Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
File: gmkF0cEWiypmBwmtsg80xuTAPX8.cer (raw, json)
Hash identifier: OILkX/IUCmYPMCZQjEENObSwkL5MM965L+2yfroJI0w=
Subject key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214387683FEBB414381C82C0672C825D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.98.108.0/22
IP: 2a06:b80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:87:68:3f:eb:b4:14:38:1c:82:c0:67:2c:82:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:9e:cc:01:c9:ed:0a:a3:85:48:24:62:d1:
a1:b7:7d:c7:d7:13:6e:b1:48:3f:71:ba:f0:c4:9c:
71:3c:c6:78:c4:71:9a:c7:4a:b3:8c:3b:ea:3d:01:
af:5e:a9:cd:f8:9d:be:66:47:32:1c:d9:0e:e9:3d:
17:e8:74:c4:47:6b:38:85:ef:16:a5:c7:c6:87:bd:
09:cc:ed:13:cc:0d:4b:ee:31:a6:ea:c6:60:81:1e:
0a:50:e2:bd:f7:e8:a2:f6:c5:37:fd:d0:9d:8d:85:
3d:48:c4:b7:7c:de:d5:cc:8b:5a:87:9c:0e:3b:48:
de:92:41:58:46:5c:aa:2f:07:b8:dd:05:7c:ac:c6:
dd:21:99:3b:6d:fc:1d:68:8d:11:21:77:71:33:f5:
c8:69:c4:d5:be:94:d3:89:ea:61:74:58:52:59:cf:
e5:71:d3:fc:cc:0a:b2:d7:12:02:13:8d:bc:96:84:
98:96:93:ca:5e:8f:71:a9:65:31:4b:ea:58:6c:f1:
08:fd:d7:1e:9a:9b:ec:c5:49:c4:c9:4f:8b:cb:06:
2c:86:c9:ea:9b:d9:01:03:b2:df:2c:70:31:91:c0:
97:ad:9e:bb:4e:47:56:5e:ac:2e:92:02:ac:ff:31:
8d:01:ff:ed:e4:9d:a2:a2:03:a3:14:d9:6a:1b:44:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.108.0/22
IPv6:
2a06:b80::/29
Signature Algorithm: sha256WithRSAEncryption
1a:4d:46:e0:90:5e:32:82:c1:eb:10:c2:81:9f:4a:8d:00:4d:
26:7e:45:ba:3b:53:34:71:b6:6e:f1:f9:60:f4:2a:26:8f:dc:
68:e5:11:d5:82:ab:c2:81:3b:94:ec:21:1a:0a:69:5f:4d:f0:
f5:a0:c6:f4:cb:81:25:9f:39:6f:96:0e:69:8d:08:36:f0:4c:
9c:ed:d4:03:4b:5b:dd:24:73:ac:13:cf:2b:25:20:0b:5c:b2:
a0:8e:0a:81:c1:1f:e3:17:d7:ab:c0:ef:1a:cb:47:b6:09:57:
85:b0:76:19:b8:04:40:84:d3:e0:82:f8:a1:fc:a1:ae:5e:60:
59:42:4f:fc:27:e9:b4:0e:5b:b3:b5:f3:b0:17:cf:79:c0:b6:
d9:a4:23:0b:da:f6:83:6a:34:c7:89:b4:b3:e8:21:a2:21:74:
3b:8e:49:86:ce:17:76:33:d4:30:dc:6f:90:98:3c:68:f2:0e:
5e:22:3f:a6:ab:3d:f6:98:a5:b9:e2:90:d6:04:d5:42:3c:3b:
c0:2e:d2:84:1c:91:91:5c:7f:e3:e7:80:ec:b4:59:ee:3d:87:
85:74:8a:d3:7d:8c:a9:08:9e:72:7b:4c:19:e2:8c:b2:cb:09:
48:29:41:ed:64:d9:e9:63:41:71:7d:67:9b:e9:f5:42:3b:ac:
2f:2d:59:49
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhQ4doP+u0FDgcgsBnLIJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjY5MDVkMWMxMTY4YjJhNjYwNzA5YWRiMjBmMzRjNmU0YzAzZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxmezAHJ7QqjhUgkYtGht33H1xNu
sUg/cbrwxJxxPMZ4xHGax0qzjDvqPQGvXqnN+J2+ZkcyHNkO6T0X6HTER2s4he8W
pcfGh70JzO0TzA1L7jGm6sZggR4KUOK99+ii9sU3/dCdjYU9SMS3fN7VzItah5wO
O0jekkFYRlyqLwe43QV8rMbdIZk7bfwdaI0RIXdxM/XIacTVvpTTiephdFhSWc/l
cdP8zAqy1xICE428loSYlpPKXo9xqWUxS+pYbPEI/dcempvsxUnEyU+LywYshsnq
m9kBA7LfLHAxkcCXrZ67TkdWXqwukgKs/zGNAf/t5J2iogOjFNlqG0QjbQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIJpBdHBFosqZgcJrbIPNMbkwD1/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlL2ZjMjgy
Yy1jZDdjLTQzNWEtYWFiNC1iMjVlOWRjYjQ2NmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvZmMyODJj
LWNkN2MtNDM1YS1hYWI0LWIyNWU5ZGNiNDY2ZS8xL2dta0YwY0VXaXlwbUJ3bXRz
ZzgweHVUQVBYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuWJsMA0EAgACMAcDBQMqBguAMA0GCSqGSIb3
DQEBCwUAA4IBAQAaTUbgkF4ygsHrEMKBn0qNAE0mfkW6O1M0cbZu8flg9Comj9xo
5RHVgqvCgTuU7CEaCmlfTfD1oMb0y4Elnzlvlg5pjQg28Eyc7dQDS1vdJHOsE88r
JSALXLKgjgqBwR/jF9erwO8ay0e2CVeFsHYZuARAhNPggvih/KGuXmBZQk/8J+m0
DluztfOwF895wLbZpCML2vaDajTHibSz6CGiIXQ7jkmGzhd2M9Qw3G+QmDxo8g5e
Ij+mqz32mKW54pDWBNVCPDvALtKEHJGRXH/j54DstFnuPYeFdIrTfYypCJ5ye0wZ
4oyyywlIKUHtZNnpY0FxfWeb6fVCO6wvLVlJ
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:01 2025 by rpki-client