Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
File: G5gPIqWVKk75pOxKng0MNR_slFQ.cer (raw, json)
Hash identifier: OUkNQgvJneqcV4IMQ/7Oa4enRcTFR2Gr3LkXcsGSfas=
Subject key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3BDAE05F1EA0BBDBB9D83AF5B3CD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25560
IP: 62.216.160.0/19
IP: 85.199.128.0/18
IP: 95.143.160.0/20
IP: 147.78.108.0/22
IP: 217.24.208.0/20
IP: 2001:1a50::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bd:ae:05:f1:ea:0b:bd:bb:9d:83:af:5b:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:41:f4:ac:e5:94:81:2f:72:0e:7c:4f:6c:
f0:c9:df:78:2e:76:cb:ed:ec:d2:4d:f1:ad:1f:7d:
7c:9a:92:db:c1:97:60:45:5c:2d:64:13:69:2c:3e:
9f:71:94:77:44:ae:ff:55:33:e1:4c:d3:69:a4:12:
87:5e:cd:e8:c0:6d:8c:0a:57:33:c7:fd:f4:5b:f5:
a3:a5:34:9a:72:e4:fa:6b:fe:ff:1e:bc:e8:0c:08:
37:44:24:76:01:2a:0d:92:ef:f1:49:34:ed:89:4a:
af:17:2f:27:93:7d:54:de:e2:0d:af:12:f3:f5:39:
f8:4d:2e:ba:ef:20:ef:b4:27:75:c1:65:e5:79:92:
45:d2:5d:a4:7f:3f:34:06:40:06:a9:dd:21:24:ea:
6e:35:68:e0:a5:17:c4:88:69:bd:37:56:3e:93:21:
f3:b8:9b:2a:15:7e:cb:76:f8:37:9d:c7:1e:27:c1:
be:71:75:9e:51:af:c4:bc:07:31:1e:75:e2:d3:21:
19:9d:93:e2:0f:b1:56:92:86:8d:28:22:50:6c:08:
94:73:78:b3:07:fe:9b:c3:c6:64:41:8f:f3:f0:e1:
67:f2:ef:7a:ac:3c:e3:f4:d9:0f:60:67:be:19:d0:
1c:e4:bb:68:45:07:54:8f:d0:5f:f7:71:24:fa:f7:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.160.0/19
85.199.128.0/18
95.143.160.0/20
147.78.108.0/22
217.24.208.0/20
IPv6:
2001:1a50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25560
Signature Algorithm: sha256WithRSAEncryption
12:1f:96:58:ec:9c:9e:42:80:30:c3:01:b8:ae:79:24:27:89:
5f:27:ab:5a:b2:e3:2d:f4:d1:f7:49:4c:1a:b2:9a:07:3e:91:
c5:17:d3:da:34:be:6f:bb:b6:60:62:dd:f5:2c:98:cf:72:8a:
12:ce:61:10:a2:66:f0:eb:62:db:14:b0:ea:55:f0:6a:b8:9e:
fc:ca:9f:b9:8c:cc:48:d4:d4:18:a2:79:a3:48:65:0b:41:d0:
64:7e:9e:df:a1:0b:33:b8:29:38:f0:d4:d8:5c:25:9a:b9:45:
fc:e4:0b:7f:9c:97:8e:54:85:b3:e2:f6:de:c1:4c:2c:3f:16:
5f:77:ac:32:33:a7:50:3e:fa:10:0d:f6:57:45:ee:30:a1:41:
7f:c4:a1:fe:2b:48:f4:b1:ff:f3:9a:e9:cc:f5:95:68:25:76:
fc:33:39:9f:7e:b6:b6:19:f1:4e:97:de:e3:41:81:27:81:0a:
05:e2:d2:9c:0d:fa:94:ea:27:c3:93:8d:62:60:12:78:36:0c:
d2:78:8a:c1:0d:60:57:a6:2e:3f:86:09:fe:fe:59:86:81:e5:
85:57:14:c4:87:0a:5d:80:2a:98:a5:45:f5:f7:0f:0c:5e:2b:
40:97:05:95:91:09:b1:cb:08:4a:60:f5:67:1d:57:c5:1a:98:
0c:fd:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:09 2025 by rpki-client on console.sobornost.net