
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
File: MMQJYT_qCitELOES6cvbSF4BGI8.cer (raw, json)
Hash identifier: R4OOk/O6wLR2mrugqm2dkyfN8IuxOPRXy5p2k96zcoI=
Subject key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143AFCEA1E15AC4064E811E2FC10B44
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 1887
AS: 8308
AS: 15606
AS: 59832
AS: 204679
AS: 211155
AS: 211655
AS: 212422
IP: 148.81.0.0/16
IP: 192.102.225.0/24
IP: 192.195.72.0/24
IP: 193.59.0.0/16
IP: 194.181.0.0/16
IP: 195.164.0.0/16
IP: 195.187.0.0/16
IP: 217.9.160.0/19
IP: 2001:7f9::/48
IP: 2001:7f9:c::/48
IP: 2001:a10::/29
IP: 2a00:1488::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:af:ce:a1:e1:5a:c4:06:4e:81:1e:2f:c1:0b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:4a:cb:0c:e2:c4:a6:5d:17:78:0c:d5:1c:
91:07:65:7d:ad:94:33:06:08:20:14:2c:b2:8e:40:
97:d4:fb:b0:03:ab:4f:7c:ac:d6:ff:15:ff:f7:32:
ac:33:b9:76:04:a1:63:d1:b8:48:73:f9:26:95:7f:
6f:b4:68:74:10:33:7d:86:12:1a:bf:50:90:df:be:
1a:12:10:d0:63:64:c7:a9:82:27:cd:96:2e:c8:4c:
af:9b:11:5e:41:a0:b1:0c:66:d2:0f:c4:1d:d9:48:
e8:b8:d2:cd:f9:93:25:8c:b1:cd:b6:89:3e:6c:25:
8d:20:53:1a:d3:46:26:a2:06:1b:12:0e:76:43:b0:
9a:46:1d:a6:39:d3:c6:0b:13:73:43:91:f5:db:a0:
e3:57:0c:4e:56:f0:22:d3:3c:c3:08:d1:2c:a0:dc:
45:00:a2:66:de:3e:42:83:cf:a1:c8:64:d5:ab:25:
6a:d2:36:79:bb:65:32:36:26:1e:14:c3:65:89:df:
9d:75:c9:3a:2e:5e:13:26:8d:ae:17:88:cb:35:45:
52:9f:96:9a:07:9d:0a:d3:8e:0e:c2:52:7b:58:0f:
9a:33:56:eb:ac:ea:30:c1:b9:37:ca:f5:3e:50:f5:
c7:21:88:5f:83:50:60:2e:ab:71:bb:51:80:36:f6:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.0.0/16
192.102.225.0/24
192.195.72.0/24
193.59.0.0/16
194.181.0.0/16
195.164.0.0/16
195.187.0.0/16
217.9.160.0/19
IPv6:
2001:7f9::/48
2001:7f9:c::/48
2001:a10::/29
2a00:1488::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1887
8308
15606
59832
204679
211155
211655
212422
Signature Algorithm: sha256WithRSAEncryption
98:67:10:29:cb:16:14:f9:bd:d5:c9:e4:d9:38:1c:61:24:ce:
5b:2a:f8:6a:f3:7b:06:8e:16:f9:71:2a:8d:65:6b:24:2e:29:
79:0a:62:1c:21:3d:af:79:cd:f8:1f:62:2e:df:6a:42:45:c1:
fc:15:0d:8b:25:4c:08:61:63:c4:eb:cc:ae:46:ad:73:c6:42:
9b:cc:95:62:25:87:68:26:ad:83:4e:6f:c6:db:46:2b:9f:05:
30:87:db:db:19:59:8a:8b:e8:af:e1:6b:ef:9b:dc:5f:71:f6:
11:5b:55:7e:01:9c:93:37:95:90:10:d2:90:a3:62:4f:9d:77:
4d:da:bf:2e:9c:47:25:1e:95:26:74:ca:ab:80:11:5a:ff:e2:
c8:e7:63:ca:8a:43:28:13:b5:8d:32:4b:86:1b:5a:d2:28:55:
ba:4b:e4:d8:0b:7b:94:31:39:7f:ad:07:e1:dc:40:03:f8:e8:
76:5d:d6:05:a7:c8:f7:68:1e:a3:91:21:ef:44:e7:b5:17:b2:
a2:17:b1:dd:34:e1:cb:1a:f2:cc:6c:6e:c5:1b:a4:69:b3:bb:
86:50:8d:1e:2b:94:77:cb:20:4a:6f:18:76:f1:ad:5d:9e:e5:
29:f7:f5:ed:3a:de:88:a8:30:d1:11:be:a7:d4:44:bd:7f:68:
e1:f5:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:24 2025 by rpki-client on console.sobornost.net