Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
File: HDotyHGc8y1ZegUekO2VAmg15Pg.cer (raw, json)
Hash identifier: K6nsyemzfbm6Syj+h1Ru/zoFERaFjT+7cmB2NheXOyE=
Subject key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F6D122D2B8A88609CACAEA493A529
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216425
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6d:12:2d:2b:8a:88:60:9c:ac:ae:a4:93:a5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:50:ba:17:cd:1e:49:d9:5a:fc:76:07:5f:
a1:99:a7:c5:a8:2c:e2:cb:ec:86:b4:f6:a4:eb:67:
ba:d6:5d:dd:41:42:84:9b:45:03:54:06:db:5d:81:
95:4c:cf:2c:1e:ff:cc:77:ef:42:80:1d:fb:aa:2c:
77:d9:24:8d:01:a4:ea:1e:7e:f3:ac:6e:2c:5a:e7:
5a:f2:ed:b3:29:ca:51:83:d2:2b:65:67:6b:8c:82:
7b:ad:63:9e:31:6b:8b:ed:eb:dc:d2:d7:30:b6:4f:
2e:4c:fb:83:b4:9a:c7:db:a6:99:02:e9:42:77:7b:
70:f4:20:ee:08:c3:ea:ea:00:f6:55:f4:5f:6b:ab:
a1:02:6a:35:5e:f0:99:27:76:a2:50:5a:3b:6b:cd:
08:31:df:fc:40:f8:02:14:da:d0:61:18:71:32:30:
6c:4c:a5:6c:b7:7b:8c:75:a6:66:4b:ec:2b:8a:d6:
3c:47:56:59:1e:be:91:b5:10:f1:da:9d:46:6a:16:
1d:3a:ef:4b:74:74:aa:66:f9:2c:e4:7b:43:f0:4d:
cf:b0:db:cd:d3:85:9a:d8:5d:a4:09:d9:6c:d9:26:
84:94:6e:1c:40:05:40:5e:ff:c1:d5:d8:47:4a:ce:
b5:ff:1d:f0:92:3c:c5:9b:7d:a1:93:ae:58:1f:8d:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216425
Signature Algorithm: sha256WithRSAEncryption
3f:3b:ae:18:af:4a:51:a3:0e:ee:7e:b1:d3:0d:9f:f9:eb:4b:
db:39:af:97:98:1a:ff:ff:13:54:a4:fc:8e:bd:b7:1a:01:46:
35:e3:21:6d:36:31:17:c7:44:82:59:bc:a5:7d:c8:fd:16:a7:
47:93:0a:d2:d0:4e:1e:e3:ed:5c:2b:f4:90:75:e0:c4:26:7b:
30:8a:58:77:84:a9:87:75:9b:c0:64:22:7a:63:3e:f2:08:4d:
3f:1c:ff:86:20:70:7e:fa:0e:ae:9d:92:ae:d6:f5:2b:52:00:
96:81:b6:6b:eb:fe:4a:da:43:b5:b1:c4:6e:15:09:e3:7b:71:
22:02:d5:db:3e:18:a6:f8:52:ff:f5:e8:a8:5a:97:1c:6a:1f:
5c:01:d0:c2:ad:b8:5f:e7:5a:3d:6c:6e:89:f7:c5:cf:6e:ab:
69:29:95:f4:78:1c:b5:a1:d8:d0:cd:eb:a5:8f:da:ae:96:7d:
71:66:03:6f:75:4b:07:7b:a9:ee:2d:7f:4f:11:b1:41:ec:6e:
a3:a7:3f:4e:85:a7:c4:7f:40:b9:c2:e9:55:88:05:9c:51:a9:
3d:9d:8a:fa:92:91:bc:f6:b1:21:33:30:dc:7b:5a:2e:0c:16:
5c:56:7a:c1:03:96:50:a4:1c:c1:58:dd:41:51:16:bc:31:7a:
93:ec:99:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:58 2025 by rpki-client