Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
File: HgKySJ9HE5YtEFESslJ264HxrJA.cer (raw, json)
Hash identifier: 02KfiDF4DtWBZQYGIGyfYaqaMJ22jgE7e39X0uXQAZU=
Subject key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3FBAE7709F2496C578486EB161F64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.208.64.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fb:ae:77:09:f2:49:6c:57:84:86:eb:16:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:7e:cb:b2:1b:4e:fc:72:0b:43:8f:f4:53:
c9:a5:4a:b2:7c:e5:cd:4a:50:cd:e6:48:e5:2e:de:
df:cf:2a:58:be:0b:f9:ce:b0:11:a1:ba:f5:62:6f:
69:66:4a:1a:27:1a:6c:df:2b:d5:f2:a4:2a:2f:bc:
d8:f3:01:44:27:a7:c0:96:af:8c:46:5d:43:66:a6:
43:5b:73:0a:8f:bc:08:4d:d2:5f:a8:08:12:22:6e:
b4:4e:0a:26:ed:33:49:c1:19:84:c0:62:13:e4:03:
d5:55:63:98:7b:84:c9:0f:fe:5a:65:ce:60:17:53:
cf:1c:6e:48:b5:5c:8e:0a:c2:e1:cc:6a:ac:72:bb:
ac:9a:23:0a:b0:34:c1:22:44:ae:61:37:3c:f4:c3:
66:58:2d:8a:a4:73:28:b5:b6:5d:17:cb:0d:30:42:
9d:dc:51:ea:c5:2c:e4:5f:13:c9:15:9a:cf:1c:2c:
7d:7f:4d:33:8a:ca:11:c0:67:d3:b9:27:ad:7c:e3:
ca:8b:7b:cc:3c:33:52:a9:f4:8a:38:7e:26:3c:5e:
8d:1c:83:a1:21:fd:d9:b6:1c:6e:00:3f:69:64:65:
82:1e:e5:5f:95:64:9d:5e:dc:8c:eb:85:fc:0e:74:
39:43:23:21:df:41:b0:3e:f3:3a:4b:fc:3c:98:67:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:eb:c4:22:bb:21:9e:8f:46:0d:40:52:28:37:fa:b1:3b:2a:
bc:a6:9e:cc:a4:02:73:66:b1:74:94:02:e7:b7:fc:0e:5a:83:
e8:00:e9:9c:49:34:dc:a5:b7:ab:d5:7f:a4:d1:02:cb:29:0a:
6a:ed:b3:f5:e1:43:21:76:e3:75:c2:73:73:9a:ff:e5:8c:ee:
64:8f:ad:54:77:2e:b1:50:99:1c:15:7a:9b:a2:d6:86:eb:18:
2f:e9:bd:e4:97:c5:cd:ae:88:38:8d:7a:da:f3:4e:01:0b:67:
19:3d:f0:c8:50:aa:28:99:68:0e:62:79:71:ac:84:c6:00:dd:
9d:a0:29:40:da:55:4b:b0:eb:af:e6:ad:40:40:72:28:56:99:
9b:4c:1f:79:75:e5:36:e8:6b:ef:3a:79:99:89:16:9d:86:19:
98:7c:8e:7b:8d:9f:90:01:21:ed:8e:a9:71:58:95:61:9b:57:
61:f3:50:b0:6e:8c:ba:cc:f2:04:64:5e:e0:17:26:bb:0e:e6:
05:9e:7e:f4:4b:ad:0d:ef:9d:cb:49:69:94:a0:1b:43:27:10:
cd:7e:5a:88:9f:7a:5a:ef:b6:b3:00:81:68:79:8d:21:a0:01:
f6:f4:32:91:48:83:00:95:87:81:31:3e:31:13:ab:59:b0:04:
c8:db:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:24 2025 by rpki-client