Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.cer (raw, json)
Hash identifier: 4BWiQeJts0A0VjRSSVVHiXCxR0NaPbtyh+vDTVagVgY=
Subject key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236906F0C12D84EDFE7EC01CBB654E94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.132.32.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:06:f0:c1:2d:84:ed:fe:7e:c0:1c:bb:65:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:8e:e1:5b:55:b8:12:95:97:c9:6f:a3:87:
48:1c:33:ff:c0:4c:36:84:f3:9d:b7:ae:e1:8a:2d:
5d:98:4c:ba:61:cb:ec:9c:52:ab:38:d5:5a:9a:94:
c4:7c:63:f8:e6:78:25:56:a2:cb:1e:97:7d:b7:8d:
34:00:07:03:dd:99:66:86:e3:fc:11:76:40:78:c4:
b9:a0:d2:99:99:ab:33:11:79:e0:f2:08:40:ff:15:
17:59:6c:7d:fb:96:b7:24:b9:3e:6f:a7:3d:09:03:
00:07:a4:48:05:b5:71:fc:bf:30:1d:ab:fc:e9:a3:
6c:87:1b:f2:55:ee:e6:9b:18:5a:77:06:e9:b3:7b:
8f:ec:81:4f:e8:03:9f:15:3e:e6:a6:4a:01:58:a0:
e2:e3:87:f0:75:6a:98:d8:45:9a:d8:2a:c5:61:bf:
d7:4b:8d:a1:44:ee:84:09:d9:44:dc:eb:12:54:2d:
e4:c5:69:5e:5f:a1:a1:58:5a:2f:e1:fb:ca:92:98:
2c:9c:48:9b:38:b8:d1:3d:63:f6:06:cf:16:53:32:
7a:52:a5:da:fa:2d:2b:0a:08:b2:53:54:8a:0e:b3:
e1:48:8e:f0:95:56:2d:1c:81:b1:9c:85:b5:9e:df:
59:cd:a8:2d:fa:8f:c3:39:d8:ba:7c:3f:ab:6d:59:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e8:4a:dc:de:e9:dd:ad:44:3a:3a:fd:97:19:e4:7b:ce:d9:
b4:0b:ab:9c:06:d0:d3:70:21:76:0e:ea:10:44:3b:25:54:f2:
2a:98:eb:df:0b:09:71:94:79:ae:9d:c1:26:8b:42:2c:1d:c8:
99:70:89:bc:c6:8a:02:25:15:df:e9:35:b5:84:d6:15:53:e6:
71:76:2d:94:8b:94:58:14:5c:ba:4d:0e:0e:b1:49:29:a8:95:
53:15:fe:9f:33:09:98:a6:e4:aa:75:d9:16:28:26:10:a4:70:
d3:60:7f:aa:ec:8b:db:c3:ec:db:b4:1e:91:59:2d:d8:ca:6e:
ea:12:04:e4:05:1d:30:24:84:43:f7:21:52:03:70:0e:93:67:
b7:fd:09:39:25:15:f8:6d:ac:b0:a3:0a:72:a1:e0:8b:7e:c1:
81:4c:ef:2c:46:d4:2f:89:80:33:06:e6:e8:62:94:a8:fa:ea:
7b:ea:05:ca:2a:b2:b9:73:47:7e:c0:90:59:ce:54:c1:d6:85:
86:b1:a2:7e:9e:f7:14:a8:5e:de:2b:84:5d:a8:92:be:73:e5:
62:73:d8:b2:20:7c:96:a1:49:dd:b6:6c:3b:b1:0f:47:1a:bb:
07:98:cb:ce:e9:b5:36:9d:5c:5e:b9:7b:e5:1a:1a:e8:08:32:
96:42:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:12 2025 by rpki-client