
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
File: griIeR5H8Xu-ofUbnJdpd2JPBBw.cer (raw, json)
Hash identifier: tpuTp1qZA5SXSJX0iUy3COa95vht0JJzMuy5QSvHgvQ=
Subject key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5AFF9604FAE9611339CCA67062229
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199406
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:af:f9:60:4f:ae:96:11:33:9c:ca:67:06:22:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82b888791e47f17bbea1f51b9c976977624f041c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e0:f9:04:d5:af:8e:2a:04:fd:69:76:5c:2b:
25:37:5e:98:65:da:96:02:ad:d7:6d:85:ab:f9:ba:
7c:c7:d3:79:df:4a:c0:a5:16:ee:4e:21:d8:44:05:
50:ad:fe:50:90:8d:0e:0e:df:00:71:e4:d5:28:8f:
c8:7f:d1:83:99:7b:23:71:77:10:6f:cf:17:bd:2a:
9f:2b:8e:04:4c:04:85:4a:9c:3d:8b:9e:a7:34:f5:
25:6b:7b:71:bb:ea:d3:70:8b:03:26:4b:42:a9:fc:
6e:0c:bd:b7:07:48:d6:14:78:b8:86:7b:7a:11:a9:
44:99:be:37:e3:32:8f:20:33:d1:22:92:f0:03:16:
8d:f3:63:23:5b:12:f4:7e:a2:d3:fe:45:d5:1d:03:
f4:09:ea:b9:71:d1:47:0f:c7:7b:e2:15:28:44:34:
79:3e:73:21:47:95:30:71:62:23:e0:9d:2d:30:e1:
c8:b0:d8:63:4d:30:40:8f:36:b9:b5:d7:2d:c1:42:
2a:c5:a0:62:9a:8a:78:09:89:37:0a:fc:f6:d6:01:
28:7a:aa:cc:b8:03:fa:21:f0:f6:3c:7f:37:6d:2f:
d6:97:01:eb:2b:59:55:35:56:e4:7d:28:e1:ee:70:
bf:69:9f:ad:70:da:21:2c:9b:15:97:5c:c3:a9:63:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199406
Signature Algorithm: sha256WithRSAEncryption
8a:0c:54:da:eb:44:25:5b:b0:6b:0c:16:8e:35:a8:9c:db:80:
c1:d7:31:fc:eb:db:5e:ff:ed:95:37:bc:b6:8d:c1:f6:92:46:
34:ec:48:9e:b4:2d:e8:b6:57:a5:23:6e:ba:cc:75:aa:34:67:
50:4e:b7:93:51:58:6e:f2:be:f8:50:aa:80:d3:9f:da:06:13:
06:19:9d:dc:a0:78:f1:11:e8:3e:a5:cf:b7:b8:e5:63:7a:fe:
6a:81:11:8c:9a:09:f1:1c:1d:42:f9:d5:e2:22:ad:72:20:8e:
6c:a1:ed:9d:24:85:12:7d:51:e8:4c:da:5e:38:91:fb:b5:3b:
f0:ad:6e:58:dd:a6:ce:6f:82:03:37:f6:db:f7:4e:77:36:6c:
b3:7c:eb:14:bf:f2:b5:b9:ed:5f:e2:96:d4:88:ca:e8:66:4e:
1c:76:9e:07:ac:35:ae:b5:49:02:b4:d7:d5:20:7d:a6:49:ef:
41:39:f4:fd:4d:80:16:e0:c7:40:14:66:72:57:3c:ee:bb:7e:
aa:11:f8:0d:50:4c:6d:5f:b7:18:3f:d7:a8:00:da:a9:b0:4a:
5e:26:0d:7b:4d:e3:6a:fa:24:cd:9f:b5:c3:72:51:b2:6a:54:
a3:97:40:1a:7f:0d:a8:b5:2c:ed:44:7a:d3:e7:07:df:51:38:
f9:c6:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:12 2025 by rpki-client on console.sobornost.net