Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer (raw, json)
Hash identifier: TL/QvCf0YkdLzYKikpobpygJDFWFdMkjbIu6CbBkkGA=
Subject key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D96A35A91143422D2615F1DEB0BC13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.159.100.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6a:35:a9:11:43:42:2d:26:15:f1:de:b0:bc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:e5:2a:28:80:d6:40:8c:ee:14:93:29:03:
58:a9:f0:c9:d9:b3:4b:e8:07:fd:45:7b:cc:ed:52:
75:2d:ac:18:5d:23:0f:8c:f5:0c:31:8a:5b:89:0b:
8e:b0:5f:66:7d:2a:0d:a7:13:d8:1a:b0:a6:04:8c:
1f:d4:a3:ce:7d:4b:b5:d5:a9:ab:d5:a9:79:09:19:
56:2a:15:57:b9:ff:92:57:dc:b0:6a:c7:6c:2f:13:
92:e2:bc:fc:85:49:6d:2e:83:70:55:b0:39:f1:20:
da:18:f3:10:04:05:73:5a:33:7d:aa:ac:c7:f7:82:
75:11:a9:5f:9a:65:7c:5e:0a:58:80:41:2f:d4:12:
d4:89:36:16:ff:33:17:5a:fe:e8:f9:b0:81:dd:a1:
3a:d6:cc:f2:1c:93:e2:df:65:06:a1:fd:da:86:fd:
49:41:4a:2e:86:d9:42:0c:0e:95:dd:34:58:fe:11:
65:f5:20:f9:b7:0d:07:a3:19:f8:80:8d:b7:e4:34:
6b:e8:9a:21:72:3c:e9:95:8e:62:94:0c:f1:43:10:
21:ad:db:4c:eb:0d:5f:49:9a:28:dc:b7:df:2e:59:
6c:0a:05:12:59:07:41:14:11:e0:b2:8f:98:1f:e6:
11:51:a3:bf:9a:0a:29:54:53:56:75:ba:07:1a:64:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.100.0/22
Signature Algorithm: sha256WithRSAEncryption
08:d6:60:0a:62:c2:9b:76:58:b7:45:5b:ba:1b:25:01:c9:e5:
de:3e:95:43:36:28:ac:52:44:b7:f7:85:fe:05:09:7d:b6:91:
f1:2e:e8:c9:e6:ee:83:70:73:8b:78:10:fd:85:da:ab:70:97:
1d:54:20:bb:71:ab:05:c3:d7:af:d3:cc:7e:82:ed:cf:80:00:
63:b3:8c:0a:4c:4d:37:fa:32:1e:a4:e1:07:e6:54:33:78:19:
04:0e:80:ff:35:0e:5d:a6:36:f3:64:4e:28:c4:ec:f7:de:25:
a9:8e:20:0e:a0:94:b5:ba:48:13:43:af:29:c4:bb:52:fb:73:
5b:1b:fe:2b:2e:3b:c0:26:20:b8:1b:16:de:62:1e:dd:bb:eb:
9a:e9:4f:c3:56:1a:c1:36:0a:48:62:e6:4a:54:11:c2:b0:05:
30:ad:01:d4:d1:44:90:57:38:0a:a5:73:fa:ac:b5:8c:f8:8f:
ce:2f:11:36:f1:3f:39:48:a3:0d:9d:50:ed:91:ae:1b:b2:ea:
ce:c9:47:75:b7:54:ba:3b:d2:c1:a9:25:1d:8c:dc:56:e3:9a:
89:04:e4:e5:00:58:2e:9c:92:e4:43:7a:93:6d:32:78:18:a9:
b7:a2:75:7b:7d:ed:c0:a9:1c:6e:80:e6:44:a0:b5:67:67:97:
25:96:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:46:01 2025 by rpki-client