Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
File: gTADAN5QBa2iu2bCaJmKQMM60js.cer (raw, json)
Hash identifier: OLddlWcySph+Nz82tW8oBR08SU6FzgAS+FuijKvqUe0=
Subject key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5DC17483B5CEE81508C1A4C263F08
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.141.176.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dc:17:48:3b:5c:ee:81:50:8c:1a:4c:26:3f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81300300de5005ada2bb66c268998a40c33ad23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:b8:22:25:b6:a8:53:e1:c2:60:7d:0d:11:
c1:df:fc:f3:26:fb:39:28:88:cd:80:b2:8f:09:b1:
2a:48:dc:67:56:f9:80:7a:6a:62:ee:4a:f8:f5:14:
fe:ee:d8:0e:66:d7:30:b7:5b:00:e2:f0:81:50:66:
1c:94:c5:7c:e7:5f:9a:1b:b8:01:8a:f2:75:7d:1b:
b0:45:89:78:a3:a0:21:53:e2:c9:c6:ed:83:14:ab:
5f:df:d6:26:b6:3c:7c:29:35:d0:68:18:e6:70:6c:
0b:ba:ab:a5:6a:f0:13:44:e6:b4:25:9b:5e:67:39:
d9:cd:f3:b7:95:67:94:4e:de:de:41:ed:13:c4:c1:
8d:46:26:af:b8:c3:80:ea:51:33:a6:3a:46:0a:07:
fe:66:20:98:21:a4:71:09:61:98:be:ec:f7:86:50:
3c:82:e2:a9:8d:5e:c6:7a:4f:45:b8:73:22:28:66:
02:ec:97:08:97:48:13:33:5a:62:b9:63:48:6e:2a:
d1:58:9e:d9:42:3f:a0:7b:8f:e5:0f:ae:25:6b:01:
20:77:0b:aa:4c:2f:fe:66:74:b5:f0:88:20:03:a6:
85:84:ac:48:e5:f7:74:43:90:d9:24:7a:2e:ec:43:
69:32:4f:b1:77:cb:c2:0f:ab:5e:2c:e3:36:3b:cf:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.176.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c2:18:fb:17:45:ba:3c:86:62:28:60:70:12:19:fa:db:55:
0d:59:d1:27:59:e2:5c:ef:29:cb:f8:5a:23:e6:db:63:5f:da:
ec:5e:b3:e9:2e:59:e4:fa:83:4d:71:7b:e0:d0:6f:c5:0b:b1:
1f:c9:5a:30:b0:4f:aa:19:f9:61:df:a2:20:1f:ae:18:9d:e1:
87:fd:f9:b2:11:ea:ef:05:73:94:12:93:60:84:b7:3b:e0:9b:
11:b7:a3:ed:4f:7a:67:8d:41:8f:c7:ef:d4:62:5c:9c:63:43:
fb:3b:34:9e:d6:6c:45:78:10:70:be:1e:58:17:a5:91:d0:8f:
48:db:8b:3d:7b:1e:fe:87:93:78:2c:0a:f8:21:a9:8c:80:5c:
2d:f9:33:01:28:f7:24:75:de:61:74:f2:73:88:43:a8:6c:d8:
21:d3:f6:db:ae:d2:31:d1:c6:87:0d:25:16:6b:57:68:83:37:
c6:64:ad:bf:a3:c2:2f:4a:7c:ae:c1:52:ab:c5:a3:7b:82:b9:
33:4d:07:25:d6:8f:16:b2:07:77:fc:65:e4:8e:1a:e3:98:89:
bd:86:6c:98:20:8c:5d:8b:ed:77:da:9c:e5:d2:95:91:f5:69:
93:2b:5f:0b:b4:d4:5b:a8:97:e3:92:62:b4:fb:68:9a:b8:04:
9c:5d:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:25 2025 by rpki-client