Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.cer (raw, json)
Hash identifier: vxq2LAEZ+TZWI28NpmSddzad8ZLIB09LEqQriMi0Mnk=
Subject key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421445B217C43D1A9E6F7DBCEBA12D91B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.105.172.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5b:21:7c:43:d1:a9:e6:f7:db:ce:ba:12:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d466d170c810ba34c42e920e84d4262845977f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:86:f3:bd:1a:4f:f9:0a:8d:7e:6d:ba:6e:
3d:b3:9e:fd:72:49:06:c0:6b:c0:cd:0e:52:4e:66:
32:93:3e:d9:f5:81:24:92:9b:35:64:f4:99:ed:e8:
90:49:fa:f6:ba:2a:40:3b:6e:f0:90:77:5f:f7:d3:
54:2a:9b:5b:d2:55:4f:9f:e4:16:cf:3b:fd:87:6a:
9d:a4:09:79:d8:ce:b6:0c:87:21:e0:aa:b0:89:31:
6a:8c:a1:26:96:d6:0b:91:48:93:ed:92:79:a2:10:
8a:c4:35:ee:73:52:e6:2b:98:c0:9e:30:ae:ed:5e:
66:50:41:64:bc:9e:68:39:a2:50:42:4d:b7:8c:e2:
96:9c:c3:c8:3e:a8:4d:3b:d0:3d:80:05:97:84:09:
8d:c9:1b:81:95:b2:5b:80:b3:e1:69:57:0d:f0:c7:
38:8c:f9:2f:b0:93:a4:8a:70:8a:b8:ab:07:15:d7:
a8:41:0b:cc:19:7e:72:fd:22:5d:10:41:44:40:cf:
ac:d3:5c:82:57:a1:98:8d:c6:1b:8a:5b:86:46:41:
93:d3:34:87:e5:93:ec:f0:a5:3a:96:b5:77:53:ca:
06:ea:be:6f:80:b4:42:40:7d:01:98:17:ba:29:bd:
af:10:89:f2:ec:02:6d:93:40:39:a3:8c:e6:6b:97:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:71:32:37:db:1c:cb:ae:48:41:b8:90:8e:b3:18:ec:f4:a4:
9c:19:fa:5d:da:ce:c3:b6:bf:ef:e7:ca:87:b9:57:82:74:ff:
26:14:2c:37:ad:2b:78:9b:d9:8a:f0:a2:57:95:35:65:7b:1c:
16:5d:71:e5:95:d0:cd:50:a2:78:ee:8c:d7:72:8a:bd:89:d5:
26:97:0e:52:91:c8:5d:ae:e1:59:2f:3b:9b:58:8d:13:65:8b:
ec:e9:42:b8:f8:44:28:7d:92:92:c7:79:22:10:1a:2d:6e:5f:
a7:aa:d4:9a:01:0c:e2:79:da:95:40:cf:9f:7e:1e:1e:42:2f:
e4:d3:df:b8:76:f1:82:84:a9:84:d5:43:fd:5d:d5:d3:1d:8e:
bb:61:a6:61:f5:ef:c9:b9:4f:b2:fe:68:87:9f:c9:ea:31:73:
c5:7b:78:95:0c:d3:77:68:22:db:5e:a3:88:50:4d:b4:0e:16:
6a:23:0a:92:01:bd:dc:71:c1:8d:45:0b:22:a0:e8:14:fc:83:
19:68:35:18:b2:e9:8e:52:aa:3f:72:ea:21:cb:3c:bb:60:90:
fc:f5:dc:1c:68:e6:9b:45:84:4f:c7:08:b1:9a:1c:21:60:f3:
13:24:04:62:88:1e:d0:f6:12:c9:d3:c9:a5:0b:b0:ab:77:b7:
e0:07:d3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:26 2025 by rpki-client