Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.cer (raw, json)
Hash identifier: 2YRRhDzGDzLNmacaFnx/GjgbZ/OCzpBLgyTwrHkZJ0E=
Subject key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E16C0D9B46E3299CDA5A260C02AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 78.24.205.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e1:6c:0d:9b:46:e3:29:9c:da:5a:26:0c:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:2a:62:e7:55:f0:93:ad:96:13:07:36:68:
1f:4d:12:bb:03:04:f9:fc:19:3a:84:40:b5:ab:94:
7b:26:c7:ca:ce:e4:ca:07:be:c3:ab:8b:e3:98:9b:
7e:1d:32:3d:b0:5b:0e:a8:35:65:27:5e:79:50:7b:
00:37:a3:d8:55:a5:61:11:da:28:7d:b1:72:bd:17:
e4:51:ae:e3:01:79:12:62:ba:f8:c1:67:98:8f:46:
69:3b:84:98:92:d2:9a:dd:6c:e2:12:69:47:09:0b:
d6:95:b1:66:f3:48:76:f4:3a:68:b8:ca:6f:9a:61:
ab:9c:9f:ec:1c:00:df:03:8c:94:27:01:1b:fe:5d:
13:8e:24:fe:6a:57:1c:b5:67:2e:f5:cf:0a:bc:b3:
06:e9:c1:b1:db:cb:2a:1c:57:1d:40:a0:04:d3:73:
e7:9d:f9:f0:ae:9e:6f:d4:a6:e4:c4:83:cf:1e:19:
4b:07:33:bb:f5:ed:7a:dc:a3:1b:f9:27:37:29:af:
4d:e8:2c:e3:7e:63:25:b5:bd:dd:5b:91:7d:a4:1c:
c1:1f:ec:5c:46:88:73:f0:56:03:5b:4b:c1:e4:9b:
27:22:fb:e5:a0:ce:31:f4:24:fa:c3:98:21:8d:f0:
f8:c7:29:52:32:3c:ff:be:b0:3e:79:56:03:41:6b:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2d:0f:b9:17:73:34:1b:42:6f:30:93:dc:53:87:00:89:96:
bd:59:2f:db:96:21:e1:ba:ab:8b:60:71:71:15:4f:b1:f9:a2:
90:04:0f:e7:f4:af:e0:8a:1c:39:03:5a:83:c8:b3:1f:f9:fa:
e8:fe:0f:29:3d:75:70:fd:b9:a8:52:82:d5:df:52:87:dc:d5:
c2:73:6c:ca:55:8f:97:bb:d2:31:87:8d:bf:fb:55:08:c6:76:
3c:7c:17:4f:7c:9a:37:80:b7:cb:3c:a9:0a:71:e1:b7:7b:c2:
e0:1a:25:a4:c1:71:f3:56:a8:c6:f3:af:01:1e:9b:a0:c4:1d:
43:1b:d0:ec:cb:50:a5:e8:ef:6e:98:59:d4:6b:e6:86:5e:25:
d5:03:3c:3d:f5:79:28:12:58:97:18:11:d4:06:48:81:74:b1:
a4:c3:c5:7d:47:21:b4:d1:cb:2d:d6:6c:26:12:f1:8f:2a:3d:
32:d4:42:22:fa:51:48:a9:ff:c9:ee:43:31:81:ea:fc:17:ad:
cf:7d:a9:9c:3b:87:ba:6e:63:6e:aa:dc:2a:61:03:e8:75:a5:
6a:b4:27:bf:fa:c2:0a:b1:ca:b2:bc:26:f8:65:76:fe:9d:b6:
ad:b3:f6:3d:a7:7c:48:7a:a8:b0:68:14:b8:26:ff:e7:25:2a:
5f:f7:9d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:18:00 2025 by rpki-client