Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
File: g5qaG34R_ed-Th9X_xGGTO4h8WU.cer (raw, json)
Hash identifier: 71BogeUS+dqIaNwrm/5wFd5ie4XOVJD8Ot1iVoEjIP4=
Subject key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA1DD80B082443D8D23B41DE5028A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.105.112.0/21
IP: 185.111.112.0/22
IP: 195.5.172.0/24
IP: 2a01:8f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1d:d8:0b:08:24:43:d8:d2:3b:41:de:50:28:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:fd:f5:08:88:1b:6e:dc:f9:13:e1:ae:b2:
a3:bd:8d:8b:ec:73:05:72:50:8f:b2:14:9d:bc:70:
0e:e5:e7:33:cf:77:b7:5f:d0:a5:bd:88:04:e1:9b:
d2:92:bf:4a:35:41:85:30:6f:cb:15:0d:22:13:7d:
1c:1b:a0:fb:f4:15:89:7e:96:b9:4f:f9:9d:b9:e0:
10:b0:d3:d2:3e:97:57:a7:06:91:99:16:3a:c7:8b:
c6:06:cc:4c:8e:77:ac:34:53:a7:4d:59:8b:6b:48:
b0:3a:2c:30:83:b3:1a:f5:ea:80:e2:00:51:5a:80:
54:ba:17:94:8e:95:29:1e:5b:c6:d5:4d:3a:a3:a4:
70:06:bf:21:81:5a:eb:f3:e5:76:70:ff:04:6e:c3:
f2:ba:3f:31:31:ae:0f:56:07:6b:1c:8e:82:3e:37:
ff:23:64:4b:28:78:1f:7b:a2:f5:89:5e:8f:89:b4:
f0:f2:f4:a4:aa:20:43:b3:21:d8:aa:13:92:54:a6:
66:c8:af:dd:33:38:5c:5c:89:65:1e:a9:2e:a4:8f:
c7:31:9a:ee:8e:4e:7f:a7:39:13:8f:b8:ee:81:e0:
e5:9a:ff:d8:56:0c:ee:13:ee:5b:1a:70:03:7d:86:
f4:cc:07:20:96:9b:d5:39:95:12:a1:74:a6:7d:1d:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.112.0/21
185.111.112.0/22
195.5.172.0/24
IPv6:
2a01:8f80::/29
Signature Algorithm: sha256WithRSAEncryption
84:92:06:79:1e:d1:a9:88:74:6c:15:2b:4f:bb:ea:fb:c4:8d:
5b:1c:6f:e1:f5:6c:1e:a3:71:f7:ac:51:3c:43:9d:cd:05:c6:
c0:5d:5a:76:f8:fc:21:c9:36:ee:dc:eb:4d:4c:cc:d3:77:fc:
9e:bd:9f:75:1c:06:ea:9f:57:0e:53:ef:1f:d1:4e:1e:3a:52:
c2:ee:e4:29:ff:cc:7b:e6:65:e2:7b:70:d0:35:e8:1d:45:21:
5b:55:2a:a7:13:6a:ed:62:f0:99:90:7c:13:d8:f0:59:6c:8a:
d2:2f:8f:00:c8:25:4e:34:0d:b8:95:5d:5d:a5:d0:db:1e:6a:
d7:a8:3a:4d:a1:77:83:c5:ca:b3:3c:15:fc:4e:b2:54:76:c7:
1a:49:3a:b7:5e:57:c7:e2:9d:0a:73:02:df:c2:96:76:af:aa:
e1:e1:9a:0f:01:bd:3e:b1:de:3f:6f:3b:ba:42:84:1b:3b:12:
4e:a5:63:67:bb:91:e3:3e:8a:d4:34:23:43:16:80:6e:b0:e6:
34:07:20:db:06:fd:8b:0a:4e:3e:be:c9:1e:da:97:83:f1:d2:
25:6f:75:dd:61:39:b7:c0:c4:51:2f:52:34:43:0e:7a:a4:93:
96:43:fb:41:c7:95:09:5f:9f:d9:ee:e0:d8:56:ae:dd:6c:5e:
44:e6:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:17 2025 by rpki-client