Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
File: guS0v-5FTQqkcKXAqUEDSdSh13Q.cer (raw, json)
Hash identifier: +Zao822MKAGjJ8BkRkHPFhiy/9s4fSfxfC9yBcu0h98=
Subject key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D96D181BCB03A8FBDD98002BBD6EE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.113.228.0/22
IP: 2a03:3080::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6d:18:1b:cb:03:a8:fb:dd:98:00:2b:bd:6e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:5b:cb:aa:ec:f2:07:20:5f:bf:b7:5c:1c:
09:4b:43:5a:06:49:87:6f:42:48:5c:15:c8:13:de:
09:01:7a:67:89:8f:6c:ee:aa:19:e8:10:a2:da:b3:
c4:7f:bf:0d:59:53:f0:95:87:ef:28:f8:71:d7:99:
67:eb:63:62:70:73:4e:74:d8:2e:3e:e3:b5:87:06:
28:27:0c:05:2f:49:2b:2a:f3:bc:e5:b4:f4:56:aa:
c4:6d:45:96:81:65:cd:be:e5:ca:d7:97:14:fe:22:
ea:f9:6a:b0:17:2c:39:d4:cd:a1:07:ff:cf:b1:55:
69:96:2c:bb:3e:78:ba:04:be:98:9a:cf:a8:42:45:
3b:a9:b6:d5:d4:59:0d:c2:04:ae:01:da:99:0d:e9:
45:28:e3:ff:7c:2c:7e:3c:98:ca:a2:6a:9a:19:3a:
ab:8d:02:c1:05:50:b1:90:30:32:a7:12:ac:90:10:
2a:bf:b5:80:96:70:17:81:59:ca:1a:e7:99:9d:27:
88:45:af:53:c6:5d:2f:c6:d4:17:cb:b8:96:8d:80:
6d:45:6b:9b:83:1a:bd:4c:3f:5d:fd:2c:6f:54:e7:
d6:6f:0d:00:0f:51:30:4e:2f:85:72:9d:75:e2:8f:
03:5b:1d:82:2d:af:9b:e0:bc:80:d9:ec:89:db:5e:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.228.0/22
IPv6:
2a03:3080::/32
Signature Algorithm: sha256WithRSAEncryption
76:2c:0b:90:05:91:8d:7f:72:f3:1e:4c:27:6f:1f:e2:da:69:
82:34:af:89:f5:1b:20:41:4c:4f:ac:6d:56:63:25:ea:4f:1e:
b1:57:d6:b9:6b:c9:a0:4d:96:3e:5e:27:65:ed:1c:9e:cd:c7:
93:85:5e:bd:b3:12:91:f7:78:38:6c:ee:5a:47:56:c2:3c:03:
ce:79:d7:48:37:9c:25:7d:4f:ed:0b:a4:dc:79:8a:fe:49:b7:
ff:a8:0b:7b:a7:df:c8:f7:8f:96:92:b8:f4:8a:b0:46:52:ad:
8f:f5:db:28:8d:ba:4d:b1:ca:a6:4f:49:53:8b:78:60:97:13:
00:e6:90:d2:ce:3c:39:8a:b2:02:92:05:e1:3d:ee:de:e2:ac:
6a:87:8b:20:b8:00:23:ea:aa:7a:0c:ca:f8:7c:fc:d4:a3:f3:
0b:96:4e:1e:92:4c:57:42:38:83:27:51:89:e4:d6:9c:30:10:
b0:8a:81:98:12:69:c3:ad:8e:f7:22:d6:ac:56:01:c8:d6:2e:
c2:c7:6f:ef:0b:0a:50:14:53:f4:d2:fd:39:0f:35:9d:ab:a2:
a6:d5:07:c8:9c:42:b2:9f:9d:81:9a:ff:62:d6:0c:ab:9a:1f:
41:82:f1:66:f0:22:c7:7c:92:f3:ea:46:a6:ec:95:06:a7:dc:
f1:7d:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:25 2025 by rpki-client