Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer
File: HCTxyq-zII64J6B4JkF7y5STQS8.cer (raw, json)
Hash identifier: XIY5fjn0xA7ujBhDhpiLb68I1tvEAtdzF1CbgsBwRxw=
Subject key identifier: 1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F9AF4D8D023C3B43367B4C9962B0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215473
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:f4:d8:d0:23:c3:b4:33:67:b4:c9:96:2b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c24f1caafb3208eb827a07826417bcb9493412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:75:77:93:88:4c:aa:90:5c:3c:e8:28:7a:
22:7d:59:61:5c:ab:db:88:56:44:73:d6:57:28:32:
9e:ba:05:fa:db:cd:31:5f:a1:ee:03:51:d3:00:3b:
f0:b9:99:70:07:88:99:34:40:62:9d:fc:b1:f9:d4:
fe:ef:58:a0:96:ad:49:1b:6b:9d:55:72:f7:73:98:
c3:64:73:6e:e4:ad:1f:ae:ef:3a:6f:1f:16:89:5d:
cc:42:f4:54:cb:14:b8:37:5b:13:93:98:aa:2a:46:
e4:f0:95:52:ae:49:c6:d1:9e:98:15:4c:c2:99:1e:
59:ea:ac:77:d2:59:a6:6d:c1:1f:1e:ee:5b:07:17:
0b:05:b9:7f:79:50:58:5c:ba:e0:6d:de:17:81:3b:
ec:7e:61:0d:ca:5c:75:c1:aa:58:84:bc:56:96:be:
13:f8:74:1c:60:fe:8d:74:54:8b:a2:41:36:71:9e:
a1:23:0c:69:c7:f7:6c:4f:11:31:ee:25:46:68:57:
cc:4d:9a:c0:5f:b3:50:65:3c:1e:ac:bf:29:59:04:
19:b1:25:9b:70:28:3a:ea:28:fe:b2:60:c8:86:b2:
8c:9e:82:8d:ec:e4:ed:ba:c4:f6:79:68:49:e3:7a:
38:0d:ae:1a:e6:d4:ee:3a:0f:14:70:31:72:33:f3:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215473
Signature Algorithm: sha256WithRSAEncryption
8f:f1:65:2c:b9:76:9b:93:75:12:d4:62:e9:e8:f9:67:fd:d8:
75:56:f7:04:de:8f:89:e6:d3:84:ed:92:fe:4f:78:b6:44:44:
8f:14:d3:bf:b1:0d:70:58:4d:04:33:93:f5:ad:e1:56:57:7e:
ca:41:c1:d5:0a:73:56:c0:d4:db:a0:4e:66:4a:25:f8:47:63:
96:b6:4d:a7:51:c0:f8:86:47:a2:ca:c1:03:4d:39:6b:17:88:
eb:eb:ef:0d:c0:be:eb:31:7c:84:b8:0a:0c:2b:c8:82:91:cf:
6f:a9:8f:30:e6:d8:2b:72:be:31:ef:ee:2b:eb:8b:f1:18:6f:
8d:9e:49:0d:1d:cb:f8:2b:30:69:7c:38:57:82:fe:84:a2:8e:
5d:9e:ce:99:b3:d6:a9:8b:56:26:82:ff:52:93:73:ed:86:85:
11:54:3a:f1:85:38:f9:34:78:a5:e8:35:cf:f2:0e:39:d5:d5:
37:82:08:a0:e3:69:34:1f:8a:b0:00:b3:66:76:46:52:64:42:
c8:2e:ce:d0:a7:65:9f:c4:d2:8a:32:97:ad:62:26:a7:db:95:
7e:07:dc:ff:c1:51:ad:6f:7e:84:28:27:64:43:f7:bd:64:c1:
9e:87:ba:4c:9c:12:06:b4:8e:ca:a9:1b:9c:80:c6:ec:35:27:
54:10:8d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:53 2025 by rpki-client