Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
File: gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer (raw, json)
Hash identifier: RUrhKzX/3hU9Xgt3dEaF/bKrKpmBASSKQCW2/HKZlbc=
Subject key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423699CA74419A93A7D72F9C0084EB327
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.27.90.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9c:a7:44:19:a9:3a:7d:72:f9:c0:08:4e:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:b7:5c:d2:92:7e:7b:1b:90:62:06:1b:a0:
d7:da:0d:b9:f5:00:58:37:51:42:c2:b1:c2:5e:7c:
4f:b3:d4:55:af:f8:f5:bb:b1:42:2f:2c:86:79:11:
a2:58:9e:90:2f:ae:36:95:77:41:65:7a:40:ba:5d:
0c:48:c0:a1:b6:e7:d5:62:68:97:32:c4:6f:00:86:
c3:c2:57:23:c9:3b:ac:a9:7d:fd:08:02:08:b4:ad:
61:dc:6d:d3:72:ca:b5:70:f7:85:4b:aa:d3:78:e5:
2e:99:6a:7f:3b:06:2a:f7:44:f7:6f:a4:5e:6f:a5:
25:e3:17:51:c7:9f:8a:dd:8b:f1:c3:88:80:c0:63:
2e:c4:2a:e2:55:72:13:68:12:9c:b8:f0:b3:27:c0:
8e:56:38:3b:a0:8a:f2:84:17:22:2e:86:47:5f:3f:
a2:dc:50:0c:1a:6a:bc:50:39:46:2a:4e:74:0d:80:
b4:7d:ce:4b:10:ee:ac:83:91:57:42:15:6a:3f:65:
c8:25:f0:e3:a0:5d:74:3b:5a:69:4c:ed:3a:44:d0:
b5:8b:1d:93:cb:c2:d0:61:70:08:ad:47:bd:d2:7a:
d1:46:b6:e0:ac:ed:38:03:a7:1f:b7:b8:7d:bd:2b:
fa:cc:6f:95:ee:f6:c2:7b:b8:37:bd:c4:d6:03:49:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.90.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bf:4d:86:64:33:a9:ed:22:98:f8:96:ff:d8:c9:86:62:62:
bf:0b:22:9b:f9:95:9f:68:ff:bf:7f:34:76:9c:70:16:cd:37:
74:5f:95:cf:ea:b4:f3:d9:29:ab:5d:4a:cb:11:6e:b3:37:d8:
97:03:f7:a5:19:bf:32:63:ea:0c:9a:b8:c3:c4:3e:03:dd:83:
be:b9:bf:cc:ca:d1:86:a6:c3:c2:8d:26:97:4b:52:40:80:97:
b9:31:ba:9e:f1:fa:ff:2c:ed:8f:8d:e9:4d:97:8e:ff:17:0c:
c3:4a:d9:53:80:75:6b:a2:62:2c:fc:45:b1:c7:64:46:1a:7f:
82:63:61:63:b8:ef:2b:66:d0:85:c4:3c:de:0e:6c:02:2c:07:
47:c5:40:fd:d5:07:36:44:1f:1d:4c:2b:a4:2d:9e:4f:78:10:
bf:e6:7a:c0:e4:67:20:3a:8e:16:c6:e4:9b:58:a8:19:5f:86:
d8:56:6b:d0:26:a3:c8:24:d9:1b:11:07:91:50:cf:da:88:d7:
d9:aa:ef:83:ec:89:d0:6b:95:1f:fc:66:c8:75:44:09:e7:15:
f9:c7:a5:93:1f:83:c0:9b:9c:f1:8f:c1:2c:d7:67:3a:69:82:
b5:54:fb:9f:da:ed:fb:10:80:bc:88:8c:53:e6:d4:68:02:04:
be:1a:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:47:26 2025 by rpki-client