Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer (raw, json)
Hash identifier: 3vTWPeilsRHf3nJGcDZxCMTM0O3euXcPabJFy37S74Y=
Subject key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7C54568D569B097D74E7F2C1CBDFE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.125.32.0/22
IP: 2a06:b780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c5:45:68:d5:69:b0:97:d7:4e:7f:2c:1c:bd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:9a:6a:f4:ad:47:2c:24:13:ca:28:f7:39:
c8:f7:87:09:30:aa:a7:15:f7:39:a1:0f:d3:26:23:
85:5e:ac:e6:1d:fe:d3:06:f8:15:e6:43:2e:25:90:
10:73:4a:a7:73:c6:d1:af:ff:19:83:79:1b:8a:ba:
60:35:95:9c:ba:e6:7b:e6:14:e3:a6:e7:5a:a6:65:
8e:30:c0:87:ea:dc:51:86:93:51:72:67:60:92:fe:
19:46:21:a3:ce:4c:6e:49:4b:54:47:36:17:b6:16:
bc:38:65:8f:d2:69:b0:d1:5c:0f:a2:50:5b:0d:a5:
81:d6:c4:a4:2f:27:28:5f:e8:c8:50:81:7c:cc:96:
16:77:e8:b6:58:b3:45:d9:7a:01:18:f5:76:a6:66:
f5:a0:33:67:a8:ac:46:7c:d7:0c:82:a0:90:64:b0:
c5:49:04:7e:9e:13:f2:44:68:f9:d2:e8:d1:69:7e:
b7:30:4f:e7:8c:ac:5d:02:eb:59:c0:a5:e9:1d:a8:
aa:6b:dc:65:11:38:00:4b:5b:75:06:19:a0:6d:3d:
75:9c:6c:0f:eb:e9:69:20:16:e1:cb:c1:c4:c5:a2:
44:2e:2a:b1:1c:4b:60:55:f7:2b:2a:b3:ef:bb:a1:
6c:28:77:b9:60:6c:6f:5f:cc:6f:10:37:b4:b0:55:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.32.0/22
IPv6:
2a06:b780::/29
Signature Algorithm: sha256WithRSAEncryption
4b:bd:d8:30:44:8c:8a:0b:02:d1:e2:77:c2:cf:3b:3f:a3:63:
02:4d:9a:50:91:83:54:66:c6:e5:da:4d:04:10:cd:9b:22:d6:
ed:0a:1a:45:a8:65:77:d6:e0:a8:70:27:58:a1:8c:53:32:88:
7e:cc:81:d2:0f:45:0c:7c:36:2e:84:81:11:65:bb:a6:02:96:
5c:f6:61:40:73:10:4b:3d:4a:56:69:5e:6a:4a:b4:87:05:7f:
f0:21:bf:23:be:d4:e7:af:a9:83:85:52:9c:f7:1b:48:c7:c1:
c1:e9:6b:4c:d6:b6:7c:35:ce:7d:4c:9c:e9:f0:a6:79:5f:36:
21:63:2f:e2:02:89:f2:fe:a7:e7:1e:1f:20:69:40:a2:8a:c7:
f9:4f:64:f8:1a:ef:b4:97:a5:09:aa:1c:56:b2:9b:5a:7b:e5:
40:8e:05:0d:19:c5:46:38:90:c9:02:6c:32:ae:e5:ed:e0:29:
2c:30:e0:94:a1:88:b9:5e:d0:58:55:9b:a2:08:34:eb:59:2d:
65:bc:cb:22:cc:ad:c1:a0:26:fa:5d:b3:d1:1a:bb:8f:36:2b:
bd:79:7c:b8:e4:1e:56:2f:15:d9:94:39:15:31:e8:c7:3a:c3:
3c:ad:33:b9:85:bb:4a:b5:05:11:17:12:3d:be:2f:ae:0e:71:
c3:0e:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:13 2025 by rpki-client