Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
File: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer (raw, json)
Hash identifier: EH0PIax2dZ2C/7kQO42B2iyVlPSfbWL+4crjwuXZJ5U=
Subject key identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9D24814A10109507793EC2FB6804B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204896
IP: 2001:67c:4e4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d2:48:14:a1:01:09:50:77:93:ec:2f:b6:80:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:ce:cf:4c:57:ed:24:02:28:c7:97:96:af:
2e:2d:da:62:cf:a9:07:24:31:32:98:82:9d:03:0f:
68:26:e6:94:b6:58:4b:6a:3a:fc:07:70:fd:f5:fe:
04:02:46:e7:ca:43:30:f0:2e:74:2c:16:95:37:ef:
18:03:b7:dc:d9:08:d5:f2:c5:54:79:0f:fb:bd:66:
4b:05:27:90:04:38:c2:c3:cf:5c:9c:3e:9d:e5:5f:
e8:ef:b6:fa:f1:0a:1a:ff:52:15:de:79:b9:b1:7f:
e7:e2:68:44:e6:cd:e5:57:f9:cc:e1:da:a6:a9:d4:
74:e9:3c:ba:34:68:d7:f1:84:6d:c4:0a:fe:d9:9e:
9a:93:f1:b3:d2:1c:a8:25:f3:8a:32:7c:51:e6:63:
bf:a0:00:68:c6:74:83:48:f9:b2:ef:91:13:a4:c9:
dd:2f:6e:0c:e6:65:bb:f2:86:46:83:25:37:6f:61:
e1:8b:2b:7b:a1:17:39:eb:7f:6e:49:3e:09:88:c3:
7b:bc:aa:74:9f:78:92:96:25:a9:71:89:ea:63:84:
a8:c5:8f:0d:1d:43:a1:3d:31:85:d3:40:ce:06:60:
98:04:63:fc:79:1d:26:8a:02:89:92:d4:66:cc:ae:
89:28:64:2d:7e:64:69:66:9d:f6:16:31:05:e1:85:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4e4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204896
Signature Algorithm: sha256WithRSAEncryption
37:a4:98:24:8b:86:3b:b7:e6:b7:a0:48:7e:16:8b:2d:9f:ed:
53:d9:39:f1:e2:1c:bf:55:1d:cf:d8:f9:6e:99:85:91:09:f0:
6e:9c:56:aa:08:a5:5c:e9:0a:21:5c:6b:8e:32:f2:91:11:41:
ee:d8:28:68:74:1f:ef:49:c1:18:aa:d2:82:63:e3:e6:65:27:
57:ed:56:b7:3f:66:d0:aa:5d:3e:96:ed:16:aa:aa:57:60:37:
d9:cf:fc:2e:72:3d:ba:c2:d3:8e:fa:23:4b:71:24:55:d6:af:
a7:aa:0b:28:5f:cf:fd:27:61:83:c9:68:64:02:8c:78:28:15:
c9:32:9a:6b:45:1e:fa:06:99:ae:10:1b:16:1f:fa:55:3b:bb:
86:e7:17:9c:08:9b:52:12:9b:57:81:49:c4:f7:27:c3:b2:0f:
99:13:3a:e3:45:98:a9:6a:3f:a5:7d:77:38:ee:ca:f5:61:7e:
57:68:f9:f3:35:cb:0c:ef:ca:8b:0b:97:14:6a:74:6b:5c:df:
2a:11:50:2d:40:30:54:ed:97:45:fa:90:88:86:53:e3:c4:c2:
32:08:82:06:14:e5:5a:46:6e:28:9a:0b:17:fb:77:0d:ed:d9:
df:93:7e:1e:2a:38:e3:8f:6a:48:02:a2:c5:00:f6:93:09:44:
db:42:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:52 2025 by rpki-client