Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer (raw, json)
Hash identifier: YFz6gdlskvgmvBAGUDZLZxND2Tx4PUr9b9ymvJCAoG0=
Subject key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D99BC3D19C5633627D6BCFAB71ACA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.143.192.0/22
IP: 2a07:3840::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:99:bc:3d:19:c5:63:36:27:d6:bc:fa:b7:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=184c7c0364f1093cfc584c93037024104fb4854a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:f8:08:67:60:a7:94:ad:0e:fe:72:82:e4:
14:b8:f4:18:48:6f:be:c8:9a:f1:cc:9c:7e:b2:45:
44:15:d5:5a:26:db:df:02:ca:bf:02:2b:69:3f:13:
10:52:f8:e4:1a:9e:6f:dd:b2:49:8f:39:8e:58:55:
42:07:b0:ce:fd:e9:a6:d0:2c:60:d3:01:db:6b:32:
12:39:72:06:50:27:c3:87:73:49:ae:e3:eb:70:82:
67:4d:ab:3e:4d:79:83:53:b4:28:fc:9d:88:75:7a:
89:0b:f6:7c:2e:36:11:43:af:71:3b:d6:00:fe:2b:
17:c5:76:50:c4:31:32:ba:09:d1:08:72:b4:39:da:
e5:99:a9:67:7b:51:2a:33:9a:10:06:4c:dc:9e:b1:
a4:81:58:b6:72:fd:38:c6:a8:55:e6:83:4f:07:91:
ac:11:45:7f:3a:84:54:1c:49:74:c5:8d:df:b6:1a:
21:3f:1b:a6:97:8c:e8:64:72:7f:cf:f0:85:5b:d8:
0d:48:97:4c:cc:cb:28:5b:4f:eb:03:05:1a:d8:43:
6a:4f:a5:5f:cc:28:97:1e:ca:96:5f:ad:6a:9b:3b:
f7:4d:e6:ca:27:a7:7c:c5:0b:52:18:a5:0e:c3:bd:
b5:20:46:f4:26:87:e9:d1:71:f6:63:e1:32:67:4f:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.192.0/22
IPv6:
2a07:3840::/29
Signature Algorithm: sha256WithRSAEncryption
0d:dd:4f:ae:a3:ab:98:6e:73:9c:d9:19:13:b2:57:26:dc:da:
41:bd:61:6b:9e:3c:9a:97:b6:31:5b:df:6a:6d:34:38:fc:90:
c2:4a:b0:23:40:e8:31:e1:a6:ea:8d:90:b8:3c:6e:17:15:ea:
d0:ff:93:c1:ec:12:1d:db:26:7c:8f:67:e0:cd:e3:75:1c:35:
5d:26:1f:ac:aa:9f:0a:07:4d:6e:46:65:89:fd:58:01:de:11:
90:1b:c3:8a:d9:6f:c8:46:c0:26:2f:91:26:c8:25:0a:da:5f:
4d:a6:6d:9e:f3:8d:6d:96:9d:ff:fe:5c:71:b1:6a:4e:2a:be:
63:4d:84:3c:83:6f:1a:63:1c:03:5f:1b:3e:7d:70:3e:ad:30:
85:97:b2:33:cc:7d:3f:ca:a6:f3:b6:5c:f7:06:ce:d8:22:35:
34:2f:57:ba:26:20:f3:d3:d1:ea:58:a6:ec:aa:30:5c:a1:56:
d0:d0:82:ef:98:bc:d7:09:5d:87:1e:d5:5b:52:ab:fe:79:24:
53:8c:7d:67:5b:27:08:4e:68:32:fb:d8:c2:ad:e8:bc:a3:fe:
e7:5f:ba:0c:a9:26:de:99:d6:01:37:09:1c:c6:fd:0b:f4:c4:
36:e6:32:5d:17:6b:2e:3b:50:27:e8:f8:07:dd:88:71:7a:3e:
f4:d8:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:24 2025 by rpki-client