Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
File: G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer (raw, json)
Hash identifier: H1pH5voJP3N5jJxZAIz3xE0cAYfMHrDD8YZiPFRV96E=
Subject key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A1BC237D8AF62BAF5A5E6B67F1FBD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.15.237.0/24
IP: 194.39.120.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1b:c2:37:d8:af:62:ba:f5:a5:e6:b6:7f:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:81:b7:f9:a8:3c:22:d2:db:10:ed:d7:dd:
df:08:ab:99:d0:a8:65:28:e2:71:d0:b5:ed:e6:6b:
2e:56:0a:c7:88:21:44:7f:b5:58:2c:b2:3d:06:f9:
96:be:00:df:54:ac:ff:81:b5:f9:31:1a:90:cf:75:
fa:91:8c:2c:2f:9a:ec:4d:c0:ff:95:6c:95:76:95:
46:f2:92:41:49:38:c0:64:ac:f8:cc:24:73:a0:56:
eb:9b:ab:c2:30:cf:8a:28:b8:d6:29:66:dc:41:91:
66:e8:41:f1:e2:6b:ec:7c:cf:34:ab:65:b7:f4:06:
ff:84:d6:6f:7b:0f:ff:17:46:6c:2e:2a:21:2c:13:
58:5c:1f:a2:f2:6b:2f:7e:71:37:03:85:8f:33:a9:
48:25:84:bf:2b:b7:65:b5:cd:db:8e:3e:15:fc:a7:
64:26:7d:e7:31:f5:47:fb:c4:58:d1:ee:49:23:e5:
6d:b7:b4:80:8a:a2:c9:a4:f3:b9:23:74:08:9a:0e:
a3:12:d3:0f:8c:74:bd:c3:ed:4b:e7:82:73:af:99:
80:18:9f:c8:9c:82:f7:81:a2:2a:b2:05:8b:0c:b4:
87:8e:91:7f:4c:72:2d:1b:35:9c:89:cc:5b:81:fc:
9e:fc:6a:2d:a7:62:b2:2f:d5:c9:cd:c0:7a:b0:3a:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.237.0/24
194.39.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ce:dd:fe:8b:40:1c:56:29:35:77:4e:10:53:af:4f:51:47:
6d:75:c8:0d:58:d3:6f:1a:12:ff:58:bf:4d:41:19:3a:db:2e:
2e:10:e2:db:ca:37:7f:c8:20:60:e2:66:a5:c2:5e:c0:e1:e8:
84:9f:3b:08:70:74:57:66:d8:d1:cc:1a:07:2f:79:80:d6:2b:
e7:d7:fc:09:5f:85:30:6b:9e:38:e4:c1:fa:b0:1a:e1:7e:84:
45:4d:57:de:44:ca:74:6b:3f:c0:b2:12:f3:dd:97:08:83:1f:
36:a2:a6:3c:af:41:14:90:8b:ab:b0:81:23:13:45:25:57:d1:
db:7c:c5:4c:b2:1a:c4:bd:0f:42:b5:74:fd:02:1c:a7:cf:0a:
59:90:6f:c0:5d:bd:04:38:56:a0:2c:3c:af:ab:c7:aa:ad:68:
3b:b5:cc:8b:db:c5:98:64:78:bb:ce:ca:92:20:4d:db:8b:c8:
e7:34:ad:e1:64:a7:33:98:40:d7:62:a9:ea:5a:16:92:b8:06:
c3:a1:91:ab:9c:59:e6:66:a9:b7:13:85:26:ea:25:88:62:2b:
56:5f:5f:f2:d2:44:39:d6:1f:4e:19:3e:3f:ad:86:a5:2c:be:
82:87:2e:14:00:43:3b:cd:94:a0:90:04:67:1e:55:f5:07:3a:
ae:aa:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:09 2025 by rpki-client on console.sobornost.net