Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
File: GMpt4aSKToxbivHq6bXoC_z5LEU.cer (raw, json)
Hash identifier: zDWT/RObRd+Zvax0gA5UaYnYLSYWO67U97Bmfdqr/U0=
Subject key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244543242B3D86654A35E6F184AB4669
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.115.163.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:43:24:2b:3d:86:65:4a:35:e6:f1:84:ab:46:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:44:c2:e3:70:19:e7:bb:55:43:d7:c3:3e:
c5:7d:de:22:9e:d3:a3:08:8b:ed:63:ab:bd:48:2f:
36:64:6b:8e:88:1d:35:7c:79:77:32:59:00:d4:1e:
45:9f:04:f7:e8:12:e4:83:32:22:23:a3:c5:8e:13:
1f:77:22:ba:13:b5:a7:2e:45:05:58:50:0b:17:e1:
51:0b:90:d7:45:85:42:82:57:47:ed:3e:63:85:1d:
25:51:e8:0f:52:e1:41:2a:ff:1e:c0:2b:9d:b6:25:
46:c3:7b:ba:31:27:7d:4f:ee:d4:da:a8:f3:86:ec:
29:6c:3d:9c:1a:32:5c:f3:d7:93:a4:d9:00:69:e0:
e7:60:0b:c1:c3:64:1a:11:97:d7:78:8e:fa:e8:2a:
32:ab:63:3e:a4:e1:21:36:fc:14:d7:14:20:58:7c:
fd:55:f9:59:28:bc:59:35:71:8f:f9:47:8d:ff:9c:
3e:0d:68:64:2b:a1:49:a2:93:e4:18:fc:02:96:e2:
96:09:0c:62:d5:66:9e:21:01:b5:72:60:cb:c0:19:
83:a2:c5:41:f7:20:7b:78:30:9c:c1:4b:f6:63:9f:
b6:65:d1:60:69:26:d1:c5:ce:53:92:b0:02:51:38:
5b:bc:7d:6c:6f:6c:44:15:4b:51:6b:20:0a:ec:af:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.163.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3b:64:29:94:8a:b4:a6:f7:07:8c:fa:4d:7d:37:c9:42:d1:
60:f2:a1:ea:25:2a:57:76:5c:b1:99:4e:e1:41:7a:ab:5b:f5:
80:f5:3c:3f:c7:64:3f:56:ea:e0:8d:90:b7:72:9b:f2:61:fe:
94:eb:d4:34:7a:cc:cc:2c:e6:83:df:7c:6a:0c:bc:fe:f3:6f:
ce:c4:e7:77:50:ee:4f:99:12:f2:ee:38:31:34:95:b3:db:bc:
da:5a:c8:1f:19:bb:fe:14:cd:8c:80:1f:70:f9:e3:3d:d3:e0:
9e:0c:5f:8d:47:6a:bc:4d:7b:a6:af:91:94:7b:59:7b:d5:77:
f1:4a:b7:56:c3:b7:7a:ef:25:63:66:6f:ef:55:b7:ad:6f:57:
fe:2d:4d:52:99:97:d7:a2:27:10:5e:95:7b:9f:8f:3b:9b:c1:
21:c6:6e:26:08:fc:37:28:11:8b:a4:bf:d6:a7:2d:08:8b:da:
e4:b9:9a:8d:07:39:36:34:2d:d3:c2:00:bb:d5:d6:c3:c6:9b:
f0:97:33:1b:d9:b3:09:3a:fe:f6:b3:ed:27:ac:b3:c9:00:7b:
a0:ba:30:83:47:31:b4:7a:4b:9c:92:fd:9e:8a:4c:47:e0:09:
91:6e:c6:5c:52:9e:62:1f:1e:ee:db:bf:b7:02:a7:a1:72:5a:
55:07:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:53 2025 by rpki-client