Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.cer (raw, json)
Hash identifier: jc+3+0u1f+96Mh/+ciFPTAyh1Pl27TKQMvsBQLqK+gQ=
Subject key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444D68DCAB03BC2F07BB003B7B361DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.56.88.0/22
IP: 2a10:f700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d6:8d:ca:b0:3b:c2:f0:7b:b0:03:b7:b3:61:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:52:12:a5:a3:d6:07:52:59:d0:e7:11:4e:
c2:6a:a4:77:82:a8:16:d2:25:c6:af:46:73:7e:cc:
b5:10:ec:4f:bb:b3:b6:54:64:51:41:4d:7c:6e:61:
a6:aa:a3:14:f3:b4:1f:54:ee:0c:a8:0a:a3:ab:ea:
e1:40:06:9d:40:e1:91:cf:72:96:8a:28:a2:f6:69:
68:1f:a2:94:70:9c:2b:0f:d8:d7:2c:22:04:8f:a7:
bf:b1:85:a1:5a:08:50:ba:76:15:bc:00:ad:bc:83:
ce:a0:d1:2e:4b:ee:28:15:19:9a:6c:bf:a9:c9:16:
70:68:03:a7:ed:b4:d2:06:73:da:6c:92:12:dd:17:
c4:d3:cb:da:73:43:05:06:8b:a7:93:08:67:ad:7a:
91:c2:75:52:c2:d8:c0:6f:9c:4f:5b:61:9f:98:28:
b9:48:5c:0a:38:a1:f3:01:53:fd:98:be:b2:fe:bc:
fe:8b:a3:2f:f9:8a:01:f7:ad:a7:55:1f:8e:94:98:
fc:aa:ba:89:80:1c:03:8a:56:00:b7:7c:d4:94:29:
1d:83:b1:59:7f:a9:c4:d2:50:9a:d8:90:fd:2f:d9:
43:7b:16:53:b8:5a:e2:2f:51:2e:2f:33:11:22:65:
50:d0:5a:76:9e:db:c3:9b:2b:ae:0d:bb:dd:67:f1:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.88.0/22
IPv6:
2a10:f700::/29
Signature Algorithm: sha256WithRSAEncryption
5a:16:c9:69:cb:91:a2:5e:ca:36:91:49:08:82:06:94:e1:a9:
4a:08:97:68:f5:2d:b3:0f:e6:98:ec:4d:04:61:fb:d9:78:bf:
48:b5:cb:7c:64:35:b8:1f:72:36:c6:6e:75:40:5f:d7:9f:c2:
e9:52:30:96:ec:9f:49:71:bb:f6:af:e5:73:97:05:47:39:21:
5e:bb:47:f8:a6:0b:25:33:bc:48:b9:80:04:19:17:3c:b1:30:
cf:9c:04:6c:e0:1a:9e:18:7d:fe:aa:1c:c5:fc:97:c6:3e:4d:
6b:f5:02:f2:a8:03:a2:2a:33:99:6e:2e:6b:6e:ca:be:35:da:
e0:88:cc:aa:1a:fc:16:88:81:b5:25:9e:02:b3:54:6d:d6:00:
95:e3:af:f8:cd:06:26:61:1a:72:8b:0e:f8:05:2a:56:5b:c2:
e9:ec:1f:95:4a:ec:f3:c9:3c:04:94:61:3b:32:0b:79:ac:26:
ea:71:b0:39:28:6e:28:18:ac:62:31:3a:88:37:bf:c8:78:74:
b2:dc:19:e2:96:b9:c8:90:b6:1a:93:18:04:b0:8d:48:ae:4f:
55:1e:39:dd:2a:3e:19:ce:ec:aa:41:9b:9e:fa:45:18:19:ab:
bf:96:80:8c:ba:30:31:89:be:40:5a:82:52:7d:d6:e3:4c:07:
3a:8d:0e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:09 2025 by rpki-client on console.sobornost.net