Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
File: HYFeKwc-sEV2vLJN3k341Ot8nwg.cer (raw, json)
Hash identifier: HE0XyBLMX3C9i9ddIZQa61GCkUMONfx3Tj25CQTwKRw=
Subject key identifier: 1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B21BA35461882F616FF6D8AE087388
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209988
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1b:a3:54:61:88:2f:61:6f:f6:d8:ae:08:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:b8:14:73:fb:2b:be:76:ee:31:d5:9d:e5:
06:1c:fe:27:42:95:6a:18:96:79:ba:2e:55:16:fb:
66:26:02:16:ec:55:6a:b6:48:e8:e2:a0:b0:62:ed:
11:37:f1:e6:03:b4:c7:73:90:c5:d4:8a:0a:8b:8c:
97:0f:e3:01:a7:fb:74:cf:64:a2:e8:e9:eb:2a:5d:
6f:60:98:73:34:40:cd:7c:c8:aa:03:6a:43:ce:da:
09:af:d6:b7:94:44:ae:63:4f:28:02:6e:c1:8f:5c:
53:a6:f7:e4:b2:43:ad:fc:f9:1c:f9:f0:32:f6:33:
49:6f:f6:09:cb:61:ce:df:c8:4d:f5:b2:29:0f:dc:
94:31:65:bc:cd:f2:bb:aa:d1:94:e6:d9:a2:89:21:
08:46:71:5f:0c:7e:c7:57:24:cd:7b:72:e4:d7:73:
9d:6f:bc:cb:9e:c4:8a:c9:39:c7:4b:30:18:fe:48:
39:0c:3e:80:40:ce:97:9a:f3:58:06:33:9b:53:42:
16:ce:1c:ee:ff:4d:c3:e9:64:ea:b7:ba:99:a5:1c:
78:a4:3b:c3:12:e9:90:1e:b8:91:80:c5:13:a5:d8:
12:1d:45:62:b7:62:fc:da:ef:52:64:93:b8:7f:9b:
90:69:c3:a5:12:f8:13:93:51:57:96:c1:f6:9b:2f:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209988
Signature Algorithm: sha256WithRSAEncryption
a3:06:fa:0f:e7:29:b2:74:bf:30:35:60:cd:cd:c6:52:18:8b:
b2:e1:03:78:d9:77:d3:ec:d2:b8:bc:5b:b9:3f:04:58:79:59:
a1:27:47:8c:f0:5d:1a:8f:e2:09:06:50:1b:da:d8:f5:d4:05:
8a:4a:40:84:24:d7:7c:cd:1b:d1:2d:47:bd:95:59:36:a5:df:
52:6b:d7:bf:52:49:4f:b8:03:dd:f8:b9:49:3b:5e:7a:e1:1c:
9c:a2:de:03:f6:33:2a:8d:38:60:e5:77:e8:3f:20:f4:bb:1e:
8b:bb:f5:dd:a5:de:23:0b:e8:d8:a8:1c:45:8d:00:30:0a:93:
e4:dd:8a:55:83:bd:8f:bd:38:dd:38:8a:4f:df:59:1d:af:89:
bd:ef:a3:ba:e5:74:f1:b2:9f:81:53:3a:7a:a1:40:b3:70:02:
71:d4:c1:15:74:8c:cb:24:ea:dc:68:e6:12:5e:d3:4d:9e:7b:
cd:b8:de:cc:c2:da:00:7e:c0:c2:7b:05:a3:74:d2:98:d8:2b:
9a:9c:52:5e:07:e4:bc:cc:b9:60:67:0d:1b:8f:d1:fb:30:a4:
7a:0a:03:f7:9a:53:92:8c:08:f0:32:64:21:12:a4:cb:ee:db:
d9:ae:5c:36:1f:12:b5:99:bb:38:d9:39:ff:38:cb:90:68:91:
09:aa:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:48 2025 by rpki-client