Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer (raw, json)
Hash identifier: VAn9q/nWztNxEWeiSRC5FuD5andWzE0Hrh73wbizn6s=
Subject key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244531FEF353BB2430AAD3D3216D1FCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.254.224.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:31:fe:f3:53:bb:24:30:aa:d3:d3:21:6d:1f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:f4:4e:10:19:7a:3f:39:7d:d4:de:62:35:
85:8d:74:c2:bd:4e:28:f6:8c:14:d1:a3:42:9b:19:
32:06:f2:51:a7:dc:47:4c:38:c7:2d:60:65:97:98:
84:d1:fe:11:eb:97:52:5d:c4:5e:32:d7:c1:4b:42:
68:a9:e6:af:d2:66:ff:d6:df:85:af:32:b1:c2:f5:
be:43:60:04:25:19:da:18:5c:c8:67:27:b6:c5:ba:
81:44:a9:0a:45:e1:51:93:0e:31:6d:68:09:6e:bd:
e8:e7:93:3b:73:e0:a3:95:2f:81:13:7b:14:3a:41:
19:18:88:da:ee:79:12:b7:14:7d:38:4b:99:8e:b5:
b3:3f:fa:1f:7d:bd:38:9f:7b:a8:77:61:da:58:44:
0f:ab:61:02:53:1c:24:7d:3d:b2:d8:fb:e1:32:fa:
05:88:88:e9:87:cc:3c:53:13:86:3d:13:b6:ca:cc:
4b:60:65:49:eb:53:4d:85:a9:f1:e5:c6:82:1b:6a:
51:98:05:51:5f:ef:fa:19:0f:8c:fe:cd:c8:d5:76:
5e:c9:bf:77:ad:71:c5:26:00:13:1f:78:4c:a1:0f:
4b:33:f4:e0:f3:33:06:49:e5:17:24:ed:2c:eb:3b:
ca:86:67:ae:e4:bc:7c:be:46:4f:73:0f:cb:e5:28:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.224.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e3:64:d5:ba:89:7b:94:9a:75:0d:18:13:77:ad:82:92:13:
51:cf:97:79:d8:40:63:84:e6:f9:c5:0c:e0:88:15:fd:0f:e2:
80:39:f0:cf:8b:bb:d6:8f:26:9a:36:fb:8b:43:dc:7a:2c:c9:
a6:3c:b9:e9:57:b0:f6:6f:95:85:dc:9b:7b:eb:7d:75:47:75:
95:92:d9:a6:77:f8:87:21:a3:54:c2:d3:fe:8f:33:43:38:8c:
51:c6:68:6e:29:ab:8c:76:a1:eb:b6:f4:b5:88:9d:36:33:17:
d1:ec:a4:a9:a2:ae:72:fe:42:3a:51:7a:d0:24:7c:a4:19:1b:
6c:91:f9:9e:21:a3:7d:f4:e7:71:c6:9f:4f:e1:2c:d5:5e:72:
3b:2b:11:2e:92:a9:98:47:4c:f0:5c:e7:e4:de:ef:85:9b:4f:
e6:9d:fd:9a:34:aa:e9:06:aa:6c:55:7b:ff:35:93:37:31:66:
21:db:ca:3a:81:37:5e:75:81:f9:b1:b3:5d:8f:74:83:c7:4c:
7f:45:5c:52:50:02:fc:c9:3e:5c:56:fe:9d:c6:fe:40:e3:3c:
9f:c1:f3:64:72:f5:b7:f8:d3:67:22:e6:45:3d:87:3f:2b:aa:
4e:f7:fa:8b:3c:41:52:15:3b:51:90:cb:9a:d8:2f:6e:c5:69:
36:13:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:36 2025 by rpki-client