Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer (raw, json)
Hash identifier: v59A+jCUikzY4oZNw+kuRDazLPxo8DOaj2SRrUPB+8o=
Subject key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194282317918B0063798111775F0315CB70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202623
AS: 203898
IP: 141.101.64.0/18
IP: 185.122.0.0/22
IP: 188.114.96.0/20
IP: 2a06:98c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:17:91:8b:00:63:79:81:11:77:5f:03:15:cb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:5a:88:27:85:28:9f:58:18:13:c7:96:4c:
ee:99:c5:ca:d6:52:98:36:32:a2:a0:73:be:f6:ec:
68:1b:a3:c2:a0:1f:6b:a7:7b:0d:3e:bf:64:70:53:
a8:53:c7:ed:ec:92:a3:e5:5b:91:51:60:13:4b:c8:
5f:ce:06:83:fa:ac:14:f4:1d:49:b9:7f:b9:ca:e6:
e2:55:7b:76:29:f3:72:4a:9c:17:df:00:03:b9:3d:
0e:1f:c9:0b:71:fa:12:79:42:1e:bf:a3:f3:4f:09:
d1:e1:97:98:a4:8c:c3:c5:f1:5b:27:e2:13:29:d9:
68:26:76:c7:9e:78:00:59:72:99:80:52:c1:4c:c8:
37:c3:c6:c3:6b:92:ba:f1:ba:e7:6c:a3:f2:d2:d8:
da:36:0b:8a:8e:fa:b9:4d:bd:fc:67:b7:fd:65:fd:
f9:d6:5b:08:62:b1:ae:4b:46:12:91:70:75:1a:02:
52:6c:57:63:50:16:f4:ec:d7:06:b5:c8:72:35:3a:
37:74:4d:5c:a5:83:d2:24:92:b7:34:01:b1:15:d3:
2b:03:b2:f5:1c:af:c2:af:68:e9:41:68:6e:bd:8c:
5a:a3:2a:f2:5b:0d:ec:ea:c5:06:27:eb:aa:f8:43:
8a:b2:d7:6b:d6:23:84:96:99:e8:c9:f9:65:ef:ce:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.64.0/18
185.122.0.0/22
188.114.96.0/20
IPv6:
2a06:98c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202623
203898
Signature Algorithm: sha256WithRSAEncryption
0f:ff:32:f5:11:23:bf:c4:45:2f:e9:86:e7:e0:1b:87:9f:af:
18:a4:5e:03:35:6e:d2:94:5e:be:21:da:1f:78:0d:45:7f:65:
1f:77:e9:01:a2:53:5c:bc:1c:ca:06:85:90:1e:ca:16:74:ae:
45:df:f7:e3:a5:c7:3b:3f:76:29:a5:c3:69:0e:30:7d:ad:50:
01:f6:df:d6:1c:d3:2e:5e:7c:e0:2c:3e:3f:ca:11:c8:83:12:
d8:ca:72:77:c2:ff:08:63:e9:9e:77:68:80:1a:76:ac:0e:d4:
95:93:ac:4e:0e:34:bd:8f:17:13:e2:fc:40:f2:ff:11:7c:99:
de:74:07:d1:dc:0c:a1:62:61:b0:28:be:4d:59:6b:20:da:31:
ac:b1:e0:48:e2:f6:39:22:29:cd:aa:b3:21:bf:ea:73:7d:52:
05:9a:b6:98:f8:ff:31:39:70:9a:5a:c9:e6:57:11:14:a7:04:
88:84:64:33:63:f9:1f:2e:cf:a0:c2:72:79:ac:9f:bd:bb:01:
18:5b:88:ad:54:9b:db:d0:cf:c1:66:94:30:e0:9c:ba:40:00:
79:8c:0c:71:62:16:3e:13:c6:32:ef:02:d5:5d:38:69:30:64:
c1:49:53:25:e8:a4:6f:49:38:0a:64:ac:91:57:30:3f:3f:46:
22:9b:7d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:25 2025 by rpki-client