Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
File: g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer (raw, json)
Hash identifier: RED74VidSfghwQYBkAsCuiU9ywBwHRxxl4ZLvFwWDro=
Subject key identifier: 83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144429F8846417BB328CA08F4D4998E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.217.223.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:42:9f:88:46:41:7b:b3:28:ca:08:f4:d4:99:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:b9:f0:39:77:79:f0:e7:4f:a2:51:63:96:
b6:b1:27:b8:ce:60:d5:61:63:65:7c:af:ca:5e:d8:
14:e4:e1:2b:40:26:b8:96:8a:ff:ca:1b:21:57:3b:
b2:85:00:4b:63:59:be:78:67:a2:b9:71:40:ad:b6:
3e:a9:9a:96:12:39:50:20:02:7e:83:61:61:1b:d8:
b0:9f:7b:e0:50:e2:b5:34:68:d8:92:81:10:ae:55:
04:25:02:95:a6:5c:85:4e:63:da:0c:82:3d:53:e5:
a3:20:73:c0:eb:3d:59:8f:7e:64:8d:9c:e9:9c:50:
9c:ca:62:1c:a9:95:af:b6:db:73:fa:53:76:8a:5d:
74:68:a8:dc:ca:10:65:1a:af:1c:8f:9a:01:ea:8e:
e1:67:6e:02:66:35:3e:60:c1:47:08:69:6c:5c:7f:
56:36:78:1b:c0:4e:af:3b:a3:ed:56:03:04:84:b0:
bf:fd:48:0f:7f:15:3d:dc:c8:2c:42:ae:93:b1:86:
ee:75:13:0d:1c:17:89:39:9c:1c:29:7a:33:40:a8:
70:50:25:b7:64:30:f4:f1:ad:8b:54:f5:40:a5:30:
ae:47:81:5c:1a:dc:a7:e2:53:69:15:d5:53:f1:82:
c6:7b:c5:4e:62:82:cc:00:cd:41:09:45:73:95:38:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b7:be:81:b4:14:67:35:a9:5c:49:10:a8:8d:28:5f:db:c6:
b6:df:17:dd:27:17:ed:80:eb:41:6f:e6:7d:21:74:41:bb:96:
d1:7f:5d:10:f1:15:c2:e5:cb:1a:ea:44:ec:d5:13:ed:2e:a0:
bb:cb:7c:2a:e0:8f:1d:66:67:9d:ee:43:67:48:d0:08:3e:14:
d2:d2:a3:93:77:68:58:c5:77:ea:63:0f:7c:2d:3a:f7:78:3e:
99:71:fe:75:00:ac:d6:1a:c0:c9:c0:26:9c:7d:0e:22:99:ae:
bf:54:9d:99:d0:ac:67:ac:98:80:0f:68:c1:fe:a9:24:f0:1f:
64:94:bb:ec:d4:fa:af:a7:e1:47:f6:9e:4b:7d:06:74:2e:c9:
3a:48:e0:55:3f:44:6a:3f:df:37:03:50:d7:3d:e3:bb:4b:4d:
eb:1f:c3:bb:b9:b7:a5:bf:12:21:35:68:ab:1f:fe:d5:69:fa:
d6:d5:76:4d:ad:3d:e5:67:3e:3b:5f:9d:9a:6a:c5:14:e3:80:
76:f1:9b:31:24:36:29:26:13:0c:77:8e:50:2b:6e:37:e7:19:
00:4f:46:56:82:46:5c:be:f6:00:02:b4:5d:5b:8c:80:c9:23:
d2:4e:3e:88:d8:43:03:58:5b:01:bd:3f:af:15:27:c3:d2:3b:
8f:e8:8d:86
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhREKfiEZBe7Moygj01JmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzljMjA2ZWY1ZGNjNDM3NzA5ODNhNDhlMDQ5YWFlYzNmMGI0ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30y58Dl3efDnT6JRY5a2sSe4zmDV
YWNlfK/KXtgU5OErQCa4lor/yhshVzuyhQBLY1m+eGeiuXFArbY+qZqWEjlQIAJ+
g2FhG9iwn3vgUOK1NGjYkoEQrlUEJQKVplyFTmPaDII9U+WjIHPA6z1Zj35kjZzp
nFCcymIcqZWvtttz+lN2il10aKjcyhBlGq8cj5oB6o7hZ24CZjU+YMFHCGlsXH9W
NngbwE6vO6PtVgMEhLC//UgPfxU93MgsQq6TsYbudRMNHBeJOZwcKXozQKhwUCW3
ZDD08a2LVPVApTCuR4FcGtyn4lNpFdVT8YLGe8VOYoLMAM1BCUVzlTjdTwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIOcIG713MQ3cJg6SOBJquw/C0/sMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2YwYmE5
MC0yY2UxLTRkMDQtYTkyYS0xMTMwYjc3OThmZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvZjBiYTkw
LTJjZTEtNGQwNC1hOTJhLTExMzBiNzc5OGZmNC8xL2c1d2didlhjeERkd21EcEk0
RW1xN0Q4TFQtdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9nfMA0GCSqGSIb3DQEBCwUAA4IBAQCCt76B
tBRnNalcSRCojShf28a23xfdJxftgOtBb+Z9IXRBu5bRf10Q8RXC5csa6kTs1RPt
LqC7y3wq4I8dZmed7kNnSNAIPhTS0qOTd2hYxXfqYw98LTr3eD6Zcf51AKzWGsDJ
wCacfQ4ima6/VJ2Z0KxnrJiAD2jB/qkk8B9klLvs1Pqvp+FH9p5LfQZ0Lsk6SOBV
P0RqP983A1DXPeO7S03rH8O7ubelvxIhNWirH/7VafrW1XZNrT3lZz47X52aasUU
44B28ZsxJDYpJhMMd45QK2435xkAT0ZWgkZcvvYAArRdW4yAySPSTj6I2EMDWFsB
vT+vFSfD0juP6I2G
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:20 2025 by rpki-client