Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gxCpE4luheSNXAnS5AZkfnGv0eg.cer
File: gxCpE4luheSNXAnS5AZkfnGv0eg.cer (raw, json)
Hash identifier: nwRDdm57KGqkQj6iV6BsOQvSLZ2HOu1wJ4cTYyuDK5A=
Subject key identifier: 83:10:A9:13:89:6E:85:E4:8D:5C:09:D2:E4:06:64:7E:71:AF:D1:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0D4E29194EA958C6BE38F4B727264
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/gxCpE4luheSNXAnS5AZkfnGv0eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60147
IP: 176.97.220.0/24
IP: 2a11:ddc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:d4:e2:91:94:ea:95:8c:6b:e3:8f:4b:72:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8310a913896e85e48d5c09d2e406647e71afd1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:b3:42:82:5a:cd:35:7d:de:94:e9:ae:cc:
05:12:48:9e:b7:ef:bb:d2:41:49:eb:fc:e1:ea:9f:
9b:3b:8c:28:be:2e:f6:ff:11:1d:78:65:a9:c7:61:
c9:8f:2d:a7:08:a2:63:c6:86:79:47:cb:11:61:79:
50:3b:65:3e:02:ec:a1:a3:26:38:1a:7f:b0:33:34:
84:b0:e8:4c:b2:2c:41:53:69:31:e7:ad:93:f2:4b:
79:0e:f9:a9:ab:cf:5b:f7:f6:47:7d:24:70:64:88:
63:ec:c4:af:c3:eb:d1:6c:d9:b9:0f:03:95:86:01:
c7:57:86:3a:38:d5:32:57:2f:a7:fc:4e:29:24:4e:
2c:99:eb:04:5f:89:2d:95:c0:e9:43:ae:48:cb:86:
6c:f5:d9:5f:81:2e:1b:cd:7b:b0:53:70:54:8d:ad:
59:a2:c3:85:d9:ec:e6:e7:68:f2:24:2a:7e:0b:8f:
ab:75:c7:b8:01:68:e7:ae:d1:fd:b6:c4:9b:cf:99:
7b:f1:65:83:5a:f6:9f:c1:2b:ea:da:51:76:4b:b8:
19:5e:98:6f:e4:10:22:bb:55:16:51:54:66:f0:b3:
50:e1:4f:11:01:0d:51:77:49:b0:ef:21:72:24:20:
cb:40:fe:1a:a0:a8:01:4b:3b:37:ee:9e:a0:b4:c2:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:10:A9:13:89:6E:85:E4:8D:5C:09:D2:E4:06:64:7E:71:AF:D1:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/638306-4db3-4aac-a2eb-2ecd41a73baf/1/gxCpE4luheSNXAnS5AZkfnGv0eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.220.0/24
IPv6:
2a11:ddc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60147
Signature Algorithm: sha256WithRSAEncryption
1a:e8:72:83:eb:fe:d5:64:05:36:dc:59:74:45:1e:1a:64:cc:
97:8d:06:a2:cc:cd:eb:40:c3:21:71:d5:a5:d1:f4:06:0d:46:
f2:1b:1a:8d:b2:14:7a:92:6d:ec:81:47:c9:4b:90:0e:b6:e6:
33:eb:e0:6e:bc:59:3e:65:91:74:06:95:23:c1:97:8e:b5:47:
d5:03:11:e6:7b:5d:79:6d:31:83:36:64:51:f0:c5:41:fc:69:
f6:87:6b:25:08:4d:a0:68:32:e0:1f:7f:65:8b:3b:1e:3b:ab:
57:83:8c:f3:b3:aa:b9:71:78:c1:94:8e:ea:68:de:2d:6c:6a:
6e:04:0a:b2:d0:cb:92:bb:4e:be:8e:4b:2e:d4:3b:ad:b1:5c:
24:1a:6c:41:b9:0e:71:a5:93:37:3a:d9:b0:b9:1c:f7:7f:90:
2f:a3:1d:04:d6:95:43:12:20:0b:b4:be:e2:4f:e5:0a:c1:16:
93:e9:c2:7e:f0:e5:52:51:e7:59:e7:9b:94:43:37:3d:5b:f3:
15:0d:e3:26:d5:b0:52:32:f3:0f:ab:be:63:54:10:02:07:cc:
31:0d:59:5d:6f:43:86:f8:2f:26:46:da:8c:18:1e:4d:ed:1b:
64:bc:d2:0e:44:e9:1e:6f:46:e9:c2:cf:b3:9b:24:e8:aa:a2:
5e:76:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:43 2025 by rpki-client