Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
File: g4heOKx3ysBEgptTyzslq-Yen2Q.cer (raw, json)
Hash identifier: cg/GuXbkLGXLA7ZK7hPUm0WMrgcclI/EnmUZ+gPZQg0=
Subject key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D60A631DF5FF1BC5085941E814F818
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.142.129.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0a:63:1d:f5:ff:1b:c5:08:59:41:e8:14:f8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:06:4b:89:95:28:39:0f:72:95:95:b3:f4:
b5:39:d5:66:df:30:07:7e:46:ea:53:c1:79:be:c3:
cd:80:84:b3:58:53:4b:1a:08:63:09:26:87:2e:a5:
25:a4:ac:77:26:2a:68:5b:54:7d:d2:05:89:72:ef:
5f:8c:f5:e3:31:c5:5a:02:2c:6b:c6:50:58:85:d7:
41:76:45:0c:fb:9d:26:9a:b8:fd:2b:db:01:ca:91:
78:bb:dd:0e:c1:a2:66:92:fc:74:21:19:b6:51:c1:
01:ee:9f:04:cf:1a:3d:6f:cb:d5:8f:77:25:00:d1:
0e:01:54:44:22:bb:59:88:0b:d9:c5:bf:28:f9:1b:
da:c7:46:65:cc:34:31:90:42:5c:7a:9f:19:37:b3:
4d:d5:6b:31:25:25:9f:e0:6a:74:6f:5d:ee:31:cd:
22:f5:7b:ee:00:35:4a:54:75:b9:ed:1b:9e:0f:2e:
7e:26:80:f0:ae:ef:5a:e5:98:af:15:19:3c:fd:0d:
6e:98:a9:6a:56:72:e0:50:11:26:54:c4:31:cb:f8:
a1:03:c2:bc:45:7d:0e:b5:eb:77:25:2f:b8:62:a0:
e3:87:df:3a:59:02:5c:f8:1e:40:b4:45:ff:2a:4b:
61:e2:75:78:5d:92:3f:66:02:e4:db:ea:9c:cf:d3:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.129.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1b:50:f8:f1:92:03:6e:9f:df:85:ef:f0:ee:96:b1:4d:cc:
0d:8f:bd:1c:22:c8:02:4f:b6:75:95:1b:ea:0f:9e:62:55:c8:
58:e5:a4:e3:07:c3:e8:53:c4:a6:10:1a:9b:86:a7:6a:92:23:
e2:0a:78:21:f6:0d:fc:e9:c0:51:34:80:08:f6:03:5d:52:e7:
14:2c:6f:da:6f:dc:be:fe:c7:e7:ab:f0:62:ba:98:64:fe:ab:
b2:9c:86:7a:0a:68:de:29:d5:8d:40:08:fa:7c:c7:73:e6:7f:
5f:c8:98:d4:dd:43:50:53:26:ac:10:b9:a3:fd:3d:94:00:e0:
f7:8d:d6:03:8a:2e:df:3f:8c:97:80:25:be:a7:d5:da:fc:7d:
18:59:2b:bf:03:0b:89:0a:35:93:65:08:44:1f:a7:90:59:65:
01:6c:f5:4e:5d:94:de:5d:ab:ae:6d:a5:69:26:8c:e4:21:cd:
7c:cd:f3:8d:1d:37:9f:af:80:e9:de:e8:39:a9:43:18:e4:da:
b7:66:e3:9f:fb:3b:15:bf:a4:69:51:39:fa:eb:db:5e:8b:e1:
ea:89:10:0a:1f:73:26:3d:7f:99:8e:af:d4:2c:e0:71:48:8a:
cf:e3:8a:ca:15:d8:d6:5e:33:0d:71:85:fc:32:34:7f:4a:27:
f5:30:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:10 2025 by rpki-client on console.sobornost.net