Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
File: GNl5-JL-uBmXaiX-lH9devN-zH0.cer (raw, json)
Hash identifier: RcWFkYrQVrvTWAfCk4k5vZ6q2LZMGINV9X69lxb4eFg=
Subject key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5BD209A0E05176EEB9146BA84B53F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:654::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bd:20:9a:0e:05:17:6e:eb:91:46:ba:84:b5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:7f:50:4a:79:1e:af:5b:9f:df:7c:a0:5e:
59:f2:1d:4a:8e:d1:22:f1:96:fe:e3:fa:24:ac:9c:
d9:9a:83:ce:5c:4d:99:57:b0:5e:c1:8e:31:e4:7b:
1f:73:af:2f:16:6d:b4:5f:7a:ba:63:b7:c8:0b:4c:
e5:4a:99:63:2e:72:fe:55:6e:47:ce:5f:fd:7b:4f:
f2:31:6a:ba:ff:48:19:10:df:7d:72:58:b2:f8:fc:
91:eb:c5:17:3a:ac:67:7d:fe:83:96:0d:47:00:a5:
d1:e1:6f:70:a4:45:41:fd:cd:62:83:1c:c1:4c:c8:
d9:48:c7:26:a2:a9:9f:ec:b9:62:46:17:00:1a:cd:
74:c7:c8:c7:d3:23:b4:d1:91:a5:46:4b:e0:62:15:
e5:df:64:dc:f8:cf:f2:d1:7e:97:a7:f4:a4:e9:77:
81:b3:d0:6e:17:cc:62:ea:77:04:e8:c8:b6:26:36:
09:c2:21:35:22:e5:ce:06:44:4e:80:72:a0:ed:52:
53:ba:fd:10:c0:c1:59:14:35:9e:c3:0a:f9:a6:a6:
5e:8e:80:9f:18:1b:35:1c:fa:4e:e3:b7:1d:7b:55:
a5:28:2b:8d:c0:a6:30:02:ff:81:4e:81:7b:63:fc:
4e:84:44:ea:c0:d3:24:16:36:13:c7:80:64:76:09:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:654::/48
Signature Algorithm: sha256WithRSAEncryption
9c:1b:d9:d5:2d:82:9f:bb:26:dc:8c:9a:1d:a1:98:27:29:2b:
30:31:34:5a:dc:1c:02:f0:09:10:b0:d0:e0:ac:5c:69:2a:1b:
25:bb:fd:d4:8a:af:0d:d5:be:83:99:d4:48:ec:9c:9c:3a:cd:
ff:9f:41:a8:03:b2:ab:4d:3d:94:57:4d:8b:3b:a5:2c:28:ac:
52:cd:f0:05:f8:c5:3a:c5:ea:9e:8a:44:e3:16:0b:42:91:56:
db:80:fb:21:c9:b1:fd:5e:bd:da:06:c5:76:49:b4:84:93:c0:
b5:e6:2a:59:36:74:66:db:5a:f5:2b:e0:52:72:47:9c:a2:7b:
8c:0f:e6:ca:7d:80:25:6b:ee:a8:20:96:a9:10:78:1f:38:6f:
80:da:b7:5c:6a:e2:1a:de:ef:ef:c7:ab:a3:0b:b8:81:40:87:
d1:98:86:c1:e2:b8:2e:9b:2c:fb:6e:69:a3:35:de:bc:1e:d5:
6b:2b:96:dd:75:31:38:0a:fd:5a:44:2c:a1:ff:9c:94:cc:71:
08:ab:dc:42:05:73:30:14:f9:96:90:3f:1b:f1:e1:5d:09:d2:
de:93:9f:d0:6a:b0:02:59:c2:72:9e:0a:70:34:e7:44:28:3a:
4e:ac:76:56:18:74:73:13:a4:fc:1b:99:fd:60:1c:33:72:b7:
24:49:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:05:35 2025 by rpki-client