Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
File: HVS-eciStTVr8be80TE5fywjrcA.cer (raw, json)
Hash identifier: jalHRDS5Vl7qS938wOyB4pBr6gEoHFEmbFlqUI7T9lE=
Subject key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748313DB108B76558D315AE08F89440
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.248.164.0/22
IP: 2a0d:ed80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:31:3d:b1:08:b7:65:58:d3:15:ae:08:f8:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:0e:d8:06:be:ec:fe:44:82:71:d8:f6:66:
83:97:b5:13:36:94:a2:f8:de:d7:8f:de:a8:32:09:
e6:4a:13:71:1e:bf:13:44:2a:8c:c8:48:69:7b:33:
13:fe:9e:43:c2:f3:3c:01:b0:29:fc:fb:9e:19:72:
74:42:84:6d:b1:d1:e1:76:f6:7d:12:76:2b:48:65:
67:ac:f4:76:64:03:cd:78:12:d8:6e:0f:cf:b4:14:
a5:8f:d2:6f:d4:bc:80:ee:40:75:f0:68:13:60:ca:
1f:b6:93:65:e8:ff:6b:16:81:23:1e:aa:e5:32:b4:
d0:e2:75:4d:c4:19:60:3f:6d:a9:46:71:41:33:55:
9e:f2:4e:4c:1e:47:83:00:81:63:6d:22:95:98:5d:
7e:8a:5f:80:f0:83:a4:6d:1a:da:ec:ec:31:41:85:
14:e8:d5:c7:21:d0:e0:17:b1:16:0d:3b:5b:6b:be:
c9:ff:d8:50:45:81:bc:51:62:6d:f5:88:1d:3d:28:
ca:96:2c:4f:18:26:56:99:94:9f:02:6c:cf:b7:df:
d8:94:50:5e:54:09:f2:31:1c:1c:95:32:9f:76:8c:
21:b3:8d:1a:c8:25:4f:16:ea:f1:10:65:1f:33:57:
97:8f:0b:46:fe:51:b1:4b:95:5e:e0:6b:0e:6e:5d:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.164.0/22
IPv6:
2a0d:ed80::/32
Signature Algorithm: sha256WithRSAEncryption
aa:a5:68:de:bd:4f:72:d1:01:9d:36:25:52:2a:12:a9:57:9a:
0e:e3:80:13:15:82:a9:13:15:60:b4:02:dc:61:9b:53:88:9a:
61:10:33:1e:bc:4c:04:55:ab:69:e1:75:24:1f:ef:4d:74:6f:
ea:38:dc:85:da:27:55:e1:3f:53:8d:6b:f8:7b:15:36:48:18:
65:45:5a:7e:1d:81:ef:42:0e:d6:4b:f6:27:82:25:39:06:8b:
3e:9f:94:55:d2:6c:29:bd:05:39:b7:55:3b:f2:46:52:69:9c:
57:85:13:d3:a9:a9:99:a7:d3:75:28:57:9f:54:9f:28:6f:ef:
70:b8:14:75:62:d7:6e:5b:b8:4b:b1:4b:af:ed:30:ba:fa:46:
8b:30:01:e5:75:d5:11:89:c3:b1:92:d6:2b:d0:6c:84:3c:09:
ed:bd:cc:fa:23:6f:85:ec:0f:03:15:69:63:24:37:8c:6e:d7:
4d:3b:96:a6:b8:9f:93:5b:ef:19:9b:49:5d:fa:ff:ff:48:b5:
89:d8:04:da:f8:95:41:1b:35:41:52:57:6c:1d:db:cb:6c:d8:
47:38:8d:0b:24:92:bd:70:e9:d6:b1:25:20:78:1c:72:30:3d:
7f:77:b2:e9:57:e0:c2:49:19:bf:59:24:5e:bd:42:fd:5f:83:
cb:f0:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:44 2025 by rpki-client