Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
File: mmwLn7E_QxbtbKP4b_xxhcCds9c.cer (raw, json)
Hash identifier: U2vFQLBTVPKn2UC2bGW+ovgfsKsC/xvgbJysvfsxwAY=
Subject key identifier: 9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143931D247F1E8A55819AA804A72056
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198134
IP: 193.161.193.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:93:1d:24:7f:1e:8a:55:81:9a:a8:04:a7:20:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:bb:0e:36:c8:10:36:8a:e6:ae:67:11:86:
9d:f4:7c:0b:b0:9a:88:11:b0:9c:9b:d1:25:83:71:
c8:04:f1:3d:ef:e4:e5:39:50:f6:1e:77:ab:99:89:
12:14:6d:26:e9:56:df:c4:89:e2:75:d2:47:05:fe:
93:bc:21:2f:50:8c:72:59:31:cf:85:c5:47:42:1a:
b9:e3:10:43:09:6b:55:3c:87:31:a4:b6:f9:22:88:
b7:a3:95:0d:bb:dc:fd:4e:23:98:05:15:26:7e:2c:
9d:ca:8c:1b:32:d1:a0:5d:ea:b7:17:eb:70:c6:25:
3f:2e:c8:24:ac:4c:22:6f:f9:f8:0c:d3:29:f9:00:
2d:c5:6f:fe:1f:00:2d:6e:e7:0e:c6:35:22:5e:61:
cb:9b:c8:1b:01:8e:42:ef:e3:3f:2a:97:64:3c:4e:
c0:de:58:9e:6c:db:33:ed:6a:fb:43:f8:06:43:1e:
c2:9c:72:58:bd:ba:ba:96:f7:af:30:1a:2f:30:97:
85:df:35:d6:94:18:cf:7f:45:e3:3b:15:2a:c8:3f:
ee:3e:d2:34:f0:46:28:ca:2a:bd:04:9d:a6:cf:75:
9e:dd:7a:5a:79:a8:97:e6:1d:f9:a9:c3:af:f3:59:
12:67:9a:18:0d:03:2f:97:9d:67:1d:6d:3f:99:83:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.193.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198134
Signature Algorithm: sha256WithRSAEncryption
07:6c:92:ce:a8:df:c7:17:a2:96:d6:74:7d:78:0f:a0:02:3c:
7c:ef:ab:ce:c2:aa:6d:8c:f2:47:1d:52:32:be:3b:73:bc:ab:
75:05:27:47:b6:b7:02:6d:49:4c:87:03:b2:31:20:bb:f3:09:
7c:63:61:2b:e2:0f:08:c9:23:5c:21:6c:b2:f5:55:b0:f1:a7:
00:83:c4:ae:ee:56:89:3e:d1:c0:62:0e:bf:ae:5c:df:ca:df:
7c:bb:9f:8b:ac:9c:eb:5b:ea:28:03:62:01:ec:ee:87:ea:7d:
de:ed:a4:55:72:c1:42:c6:71:31:6b:d8:82:5b:fa:f5:37:e4:
55:49:68:b5:e5:cd:08:a4:0d:cc:e4:48:c8:e9:65:cb:da:aa:
e3:21:d7:c0:06:c0:d5:db:06:68:74:6f:a8:59:be:ed:8e:17:
f8:9f:41:b9:92:a2:5f:3b:40:8f:44:0f:b1:f5:5d:88:e7:d8:
5c:b5:4d:3f:83:b8:17:48:29:fd:3d:e7:9f:49:97:3c:8a:55:
27:6a:1c:ff:81:97:6d:3c:43:db:c9:35:30:b4:d1:f8:c0:e4:
45:f0:85:30:46:b1:62:4c:c8:7e:49:16:05:15:0e:f8:a3:0a:
2c:bd:03:1d:35:5c:e5:db:a0:20:d0:39:b6:9f:fb:f7:b7:51:
2a:59:49:9f
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQhQ5MdJH8eilWBmqgEpyBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTZjMGI5ZmIxM2Y0MzE2ZWQ2Y2EzZjg2ZmZjNzE4NWMwOWRiM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3be7DjbIEDaK5q5nEYad9HwLsJqI
EbCcm9Elg3HIBPE97+TlOVD2HnermYkSFG0m6VbfxIniddJHBf6TvCEvUIxyWTHP
hcVHQhq54xBDCWtVPIcxpLb5Ioi3o5UNu9z9TiOYBRUmfiydyowbMtGgXeq3F+tw
xiU/LsgkrEwib/n4DNMp+QAtxW/+HwAtbucOxjUiXmHLm8gbAY5C7+M/KpdkPE7A
3liebNsz7Wr7Q/gGQx7CnHJYvbq6lvevMBovMJeF3zXWlBjPf0XjOxUqyD/uPtI0
8EYoyiq9BJ2mz3We3XpaeaiX5h35qcOv81kSZ5oYDQMvl51nHW0/mYMxOQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJpsC5+xP0MW7Wyj+G/8cYXAnbPXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzUwYTIz
OS1kNWJjLTQyZmUtOTVhNS0xYWMwOGU4YThjYjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNTBhMjM5
LWQ1YmMtNDJmZS05NWE1LTFhYzA4ZThhOGNiNC8xL21td0xuN0VfUXhidGJLUDRi
X3h4aGNDZHM5Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwaHBMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMF9jANBgkqhkiG9w0BAQsFAAOCAQEAB2ySzqjfxxeiltZ0fXgPoAI8fO+rzsKq
bYzyRx1SMr47c7yrdQUnR7a3Am1JTIcDsjEgu/MJfGNhK+IPCMkjXCFssvVVsPGn
AIPEru5WiT7RwGIOv65c38rffLufi6yc61vqKANiAezuh+p93u2kVXLBQsZxMWvY
glv69TfkVUloteXNCKQNzORIyOlly9qq4yHXwAbA1dsGaHRvqFm+7Y4X+J9BuZKi
XztAj0QPsfVdiOfYXLVNP4O4F0gp/T3nn0mXPIpVJ2oc/4GXbTxD28k1MLTR+MDk
RfCFMEaxYkzIfkkWBRUO+KMKLL0DHTVc5dugINA5tp/797dRKllJnw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:27 2025 by rpki-client