Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
File: G04-M_1PbZy08TyiI3HjCzbPp3Y.cer (raw, json)
Hash identifier: xi4LyzAWYd1f/NPQe1Fas4KZ9waC9zZbDNUA8M4AYPo=
Subject key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAA14DD3A3D3081DDC5B501959C4E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.187.53.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a1:4d:d3:a3:d3:08:1d:dc:5b:50:19:59:c4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:ac:4b:8c:89:34:e8:79:07:39:b8:ed:dd:
a8:fe:b4:2a:38:53:61:88:e4:6f:14:31:7c:ed:fd:
ac:7d:ca:c2:74:ba:7a:9c:d7:06:c1:a4:3c:2a:5e:
c9:53:e2:dc:d4:22:d9:bc:8e:74:af:15:ee:ac:c0:
ed:90:5e:36:c7:ff:8d:6d:1a:d8:01:00:76:3a:e7:
88:03:75:bc:9c:7f:17:ea:dc:bc:df:02:36:0f:78:
0c:c7:8b:49:7e:b6:0c:db:82:43:9c:5f:df:c9:4d:
99:e2:ca:8e:02:c5:64:30:30:21:3e:19:4b:74:2c:
42:94:dc:de:7c:12:3c:db:f7:db:a8:86:87:8a:67:
49:62:98:16:de:6c:8b:1b:fd:a2:ed:b5:80:f1:fa:
d8:fd:c4:f6:da:c7:37:3f:39:76:49:26:01:0a:d7:
f9:f5:3f:ab:49:b6:a1:ae:03:4c:e4:b3:4a:d4:73:
aa:2b:a3:2a:47:cb:82:7c:d1:e7:82:3c:3f:96:a3:
17:66:68:f5:07:71:19:20:3e:f4:ec:8b:e2:10:12:
13:37:29:ce:b1:2b:b7:d5:58:ba:27:24:99:9a:b2:
86:30:29:ed:c5:e1:9e:ce:d3:6d:4c:30:ec:07:f6:
ed:9d:d7:1c:af:13:e8:92:d0:23:26:f0:53:ce:9a:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.53.0/24
Signature Algorithm: sha256WithRSAEncryption
39:24:3b:bf:94:f2:7c:15:2d:f3:89:c5:94:e7:18:ac:84:06:
5e:40:6f:52:37:d2:67:7b:84:3c:65:5a:1a:89:5e:0a:c9:d6:
8e:22:43:98:01:0b:18:ad:c3:7e:bd:74:be:cf:03:a2:5d:77:
9d:42:1a:ac:9b:76:a2:c1:47:f2:ee:76:2c:28:3f:87:c4:08:
af:c1:a7:2d:e9:eb:f1:57:df:a9:fe:85:8d:6c:c1:78:6b:9f:
88:63:cf:cb:e3:7d:6e:ec:fc:7f:7e:3d:af:7c:e1:88:c0:6e:
4d:7a:27:2e:72:dc:28:1d:a6:42:b9:46:f5:de:57:15:b2:67:
73:3c:0f:e7:8b:56:86:6c:30:1e:67:cd:9a:f0:ee:5a:8d:3f:
af:f0:bf:d6:dd:5d:a4:7b:c9:4c:58:1c:cf:62:12:2d:45:30:
ca:65:a0:63:45:30:36:9e:36:0f:b4:01:a5:21:21:6a:69:04:
cd:72:d5:6f:59:ce:91:9c:c5:68:36:80:c2:ba:26:02:ed:05:
36:46:98:07:dd:aa:f3:e9:b5:7d:58:a2:88:78:6d:d9:3d:0d:
55:a8:5f:1c:38:33:0f:f9:cc:33:87:ba:24:f8:d7:a1:5e:f9:
3f:13:a4:ab:4d:e0:09:1a:b2:7c:58:93:f7:bc:9b:79:5e:29:
34:72:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:45 2025 by rpki-client