Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer (raw, json)
Hash identifier: 9U7ldYt9A8y7jVI8so80hrou+eoVdFfkaO8LL9HkaZc=
Subject key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D9A8694C5942512438B39417CF380
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50864
IP: 91.220.235.0/24
IP: 195.162.88.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9a:86:94:c5:94:25:12:43:8b:39:41:7c:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:9b:d6:d7:9f:d7:b1:96:df:5f:02:cb:d8:
94:ec:ec:c1:a5:d7:f9:fa:89:ea:78:25:e4:bc:19:
2d:e2:bd:79:9b:32:0c:e2:59:fb:3c:fc:db:52:1a:
bf:86:a9:b2:c0:a9:dd:f5:f1:0f:ac:fa:df:c9:06:
5f:9a:2c:9a:60:46:c3:2a:2a:6b:96:b4:07:36:04:
5a:1a:0c:bc:13:4b:f6:dd:a0:a2:f0:1e:7c:fd:5b:
cd:bc:51:5a:aa:79:6c:0f:6d:e0:e1:b9:18:05:bf:
ea:7f:3e:a5:17:17:d2:48:75:79:48:15:c5:99:d1:
06:df:2b:3f:d7:1a:82:6d:1a:e8:3b:8b:6c:62:a4:
7c:f0:be:d6:3e:be:91:8f:5b:b6:ed:28:32:74:50:
93:c8:d3:0a:82:27:b2:ab:87:0e:9b:0e:38:77:d0:
84:2d:3b:30:a1:9e:8b:ba:a4:25:5a:02:d6:e7:05:
72:a3:b1:d9:6b:4a:84:c0:af:0d:99:cd:d2:55:e0:
42:07:9b:be:6e:9d:18:f1:ec:7a:3f:af:05:f9:a0:
94:fa:0d:e6:3d:6c:0b:c0:a7:f7:76:aa:04:ce:4b:
70:5b:fe:e7:38:38:56:4e:57:fe:c9:f9:24:cf:8d:
f6:e1:f3:5c:97:50:d5:a5:88:85:be:35:91:0c:35:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.235.0/24
195.162.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50864
Signature Algorithm: sha256WithRSAEncryption
4e:64:d2:15:fe:fb:8d:7c:95:41:8c:b3:6d:fd:a9:a1:4e:90:
3d:b9:a8:f2:2a:46:a4:bf:87:89:0d:18:92:25:c1:a8:37:00:
11:41:55:5f:5b:44:99:d2:17:7e:6a:c0:d8:cf:63:b1:fc:2a:
df:28:72:e3:2f:d6:70:b9:25:f5:e9:ce:fe:cc:14:23:7f:ca:
29:97:df:e9:09:b0:46:14:92:f9:b6:be:9b:47:c4:fb:a1:d3:
6d:26:fd:99:90:e7:54:3c:4d:e2:22:29:30:8e:fb:bc:92:70:
37:de:6d:6b:5b:8d:6d:a8:23:57:cf:12:4c:80:d8:d2:66:ab:
3a:c3:00:bc:d7:f7:16:14:3e:9b:30:6f:09:54:64:e3:f5:0a:
bb:4b:3c:72:d5:46:2a:03:ab:e2:23:d6:9b:99:3d:ae:0f:da:
b4:42:2e:1d:98:21:84:ed:7e:de:b6:08:48:91:09:73:97:2a:
ef:ee:9b:2e:66:81:df:c8:ba:0b:82:df:6d:ed:63:0f:20:34:
94:f6:69:69:31:0d:59:a3:0b:d6:22:34:4d:d6:53:cb:b9:9b:
a8:fd:f4:d7:01:6a:e7:71:80:08:d6:a6:c5:32:e8:9b:86:f6:
4b:cd:e5:9d:7a:aa:54:52:a1:73:1c:83:f8:ac:76:9f:70:3b:
9f:80:40:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:16 2025 by rpki-client