Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer (raw, json)
Hash identifier: hTB2JXyKoAldGQCIJBUNkE64DThejK4Z6KczwaafPm0=
Subject key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB256028D6364314C458E5494CA70A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47594
IP: 213.171.0.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:25:60:28:d6:36:43:14:c4:58:e5:49:4c:a7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18886007da1730b0770d8604db73d12fd264f3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:f0:69:39:e8:bc:dc:3d:69:0a:52:0a:82:
54:1c:e1:e5:9d:54:33:45:03:17:7f:27:d5:2c:74:
9a:3e:f2:dc:e0:e0:08:3e:90:c2:13:74:72:d5:e9:
6b:23:2a:8e:02:8a:fa:d1:c0:0b:31:02:b5:3f:d0:
21:08:3d:57:01:ff:f0:35:55:91:c0:c9:dc:86:34:
d9:57:14:10:d9:32:68:ea:5e:51:bc:7b:c3:81:47:
29:1e:13:b1:5f:d2:10:f2:e3:22:32:3f:32:3f:7c:
a6:42:9b:56:92:96:41:60:04:79:36:c4:7e:99:c6:
35:94:9a:d1:fb:cb:91:5b:b3:d7:73:6b:d1:5f:9d:
55:28:66:74:2f:1e:b0:5c:53:a0:8e:e7:04:7f:32:
7a:dd:81:9e:5f:3e:10:a0:f4:89:22:4c:62:99:d7:
3c:a5:70:b2:75:1e:9d:29:a6:cc:50:54:83:66:05:
f0:8d:2e:de:b1:2e:52:36:a8:9b:4e:6c:59:8d:a3:
39:bc:5a:5c:14:e8:57:ba:7e:1c:ff:50:2a:da:91:
a5:93:e3:c4:6c:46:d6:ad:b3:dc:9a:e4:b0:b1:55:
47:e3:3f:82:a3:8d:21:ef:f0:20:80:bc:e1:4b:5e:
76:42:7d:b0:a3:7d:8a:2d:58:db:94:85:7d:1f:e0:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.171.0.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47594
Signature Algorithm: sha256WithRSAEncryption
4e:42:be:1f:b1:82:5b:ee:3f:0c:ad:5c:80:59:fd:09:77:79:
7d:88:fe:e0:2a:8e:7e:58:41:ef:8f:20:04:72:93:bc:ee:aa:
8a:13:46:1c:1f:76:76:e8:6d:0b:ba:20:ec:be:8f:c5:1d:e1:
34:c6:60:1f:87:a5:9f:5e:3a:0a:76:2e:2d:0a:b6:3a:18:15:
ad:dc:0e:1e:35:34:af:1b:2f:1f:e7:13:1c:6b:bc:48:d4:16:
e7:de:ad:a5:bc:32:2a:ed:fc:30:34:7e:e1:0b:c1:65:60:4c:
0f:b7:bc:99:a9:81:84:a0:5c:dc:5b:83:6e:50:29:d0:4d:71:
dc:1f:1b:01:58:0f:25:65:86:e1:2c:01:be:b1:89:96:e7:ad:
1e:78:95:dc:e7:95:db:6a:13:0a:69:32:39:74:29:a6:03:f9:
ea:af:da:c4:1a:d2:a8:e4:2a:0e:0c:df:a6:4b:1a:f7:96:43:
e0:ed:1a:48:50:80:fe:49:38:27:ae:05:d9:cd:8f:f4:b8:cd:
ce:9f:52:52:4d:81:34:30:33:1c:5c:c0:82:1b:35:6e:83:d6:
9f:62:a8:d8:10:4e:fd:60:e3:ec:02:93:00:33:d5:de:7a:97:
21:97:5a:8a:c1:d1:23:eb:44:1f:66:62:7f:1f:30:db:2b:cd:
44:7f:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:13 2025 by rpki-client