Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
File: GbsyomYvkFwNi_JH7ODbxnmha4Q.cer (raw, json)
Hash identifier: MvRfFB/sV0VihOaUxMQM2XVSHDdZo4NuUrte7bTCIYM=
Subject key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444BAE876A55749405D732F276DFCF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.147.104.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ba:e8:76:a5:57:49:40:5d:73:2f:27:6d:fc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:29:73:51:f0:f7:0b:c7:74:61:5a:e2:d5:
32:40:8f:db:29:dd:69:f5:d5:7a:8f:06:be:f8:22:
3c:47:03:bb:11:26:69:ec:52:25:34:99:e5:d6:78:
b1:de:9f:4a:f7:22:67:22:d6:43:fd:d2:51:2e:69:
5b:17:34:7d:18:ce:ea:b3:aa:90:61:a7:2b:64:a5:
fb:3a:ab:47:17:cb:69:4b:b7:d3:5e:80:cf:0d:35:
97:b3:f2:82:ce:a6:c2:05:2c:ef:56:5b:86:9c:a9:
1a:8c:77:31:b1:62:b7:a4:39:bf:94:21:ca:5a:d5:
ba:00:65:b6:34:42:57:53:ad:69:7d:71:ed:17:1f:
27:e3:d3:9e:8a:e1:c0:3e:2c:62:b1:37:36:08:ff:
2a:53:21:d4:e4:dc:4f:37:5e:41:e5:58:60:25:51:
a5:3b:59:70:93:51:1e:77:07:32:f2:a2:42:8d:8a:
0e:5d:39:5f:c5:17:cc:e6:51:ae:fe:ad:21:17:29:
3f:f9:38:c8:df:1d:5f:d6:af:7c:01:15:0c:d5:2e:
40:e9:ba:46:4a:59:85:e4:fd:b4:38:cd:c6:09:de:
2e:ee:a5:8b:fe:18:94:48:d1:e9:1f:e3:e5:81:c1:
60:63:ae:82:82:00:0c:6a:a3:bb:bd:de:c0:7f:1c:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:74:3d:fc:11:a3:b7:51:4f:e7:5d:be:c4:3b:79:27:94:dc:
b0:ae:a0:7c:7d:6a:94:3b:a4:49:d9:cd:52:9d:77:b9:6d:4e:
f1:50:c9:66:6b:2e:c2:74:85:bd:72:b2:92:40:86:28:d1:e0:
13:b7:b0:55:f1:15:c3:07:61:d1:9d:7a:b6:cb:f5:65:62:00:
b2:a2:09:d5:73:2e:3b:93:e4:09:f4:f5:a5:f0:a1:51:59:1c:
26:e9:23:da:2c:9f:53:ec:77:83:af:ff:b6:3e:c8:21:08:4a:
05:38:42:b2:71:7e:c6:cb:a5:a2:16:66:48:c8:f6:f1:26:e7:
81:1b:73:1c:45:5a:c1:8b:6e:c2:fa:61:ae:1e:19:c8:6a:1c:
9e:c1:ce:71:27:3b:62:5c:3b:a5:5a:04:bd:f2:6d:dc:e5:cc:
d1:68:67:2a:f2:05:c7:9a:0b:df:78:ba:07:93:62:08:b3:36:
0d:fd:94:6e:d2:b2:e9:37:86:02:72:7d:a0:ef:03:fc:3f:f2:
db:4e:f2:01:cb:13:af:43:76:96:4c:96:7c:10:25:6c:f9:cd:
53:1f:be:03:e5:9b:69:57:a0:a8:6e:32:f3:d9:09:d6:bd:20:
d0:f4:db:dd:25:de:a0:d5:9e:cf:86:b1:85:3f:15:10:4e:33:
83:12:3b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:33:50 2025 by rpki-client