Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G89EXY__GbJGfRxU2E4AGXc1GYw.cer
File: G89EXY__GbJGfRxU2E4AGXc1GYw.cer (raw, json)
Hash identifier: HMIH5W2O/FzVpn69N48tCSJp0HTsan0UWDXT9Q+gNPU=
Subject key identifier: 1B:CF:44:5D:8F:FF:19:B2:46:7D:1C:54:D8:4E:00:19:77:35:19:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018368465ABC009800022350F0804936FDC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/2d91ea-9dd6-4ad7-b62e-519f03dc0bd4/1/G89EXY__GbJGfRxU2E4AGXc1GYw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/2d91ea-9dd6-4ad7-b62e-519f03dc0bd4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 23 Sep 2022 02:56:24 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60725
IP: 148.253.16.0/20
IP: 185.26.152.0/22
IP: 2a04:38c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:68:46:5a:bc:00:98:00:02:23:50:f0:80:49:36:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 02:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bcf445d8fff19b2467d1c54d84e00197735198c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:58:8c:d5:67:e7:b4:24:ff:72:b0:54:78:
a0:8a:4c:a0:63:a1:ee:89:ca:3a:e3:e7:b5:68:6a:
fb:60:27:c0:bf:f4:bf:77:1b:6c:c4:c2:cf:67:21:
55:28:bb:a9:08:72:12:ed:ef:71:59:15:7e:65:17:
e3:eb:a4:60:c1:5e:e9:e2:c7:f8:41:80:d9:9e:26:
c1:0f:98:66:8d:c6:12:42:da:93:4b:00:2f:17:55:
b9:f5:c3:16:17:ab:74:f7:8a:c5:c0:40:79:15:ad:
20:b0:12:f3:ad:03:c4:b9:f6:84:0d:66:96:0a:e7:
d3:6b:0f:8c:f0:82:38:48:76:0b:47:ce:5e:16:3a:
ba:1f:b7:64:a2:f4:49:51:22:43:63:f5:c0:6d:78:
f2:68:00:34:92:05:b0:e6:40:3b:60:9c:73:98:ab:
ed:85:bd:e9:d7:8f:b6:53:b4:d9:bd:01:02:27:88:
46:7c:c0:3a:c3:7d:75:42:42:90:5f:16:8b:7f:ed:
1b:b7:fa:b7:77:75:8c:7d:fa:0d:51:91:71:f7:18:
6c:23:28:ef:9a:c9:ec:93:63:6d:9a:46:2c:8d:d3:
61:b9:35:1f:36:34:bf:a0:19:54:55:8d:46:e0:6e:
0e:9a:05:13:e3:d7:64:f2:54:38:02:b3:c1:0c:22:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:44:5D:8F:FF:19:B2:46:7D:1C:54:D8:4E:00:19:77:35:19:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2d91ea-9dd6-4ad7-b62e-519f03dc0bd4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2d91ea-9dd6-4ad7-b62e-519f03dc0bd4/1/G89EXY__GbJGfRxU2E4AGXc1GYw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.253.16.0/20
185.26.152.0/22
IPv6:
2a04:38c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60725
Signature Algorithm: sha256WithRSAEncryption
7a:94:36:61:3e:55:19:71:0b:d7:37:e1:59:12:7b:d4:8c:54:
57:be:27:99:8e:e9:4e:9f:3b:f7:d4:bb:d3:2b:f0:12:64:77:
c9:29:0f:84:2f:77:5c:43:48:5d:2c:ae:81:79:44:5c:9a:e0:
7c:45:14:b9:70:e3:79:87:c5:ac:85:99:cf:47:16:45:46:4a:
e7:50:fa:4c:96:84:82:c7:f4:45:1d:0c:70:db:64:1a:6f:73:
8a:ff:f7:06:54:67:8e:be:97:50:ba:ab:3e:38:85:c5:58:64:
b3:0c:10:9a:da:ff:77:73:85:ed:a4:13:33:96:b4:f7:62:d4:
f0:04:ed:5e:a4:3a:8c:ee:c6:22:8e:8d:23:b0:62:8c:29:bf:
4d:78:e3:8b:8c:24:88:62:23:ec:b8:3e:77:a5:01:90:2e:6a:
a6:49:bf:26:f2:1d:d8:ac:3e:93:3d:22:6c:95:43:3c:ae:93:
4c:4b:08:3e:5a:2e:35:ff:2c:8b:aa:62:b1:0d:b5:04:f8:c7:
85:9e:6c:bf:15:c6:c2:30:0c:e1:cf:d8:0d:b7:1c:21:20:4a:
08:1a:92:99:14:01:bf:6f:12:39:86:06:4f:82:e1:9a:3e:e6:
1d:8b:52:44:b5:4c:1a:11:cc:42:80:fe:6e:28:78:80:da:a7:
8d:78:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:51:03 2025 by rpki-client