fe:3f:
c7:86:e2:d7:92:2b:e6:0e:94:43:c0:09:3f:6f:2c:
9e:fe:61:2e:04:59:ea:94:b4:f7:e2:de:57:d1:f4:
72:95:29:49:d3:f1:6d:a3:a6:03:56:9a:13:71:49:
bd:0a:13:17:93:4e:6e:fd:2f:af:bf:16:43:a3:62:
67:3b:bb:34:d5:37:2d:05:09:1e:22:b0:c9:5d:29:
65:ac:d3:43:ac:19:1e:10:d1:5c:ab:b0:ad:ba:03:
d5:e6:4a:65:0b:7f:dc:0c:86:e9:da:33:a1:f0:5c:
be:2c:ae:00:8a:05:6b:df:cc:a6:03:a5:28:7b:9c:
99:88:ed:52:2b:ff:42:80:5f:40:87:b1:7c:e5:5b:
cb:7b:58:7c:0a:a9:af:5c:c9:d6:d9:41:74:38:f2:
e7:eb:8d:8a:4e:a6:ff:9d:d1:81:c1:e3:1f:9b:7b:
c9:af:78:27:e2:8b:a0:8a:f7:c3:6a:47:86:56:d0:
9e:f1:02:2b:49:2d:9d:c0:5c:59:46:20:75:4d:91:
22:53:4e:9f:74:92:50:5c:c1:62:b6:24:75:0c:65:
89:f8:31:9a:9e:d8:79:10:58:82:76:d0:40:93:f1:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.133.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199899
Signature Algorithm: sha256WithRSAEncryption
2e:44:24:b6:ce:17:f1:60:1d:cc:95:5f:f3:a4:9f:74:b2:8b:
15:a6:77:40:b8:2d:b1:81:8f:66:70:87:e0:5d:f2:2b:1c:bc:
f1:bc:91:72:35:da:51:47:86:66:a5:40:65:8b:06:04:b1:f2:
00:18:c6:6e:f6:92:55:9a:fe:79:b3:6a:06:ea:42:6a:f8:c2:
e5:de:3a:1d:dd:80:4d:d2:78:49:a2:70:18:df:03:f9:8d:62:
b1:df:47:9b:08:c1:20:55:03:7f:3d:49:23:57:d1:39:0e:dd:
fc:b0:e9:71:6b:92:9a:b4:ee:1e:30:7a:ca:29:d6:7b:92:16:
33:7c:8a:c5:b8:07:39:fb:54:d3:10:75:5b:a8:a5:10:6e:63:
3e:69:7a:d3:03:a1:e6:3b:0c:67:23:3a:e0:e8:60:de:2d:0f:
f2:bb:c2:d7:64:9f:38:22:77:06:fd:13:ac:61:6e:f5:20:e0:
c0:84:a8:7e:ab:5f:4b:9b:08:90:6b:1c:2a:57:81:80:9f:55:
5a:67:7a:30:11:1e:e8:82:05:e3:31:67:d6:e2:bd:d9:56:5f:
21:5f:ff:47:59:59:c3:cc:d3:5e:1c:1c:6d:d9:80:31:df:53:
43:a2:a7:59:b6:d6:00:df:3f:df:7e:74:29:7b:d8:3b:1f:04:
2b:d4:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:21 2025 by rpki-client