Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer (raw, json)
Hash identifier: g2eegvyP3u1s0dSgcxMzQYbP000IYUQrLMaLBnugSqI=
Subject key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D970CA2094816CE2A2C7E9F9C17B84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 64.39.233.0/24
IP: 64.39.236.0/24
IP: 91.199.81.0/24
IP: 185.124.66.0/24
IP: 216.120.180.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:70:ca:20:94:81:6c:e2:a2:c7:e9:f9:c1:7b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83c966da5eead50905091c3b599c9a44074739d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:1f:2f:14:cb:d6:ec:1f:e4:ef:41:9a:33:
c9:8f:0d:39:b1:c2:4f:94:2a:8c:30:86:d5:91:10:
f3:1d:4c:fe:f6:73:90:e9:3a:b7:ac:f4:61:69:19:
a3:67:53:62:30:1a:a5:8b:dc:a2:e2:14:d6:b0:5e:
18:03:7c:7a:6e:47:41:86:ff:b8:f2:93:9f:20:0a:
61:52:bd:63:23:df:e0:5f:b8:51:cf:3f:82:18:c7:
43:bd:4b:ad:11:04:dd:b7:3a:04:e1:bb:72:4b:39:
1d:e9:48:63:43:29:38:6f:2f:a8:08:c8:ce:a0:22:
94:dc:00:1d:22:34:6a:88:21:c0:13:6d:da:b6:67:
1e:cb:fc:f2:b3:37:d1:6f:29:7e:0a:38:15:7a:fb:
6f:a3:c7:ea:4a:1a:31:4f:9a:c2:48:66:81:fa:f9:
01:fc:a5:6f:1d:72:21:10:3c:16:4d:c5:c4:f5:8a:
4f:68:b1:15:51:97:0b:8f:dc:f7:32:37:bf:e1:2d:
bb:06:e3:31:16:5b:8b:35:6d:a3:42:c6:ed:2a:ce:
17:22:4b:8f:d6:22:5f:fc:32:77:0d:d7:ec:c6:80:
32:8f:0f:3b:23:c3:19:8e:22:c3:7d:9f:e3:7e:af:
5e:b0:26:d4:97:63:58:19:0b:ea:39:86:b1:9d:91:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.39.233.0/24
64.39.236.0/24
91.199.81.0/24
185.124.66.0/24
216.120.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:84:15:53:e0:31:f9:a3:47:07:5a:0b:c6:ee:8e:42:73:b3:
d8:d3:f7:b9:37:54:cc:7b:ec:6d:59:4b:1b:9c:a8:4b:9d:7b:
69:6a:87:77:ea:5e:ef:84:53:75:dd:b4:fd:4f:31:47:dc:6e:
be:5a:38:54:23:57:78:19:86:4a:75:e7:80:8c:91:be:1f:85:
9c:fc:f9:71:79:ad:63:c9:9e:ed:82:ad:3c:9b:e5:b5:43:5b:
3e:98:d0:cc:a3:0f:06:8a:a1:4c:dd:6c:57:5d:9e:16:5f:36:
91:bd:38:cd:72:03:67:d9:e4:05:ca:e1:74:56:0e:d0:38:10:
9a:e9:42:88:94:40:b4:08:79:4f:b0:1e:23:f2:fa:d9:09:e7:
55:ed:d0:ae:f3:b3:72:5e:05:50:ca:63:69:13:d2:47:2b:04:
05:0d:95:58:96:fd:af:c4:40:0a:a0:48:f4:d5:9a:37:32:0b:
e4:2c:8e:08:04:7d:7f:d8:f0:c6:52:29:07:15:db:05:8c:06:
0d:81:2f:97:1e:cb:a9:d2:65:ad:bb:52:c9:ea:eb:6b:00:56:
f9:23:ce:a0:30:c5:12:cd:8c:6a:25:ef:24:91:f3:2d:75:58:
0c:6c:1b:94:60:d1:e5:99:db:01:10:3e:67:44:7c:c7:5b:3a:
62:0a:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:48 2025 by rpki-client