Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
File: GF88M_sBE7RdRZKaTAbyjHFNyks.cer (raw, json)
Hash identifier: SkND4VWSaohchZDYjK45g26R30yrXomLxlDHFbVmXlU=
Subject key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7FD3EBD545601598BB85A114249CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58183
IP: 195.62.35.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fd:3e:bd:54:56:01:59:8b:b8:5a:11:42:49:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:68:26:37:07:f1:52:96:49:da:ea:f4:fa:
98:c3:2c:5d:40:0a:ca:7f:ab:8e:2b:97:ce:fe:98:
e8:6d:dc:f8:92:48:58:a1:34:03:9c:56:90:6e:98:
94:51:82:84:55:3f:99:e1:21:d7:a9:d6:71:bb:f3:
20:1d:1e:36:de:05:ad:93:23:be:2a:54:5b:02:0d:
cf:11:6f:f0:01:2d:4f:82:23:99:f5:10:6e:fa:4f:
ce:28:bd:14:81:e8:95:83:5a:9c:1f:c0:b6:b9:1e:
91:15:dd:af:ae:10:8c:53:37:6e:60:de:77:ec:30:
b0:15:99:12:e7:90:97:a7:65:0f:a2:0e:28:d6:48:
8b:c5:d3:8b:47:1c:6d:f2:7a:c4:08:5a:05:6e:ac:
a2:ba:f2:d0:86:89:91:ff:52:2f:fb:ad:fd:9e:a9:
22:76:eb:08:6a:29:39:3d:8d:8b:18:b9:9a:bd:e1:
21:a2:48:47:04:55:f3:9d:64:ca:f7:47:52:90:15:
2e:9b:98:99:ce:fc:51:a6:9c:42:9d:36:60:e9:ea:
cc:73:04:ff:24:96:ac:5d:64:05:ab:49:65:ac:64:
3c:93:1b:f9:5e:e6:9e:c9:4b:c7:4e:59:4f:66:f3:
62:6b:52:41:d2:b5:6c:42:15:27:d7:53:8f:08:0c:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.35.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58183
Signature Algorithm: sha256WithRSAEncryption
ad:d1:39:f2:e6:4b:22:00:97:bb:52:70:4b:12:de:b2:9c:3b:
ba:16:dd:af:68:cb:eb:d9:f4:18:7b:ca:c9:b8:51:8f:b5:1d:
ab:0c:7a:80:19:ec:01:a1:d1:06:f4:62:d5:27:dc:a1:3c:00:
99:a4:30:8b:84:d0:26:c5:06:78:8c:18:9f:a9:af:8c:7f:6a:
43:ce:fb:d3:18:1e:b0:2d:35:8c:9e:92:1a:42:e9:fb:1e:69:
00:7f:b8:50:16:72:05:5f:c5:99:e5:5c:8b:ff:9c:96:a0:57:
00:40:50:d8:98:d5:4f:fd:9f:01:b4:96:40:fc:66:d5:00:45:
66:47:10:6e:ae:81:09:89:47:cc:de:ee:24:c6:24:9c:cf:cc:
8f:2e:f9:2e:14:60:70:8e:9c:4d:d1:5c:19:ee:3f:08:97:af:
53:10:0d:33:83:a3:e0:88:cd:06:4d:8d:db:c8:88:86:0b:ef:
01:7a:23:51:ac:28:53:11:a7:bd:6d:ae:29:a4:e8:40:cb:d2:
6a:1a:bc:7b:70:eb:ac:69:8d:97:54:bf:bc:9b:f0:62:c2:ac:
71:53:0d:06:45:a6:45:a6:c0:6a:12:d7:10:a6:53:3c:30:57:
22:ee:91:b4:e0:28:01:68:ec:53:5b:28:ef:76:3e:d0:c7:6e:
e3:5e:55:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:13 2025 by rpki-client