Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
File: gsbbjg23mzF0_umfxqYFz1bfvck.cer (raw, json)
Hash identifier: VntZn0TX+pTRrhIH100NHG0wwKAOqCQN+izpgPbevY8=
Subject key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C07E5D6D052BAE8692A17AE7183B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.34.184.0/22
IP: 2a00:dba0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:07:e5:d6:d0:52:ba:e8:69:2a:17:ae:71:83:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:d0:0e:52:b8:22:34:aa:12:f0:5f:b1:5d:
e8:e4:10:4f:76:f2:53:10:e2:b4:60:d4:fd:f9:57:
5f:fa:aa:75:dd:77:4e:c8:0b:a3:c7:54:5d:c4:c1:
ad:f0:b2:6a:0a:75:ba:fa:cd:d5:af:28:48:b1:bc:
6d:fb:af:9d:42:49:73:29:86:80:42:78:3d:27:a1:
e2:1e:53:94:19:e4:d6:a2:85:07:02:9d:44:6a:b6:
1b:82:b7:57:fa:de:f3:13:2c:8c:12:f2:16:dc:11:
c0:5f:ea:30:74:23:7e:43:ba:2a:e5:c6:03:1f:90:
d8:dd:5c:db:f5:44:e5:20:8d:50:c1:e9:4e:f3:ef:
ab:f3:5e:c8:ab:75:3f:bb:45:c3:63:7b:c6:56:13:
0b:e1:b9:ac:a1:3d:de:67:34:5c:f0:10:df:d2:2c:
77:93:69:10:69:b2:e5:51:14:8a:13:88:33:0f:36:
55:68:55:40:14:64:5a:0a:86:0f:da:2b:2a:3c:95:
19:41:c7:a6:53:34:80:54:84:e5:ea:5c:50:ce:6f:
59:70:6e:55:9e:9a:29:f4:1d:7a:59:c4:7d:b1:74:
96:c2:f8:d3:b1:50:f2:fc:92:78:67:b4:20:e0:69:
7a:1c:36:40:86:05:9a:2f:e7:c5:2f:8a:27:bc:3f:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.184.0/22
IPv6:
2a00:dba0::/32
Signature Algorithm: sha256WithRSAEncryption
18:37:1e:8a:00:86:04:93:5f:b5:bb:97:e1:d7:03:94:3b:84:
6f:a3:40:81:b9:6d:ca:97:4c:d5:8f:c5:46:09:ff:bf:25:67:
0e:30:8c:bb:3d:7c:16:9a:74:d0:83:c7:59:cd:55:03:9f:10:
c2:c0:a0:92:42:95:87:ec:42:d1:9d:0c:af:90:80:1c:06:5c:
bd:8c:b7:f7:b0:bf:29:0c:4c:00:a1:51:ee:76:5d:e9:e2:2b:
12:29:85:e3:85:80:05:11:44:1c:b4:56:bb:78:f0:b7:b7:bd:
56:a2:a0:87:bf:60:e8:01:0e:ca:5c:4f:4d:fe:72:ad:39:93:
96:cb:3f:7a:0a:3f:9f:70:6e:fe:1f:62:eb:63:5a:aa:8c:bb:
9c:3d:1d:d2:e6:bb:42:23:5b:62:d3:9e:33:5b:7f:84:01:24:
6b:1c:74:44:48:73:71:bf:e4:bf:48:7a:69:90:21:82:65:c3:
ac:58:aa:0d:7e:36:b4:d6:4a:a1:66:10:e2:ef:99:4f:a6:81:
2f:de:2d:94:84:b7:7a:cd:81:1a:3a:b4:fb:31:52:06:8d:3e:
f9:ac:fb:bd:bf:f6:1b:e8:7d:2b:0e:74:ac:ad:96:93:4a:0c:
03:1d:5b:49:92:55:ed:ad:6f:e0:0f:20:d3:43:70:c2:b1:63:
43:69:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:05 2025 by rpki-client