Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HMIQHIyT1FjSXDElyMm8ya8TKHE.cer
File: HMIQHIyT1FjSXDElyMm8ya8TKHE.cer (raw, json)
Hash identifier: GL7N9NEk7+OKf0vGx9HJpl2zRBjZEtPJluMqnhyKurg=
Subject key identifier: 1C:C2:10:1C:8C:93:D4:58:D2:5C:31:25:C8:C9:BC:C9:AF:13:28:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC421F63A6F9D469E0EAABE6CADF41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214693
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:42:1f:63:a6:f9:d4:69:e0:ea:ab:e6:ca:df:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cc2101c8c93d458d25c3125c8c9bcc9af132871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:7e:16:ad:2a:55:ce:e6:cf:af:f3:38:b5:
6e:9b:35:24:c8:4a:ac:62:86:9a:82:44:a2:27:86:
a6:2f:fb:a2:d7:2c:cc:42:7f:84:1e:79:59:99:c8:
23:02:8a:e1:f3:bd:6c:86:55:e5:80:a4:d3:5c:c7:
14:92:f8:f2:b9:a5:52:bf:ab:2d:33:f3:63:ce:f4:
1d:a8:81:dc:0c:bf:da:a7:f7:55:ca:cb:77:b6:ff:
c8:a7:cd:7d:c6:ed:08:83:eb:84:c2:44:60:3b:e5:
fd:7a:42:7c:25:a7:11:85:16:59:b0:8c:4b:1a:cb:
29:da:94:06:34:5a:82:19:ab:bc:2d:6e:67:92:e9:
68:ce:90:8a:ab:d5:ed:ff:b6:71:d5:a1:8e:96:4b:
fd:64:46:60:e7:9a:6a:37:fa:9a:28:96:bd:8b:df:
ca:28:0e:bf:fb:9d:ed:43:ad:71:5e:27:f4:ef:88:
5e:b3:4b:fb:df:31:b6:9a:91:5d:ba:6e:e5:b4:00:
a2:a1:24:c7:f9:21:f4:bc:7f:87:f8:75:54:8a:bd:
0d:0f:c7:11:bb:d9:97:80:ba:37:b5:4c:4c:4d:69:
3e:be:01:38:1f:74:b0:6b:90:fe:c5:52:23:a7:a6:
df:96:94:00:3b:3b:74:e0:bf:68:1a:a7:d9:a5:03:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C2:10:1C:8C:93:D4:58:D2:5C:31:25:C8:C9:BC:C9:AF:13:28:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214693
Signature Algorithm: sha256WithRSAEncryption
12:55:a9:2c:86:ad:93:78:6b:0d:d0:3d:b4:98:ca:a3:76:a3:
03:91:db:6b:ec:57:e5:7a:ba:79:78:51:96:4a:7d:5b:89:39:
47:70:32:77:c6:f4:02:bd:7b:bc:d9:34:d8:9b:ab:ee:1d:c7:
44:c4:23:21:57:65:28:c2:a2:50:3f:f5:cb:26:78:06:89:c5:
33:19:f7:3b:2d:ff:54:82:17:6d:90:44:59:83:49:4e:3d:b3:
a4:b7:39:56:d1:de:a4:d8:f2:e6:a4:65:3b:71:ea:15:94:f1:
0b:c0:5f:e5:d5:22:ce:5d:e0:da:56:f3:b9:62:dd:ba:c4:c1:
7a:41:f7:5f:b0:88:bc:cf:c4:0e:0b:96:25:79:dd:1e:02:cf:
0f:fd:47:e1:1b:dd:a7:79:00:01:f7:e5:4b:ac:a8:9a:c4:a7:
9a:00:ec:9a:06:e6:6c:63:82:27:7d:32:be:d3:94:a9:b2:46:
64:fe:83:32:cd:24:a5:8e:6d:f3:ca:11:c0:ef:44:c1:e3:0d:
bc:8e:f2:d4:04:4b:5c:89:45:0b:2b:e6:da:21:27:fd:55:05:
d2:0e:83:45:92:b3:3a:07:e2:c6:2c:07:e1:8b:07:ec:8b:be:
09:4a:43:47:e3:38:0f:2e:e0:f7:81:2e:c1:7e:21:94:51:12:
64:db:26:3a
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQl/EIfY6b51Gng6qvmyt9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2MyMTAxYzhjOTNkNDU4ZDI1YzMxMjVjOGM5YmNjOWFmMTMyODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxN+Fq0qVc7mz6/zOLVumzUkyEqs
YoaagkSiJ4amL/ui1yzMQn+EHnlZmcgjAorh871shlXlgKTTXMcUkvjyuaVSv6st
M/NjzvQdqIHcDL/ap/dVyst3tv/Ip819xu0Ig+uEwkRgO+X9ekJ8JacRhRZZsIxL
Gssp2pQGNFqCGau8LW5nkulozpCKq9Xt/7Zx1aGOlkv9ZEZg55pqN/qaKJa9i9/K
KA6/+53tQ61xXif074hes0v73zG2mpFdum7ltACioSTH+SH0vH+H+HVUir0ND8cR
u9mXgLo3tUxMTWk+vgE4H3Swa5D+xVIjp6bflpQAOzt04L9oGqfZpQM/KQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFBzCEByMk9RY0lwxJcjJvMmvEyhxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzNjMjkz
Zi03ODlkLTQ2OTUtYjU3Zi02YWFmNTQ5NjA2NWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvM2MyOTNm
LTc4OWQtNDY5NS1iNTdmLTZhYWY1NDk2MDY1ZS8xL0hNSVFISXlUMUZqU1hERWx5
TW04eWE4VEtIRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNGpTANBgkqhkiG9w0BAQsFAAOCAQEAElWpLIatk3hr
DdA9tJjKo3ajA5Hba+xX5Xq6eXhRlkp9W4k5R3Ayd8b0Ar17vNk02Jur7h3HRMQj
IVdlKMKiUD/1yyZ4BonFMxn3Oy3/VIIXbZBEWYNJTj2zpLc5VtHepNjy5qRlO3Hq
FZTxC8Bf5dUizl3g2lbzuWLdusTBekH3X7CIvM/EDguWJXndHgLPD/1H4Rvdp3kA
AfflS6yomsSnmgDsmgbmbGOCJ30yvtOUqbJGZP6DMs0kpY5t88oRwO9EweMNvI7y
1ARLXIlFCyvm2iEn/VUF0g6DRZKzOgfixiwH4YsH7Iu+CUpDR+M4Dy7g94EuwX4h
lFESZNsmOg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:51 2025 by rpki-client