Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GrSYigGB3svc4Qrf7zRSezrdxHg.cer
File: GrSYigGB3svc4Qrf7zRSezrdxHg.cer (raw, json)
Hash identifier: fz3U7IyQdUov5+Q/gsR4BwbAfRGv79M8Z8beP06ISjA=
Subject key identifier: 1A:B4:98:8A:01:81:DE:CB:DC:E1:0A:DF:EF:34:52:7B:3A:DD:C4:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A16F01FEAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/GrSYigGB3svc4Qrf7zRSezrdxHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:56:20 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 212.119.48.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693352136366 (0xa16f01feae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ab4988a0181decbdce10adfef34527b3addc478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:67:44:7e:e3:95:1f:6c:e8:a9:43:84:7f:
06:1f:48:60:f6:ce:6c:c1:15:c1:20:87:65:f3:ca:
55:53:9f:bb:6d:17:d8:e7:29:70:02:9a:05:49:18:
0c:1d:5f:25:e0:53:59:2f:8c:52:89:73:d7:e2:7b:
0f:c2:0a:9d:9f:e7:33:5d:68:c4:9f:13:ab:f3:c8:
9a:d7:34:02:92:c7:01:7c:c6:7d:58:f2:64:53:0f:
d2:b1:07:4a:fb:ef:7e:83:a2:76:0b:96:05:e5:13:
40:42:56:9a:59:fb:15:19:7e:c3:89:14:d5:09:3c:
2f:0a:ca:3c:db:91:3a:41:f2:da:90:a6:04:16:40:
f4:b3:b1:c2:08:51:7a:fc:87:b4:4b:96:33:9d:6f:
2f:07:5f:48:30:84:c0:52:26:ef:ba:34:08:92:55:
49:47:b1:d8:a5:f5:2f:35:09:6f:3c:90:6c:ab:97:
1c:f6:27:f3:da:cb:06:e2:62:da:9a:8b:8d:4d:04:
ae:ca:2e:e3:55:a2:fa:33:7f:0d:e6:13:13:2e:c5:
aa:63:0b:96:23:cf:6e:bf:21:0b:c6:6c:26:fb:c8:
1d:87:51:97:01:12:ea:93:ce:3e:b0:7e:64:47:62:
ff:78:a6:be:80:46:07:46:3a:fb:8e:00:31:c3:5e:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:98:8A:01:81:DE:CB:DC:E1:0A:DF:EF:34:52:7B:3A:DD:C4:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6ce250-150f-4f58-b7f7-df1250840aa1/1/GrSYigGB3svc4Qrf7zRSezrdxHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.48.0/22
Signature Algorithm: sha256WithRSAEncryption
65:59:92:35:6f:96:a9:df:ef:39:b7:2f:47:5a:b2:f2:94:d2:
57:c9:1c:af:50:62:09:d4:0c:33:42:b8:e7:9b:9b:cb:9e:51:
a3:b9:f9:61:1e:d7:d3:19:27:72:cc:08:10:51:4e:3f:82:45:
2e:f3:a6:6b:84:5b:17:66:74:84:ea:08:77:0d:2f:2c:8c:7f:
d9:a6:a5:ed:0f:cb:9d:bd:a4:a3:2f:b0:09:0a:cb:bc:d5:18:
d3:49:99:4b:d2:8c:0c:32:c8:a7:69:45:69:5f:9e:84:98:47:
37:7e:b8:7b:d5:b5:ff:e4:25:73:7f:72:a8:cb:2d:31:8a:8a:
34:dd:35:61:d6:cb:de:9c:5d:14:06:5c:d7:58:b5:3e:7e:3f:
84:12:09:df:23:da:51:d7:90:d7:dd:a3:a3:b2:9d:d5:40:95:
2a:e5:4d:84:fa:48:dd:81:5b:86:4c:a9:d0:99:d8:3e:7d:ac:
58:ad:89:3c:08:69:e3:77:3f:c7:93:8c:ad:2f:e5:fd:d2:87:
cf:9c:87:70:5c:83:5c:31:46:dd:5c:d5:22:f5:91:e4:ac:ee:
c1:de:78:9c:4f:55:20:a1:2f:82:5f:bf:ef:2b:72:e6:99:df:
a1:26:93:97:56:ac:17:6d:25:c1:53:8e:b6:87:b7:76:46:e3:
da:2d:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:06 2025 by rpki-client