Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.cer (raw, json)
Hash identifier: CbrwdvagxxDBmAW0wxugDImByRd0ytSSil29ctey/S8=
Subject key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444F06937A47610CDAE5909448DA0F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.200.210.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f0:69:37:a4:76:10:cd:ae:59:09:44:8d:a0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:df:ab:f6:61:24:dd:15:0d:b7:56:af:71:
1c:7d:eb:b5:04:b6:9a:52:14:4b:96:7d:0a:95:f2:
6c:00:ce:15:41:f4:48:79:4f:b5:fe:d1:f7:bd:92:
90:95:24:6f:8c:24:d9:4d:21:82:5c:de:17:a9:f9:
40:67:0f:e9:51:72:ec:19:8c:aa:16:c0:ed:b8:d3:
c8:65:87:de:e8:f2:d9:46:f6:16:b4:48:c8:af:72:
65:47:9c:c2:f2:e1:ad:f0:e7:69:be:81:03:2d:92:
68:eb:5a:21:0c:4c:a0:1d:27:43:39:03:24:f3:c3:
cb:30:ba:d4:f3:6c:c7:38:e5:d9:6a:15:a3:33:f6:
c6:be:9a:23:de:e8:fd:92:b9:df:d6:e9:4f:f0:0d:
bf:24:28:aa:78:50:3d:4a:a9:2b:58:0e:25:0d:b1:
e1:eb:b0:50:66:63:48:66:9c:97:a9:86:2e:ea:ba:
2f:27:44:b6:9d:7f:ba:82:9f:54:17:3c:97:36:65:
b0:81:8f:85:0c:74:ac:1a:48:86:9e:2d:ac:b9:9b:
43:dc:ec:98:ff:47:e9:70:52:10:ee:42:f7:62:5d:
02:eb:f8:fc:e1:71:82:41:50:f8:1b:01:d9:67:79:
63:4f:f8:c5:75:53:5e:5f:a9:76:3a:51:08:98:02:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.210.0/24
Signature Algorithm: sha256WithRSAEncryption
09:51:7a:47:56:7c:66:ca:8e:39:4e:90:3b:c2:40:c4:cb:32:
15:6a:66:53:10:59:18:2d:aa:b6:f0:d0:ec:a2:c1:81:0b:ac:
ae:0c:51:43:c9:e5:be:c5:f2:6c:f6:07:21:5a:fb:c0:62:49:
a8:96:1b:ca:42:71:ef:74:b8:5d:e6:65:58:37:b1:1d:e3:09:
cc:6a:9b:65:52:87:60:d4:1e:3f:c6:e9:39:75:7c:80:e0:c7:
13:4d:ef:06:d8:bd:a8:0e:a0:76:5d:a1:e7:a3:e5:bd:bd:f9:
01:25:c2:b6:fe:15:c8:de:18:fc:e0:24:d4:69:75:12:5b:2d:
74:ba:2b:96:2f:3b:c9:af:b5:9a:1d:e7:b3:6f:5a:e3:3c:18:
39:c2:d4:8d:40:0d:52:fa:65:e2:d5:f0:4d:53:29:90:70:7c:
e3:14:d9:77:0a:94:95:2b:9b:c0:bd:da:a7:ad:87:ae:9c:65:
aa:8b:f4:79:25:20:92:74:e5:15:4d:b6:76:0f:c9:f6:26:c0:
5d:ed:ec:fa:36:37:eb:21:c2:1f:cb:71:3c:85:ce:f1:49:97:
e7:3a:11:32:6e:33:b5:bf:f4:9e:71:7f:97:4a:77:6d:a9:8a:
50:10:aa:59:66:ab:b5:d9:b2:a1:a1:1c:43:e7:3f:34:dc:f7:
60:e0:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:06 2025 by rpki-client