Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer (raw, json)
Hash identifier: U2/nhSfP3eRiEZvh43242/IFuwqfTbS+VqGYrg/jCZ4=
Subject key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428234C499A12AAEF07A0DEB235E9BA58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:49:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.7.15.0/24
IP: 2a02:d340::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:4c:49:9a:12:aa:ef:07:a0:de:b2:35:e9:ba:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:a1:af:ec:79:0a:ef:bf:43:20:1c:06:fc:
a0:46:bb:63:13:17:d8:c7:3d:1f:8e:85:44:12:a1:
9f:b6:65:71:98:c4:f0:20:24:e5:9c:87:81:44:98:
26:0f:2a:a4:da:78:37:51:0c:a8:4f:4c:86:dd:be:
6f:47:79:21:a5:ab:dc:85:b2:e7:04:94:10:66:80:
69:1e:83:c4:87:ab:9a:9f:0b:0b:d8:32:0c:ef:c6:
33:84:83:1a:bd:5e:6f:f8:88:98:d6:9e:c8:85:14:
84:e8:d9:68:42:35:62:f4:35:a5:ad:16:11:f8:eb:
16:87:7c:cd:76:21:3c:02:8a:67:3f:d4:14:81:04:
ea:10:c1:94:3e:6f:40:a1:c6:87:0a:6d:15:f7:d4:
9a:5a:74:21:3f:11:a3:2b:e0:55:84:8a:f7:b6:ec:
4f:a3:a4:12:2d:74:2f:fc:db:62:ce:d3:fb:e0:ce:
b3:13:a6:2a:f5:d1:e6:2f:18:4f:d5:57:3e:1a:56:
23:d0:58:71:b7:ba:64:77:03:d6:27:52:7a:83:75:
e2:c6:7c:36:31:d5:0b:bd:17:50:cc:f4:51:b5:65:
8e:87:b8:59:40:f4:e5:0f:1e:0c:0b:55:04:2c:54:
eb:03:62:ff:7f:34:69:01:51:05:85:c9:b1:05:18:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.15.0/24
IPv6:
2a02:d340::/29
Signature Algorithm: sha256WithRSAEncryption
a0:00:66:12:94:cd:93:95:8c:28:61:14:f7:02:05:85:dc:ae:
26:80:4b:26:3c:02:9c:94:ad:a1:67:a9:bc:18:d2:4c:95:4a:
55:24:51:22:2a:e9:e1:7d:d4:47:a8:84:a5:c4:1d:08:e1:d6:
d1:82:46:20:2a:b2:7c:c9:4f:00:10:e6:71:9f:ae:12:8d:2e:
18:84:89:a4:8a:12:39:31:ab:91:7d:92:18:93:c0:ba:d8:62:
22:73:f8:e0:51:d1:bc:77:f9:69:05:25:8a:4d:d3:bb:7b:e9:
e5:1c:47:7e:59:bf:c4:19:94:19:b3:30:d6:97:9f:d7:4a:32:
cf:81:d6:ce:59:d4:5f:15:db:b2:8f:43:4e:63:c3:2a:a6:0c:
67:3c:99:36:2f:36:32:fa:8f:11:17:43:a5:7b:02:2d:d9:60:
d2:74:da:b9:78:31:d5:f1:68:69:71:0f:47:8f:b0:25:ab:1e:
c6:e8:94:40:06:3a:2b:30:f4:0d:fb:61:7f:25:7f:9c:d5:73:
18:46:0e:a1:47:ec:ec:40:77:4f:5b:bf:5e:c4:a3:42:20:72:
eb:ac:ef:f5:c1:dc:e2:2d:36:20:a4:2c:af:3d:cf:cc:06:56:
30:f2:91:1a:7f:20:99:b3:67:00:2b:4b:24:4e:98:55:dc:b0:
72:c4:08:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:02:44 2025 by rpki-client