Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer
File: GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer (raw, json)
Hash identifier: a1gbYUpS1mfqQ2RDCHeO6V+B4G7LXxkjJeFYetW8O2Y=
Subject key identifier: 18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D470FDC1E2F0469EEC3F5B047DD13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.175.56.0/21
IP: 91.233.26.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:47:0f:dc:1e:2f:04:69:ee:c3:f5:b0:47:dd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18c48d1b33abdead205b0a920fb333827e1ce150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:fe:f6:13:16:c9:14:88:6f:47:3f:10:a6:
69:aa:67:3a:bb:a5:a7:b9:a1:ce:8a:a8:19:42:c1:
14:a8:bd:7e:88:ba:8d:5b:37:d0:2f:8f:b0:ee:7b:
51:42:75:f2:2d:28:62:bb:bc:8e:b9:61:57:00:1e:
c0:00:fc:0d:90:17:cd:5a:90:9e:cf:eb:ba:c0:6c:
54:e8:e5:0d:e1:c4:08:19:ec:8b:8b:b0:20:dc:9a:
b6:bc:7a:18:23:fc:aa:5f:3f:a2:9d:e3:e5:1a:cb:
b9:9e:32:13:7d:6f:1b:93:86:d7:c0:60:44:7e:cb:
a9:37:ea:e4:2e:06:48:b7:d8:20:0f:6a:25:50:d5:
80:aa:cb:f2:77:8f:98:70:f6:2c:a0:4c:83:c1:59:
ff:51:cb:86:7b:5d:4d:7f:2c:eb:1e:b7:48:a4:38:
fc:47:a4:22:74:ce:e4:6b:2c:44:65:a5:a5:0d:d7:
25:cc:6e:11:03:7c:9d:5e:06:0b:8e:ac:ca:04:9e:
98:4f:78:78:83:80:08:cf:47:7f:cf:5d:52:56:24:
6a:91:41:18:b9:68:86:8a:c9:89:87:5e:75:9a:d2:
ee:cd:76:8c:fd:c5:2d:9b:7b:00:ee:f5:6f:79:b3:
e7:9f:9b:11:b4:e9:25:71:ff:e4:62:b5:ed:b1:b3:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.56.0/21
91.233.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:49:49:21:6a:89:16:10:e8:7c:36:25:f3:19:10:bd:7a:b8:
ca:70:62:c6:02:83:64:70:ac:3e:15:9b:34:48:3e:0d:d9:5e:
71:1d:8e:06:9a:00:c9:60:b6:de:7b:0d:98:74:db:0c:d9:1a:
c8:73:42:7a:a1:55:7c:f2:66:cd:ff:bd:07:a3:57:3c:8b:0d:
76:8e:25:e9:df:a0:68:46:62:c4:6d:d3:a9:8f:d1:11:51:0b:
7a:af:b4:68:5b:e8:e1:df:28:a7:d5:f3:05:00:4d:20:22:c9:
9b:e4:c2:6b:17:6d:8c:e1:05:89:d7:eb:59:de:68:11:74:e5:
34:dc:8e:7d:7c:a5:de:8e:9b:d5:92:bb:82:76:30:c9:ef:87:
f4:52:bf:ee:35:15:35:80:97:1e:92:10:e7:d1:12:72:98:e7:
ac:14:14:86:f7:88:b3:0d:e3:02:6f:f1:81:23:57:de:0c:63:
f6:dc:e1:5b:75:66:b4:5b:34:cf:13:0c:a5:63:4e:d8:cc:0a:
d7:1a:8e:67:39:a6:15:81:32:63:05:35:fd:2f:2f:e6:3e:cd:
66:00:88:b8:c7:47:72:dc:fe:c1:ce:35:aa:c5:c7:71:fb:0e:
39:75:66:c0:1d:7d:b9:d5:f8:b6:20:1a:36:54:33:cc:64:26:
8d:c2:b2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:14:53 2025 by rpki-client on console.sobornost.net