Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
File: HSixjfJE24nyuXpscmKXM7OIYC8.cer (raw, json)
Hash identifier: rMT8zBdKrEbW5mL+nWLZBuPqbpCNTbmcNfAJ4hGq+X8=
Subject key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1E91D50E70E10A32FD3944D1BCAFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 33856
IP: 185.98.252.0/22
IP: 2a04:6600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e9:1d:50:e7:0e:10:a3:2f:d3:94:4d:1b:ca:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d28b18df244db89f2b97a6c72629733b388602f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:26:4a:f2:ec:16:85:e4:00:e6:23:53:14:
0c:40:7a:3c:2f:32:2d:89:94:d1:5a:24:22:a2:ba:
0d:7e:85:35:d1:7f:02:0b:e6:3b:f4:5f:a0:a1:c7:
dc:76:b7:7e:b1:8c:d0:52:f8:e7:72:1b:c0:05:95:
28:ca:f2:c8:87:20:5c:a7:da:a3:9d:69:70:60:03:
86:18:48:33:f6:aa:43:85:41:57:9c:a4:00:80:13:
ee:9d:0a:d1:f3:67:53:b0:06:d7:b3:e5:a2:f0:77:
10:8a:c3:03:22:64:2a:c7:28:ff:ad:86:1c:44:1a:
0d:8e:b6:f9:de:7d:2a:6c:cf:40:b6:50:d1:00:41:
1b:9d:17:f4:39:5c:88:b3:58:b0:4c:89:44:c5:95:
c3:6d:45:a8:7d:ca:1d:fa:24:1e:e6:c7:a9:3a:8b:
1d:d1:11:8b:c0:c9:9a:7f:fc:6b:18:84:91:d0:bc:
30:d3:9a:6f:06:b5:c5:0a:06:cf:97:cf:3a:0f:23:
ca:5a:42:90:ab:ff:dc:4c:6d:62:4f:2e:9f:25:92:
fa:df:09:b4:df:1c:ab:6a:c6:66:ce:15:f9:c7:1d:
86:4c:03:69:07:da:27:42:47:ca:7a:d1:09:4a:9c:
e8:86:bc:50:d6:1b:aa:46:d4:13:8b:af:48:7c:3b:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.252.0/22
IPv6:
2a04:6600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33856
Signature Algorithm: sha256WithRSAEncryption
8c:04:f3:30:36:52:c1:ae:05:ab:72:0b:b4:d2:8d:23:71:32:
b8:75:22:c9:3b:88:b2:f4:7f:be:93:2e:2b:af:52:3d:ba:30:
e6:7e:90:eb:0e:8f:89:1f:a0:6b:e4:74:10:9f:6e:fc:87:23:
32:c3:43:1e:44:30:f2:48:e3:2a:cc:02:eb:7f:80:38:4a:f5:
40:8e:d1:24:a6:3b:3c:cb:c6:58:07:7e:ed:42:38:f2:65:70:
52:e9:c9:90:68:21:15:0c:b0:9e:dc:08:a7:3f:8d:dd:1c:6c:
bb:6c:d7:20:cf:1e:d3:27:3e:20:f3:64:c4:96:7e:4f:31:0b:
1c:86:27:ac:25:30:62:02:57:c3:b9:4d:77:e4:94:28:29:1d:
f5:3a:73:c5:27:57:2d:da:0b:d7:11:2a:41:ee:ec:da:24:ce:
ac:ee:c7:a6:26:44:04:b1:34:aa:04:2c:01:c4:f2:7b:f2:ec:
42:08:62:b9:86:91:e5:67:8a:df:fe:85:85:20:50:fe:97:6d:
7f:77:68:e2:ea:46:58:3d:62:67:1b:7f:c1:21:0a:5e:5c:de:
5f:67:dc:d5:65:25:b0:df:96:b0:8b:85:07:1f:04:82:d0:75:
4c:20:f0:fd:c5:03:d0:06:db:b3:d9:5c:14:f7:00:51:c0:fe:
b4:7a:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:14:02 2025 by rpki-client