Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.cer (raw, json)
Hash identifier: X9JkuPbI537F2sTYI9bVIrfVWsd/RsQ8AbWNHJn0yOY=
Subject key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423698F99AA105126CB8A0C6620EEF795
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.227.44.0/22
IP: 193.111.252.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8f:99:aa:10:51:26:cb:8a:0c:66:20:ee:f7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:24:9c:f8:9e:20:77:54:a7:d8:d5:52:d8:
62:dd:58:00:c6:78:cb:91:56:a2:80:64:42:06:79:
df:c5:96:8a:7e:5d:39:ac:87:84:28:5a:e3:84:ac:
c1:2d:7d:bc:e9:e3:ec:cd:51:c9:d7:74:33:af:37:
e5:de:d6:fe:1e:40:fc:46:db:8d:fa:a9:e5:e2:23:
78:17:37:43:09:58:10:c4:a1:a5:95:ec:68:de:41:
11:5f:e7:27:2c:f4:73:6d:b6:75:48:b1:14:2b:5b:
8c:d9:38:ef:49:38:57:27:30:8b:d8:a8:7a:f3:7e:
21:f0:d1:03:b9:f3:a3:d7:99:63:e7:d4:5e:e6:5f:
9e:e8:0d:78:96:f4:ba:75:72:cb:c8:37:65:46:68:
c6:44:bc:45:0e:61:f5:76:33:1f:ec:3f:20:bd:12:
0a:26:91:56:de:1f:10:2f:29:02:d2:7b:a5:20:8e:
ea:4e:d9:02:6a:d1:46:d9:5a:90:fd:1d:46:4a:93:
fd:a6:88:45:8a:4e:73:be:e2:93:c3:54:16:be:fc:
ff:02:de:23:dc:c6:2b:dd:fd:c3:00:90:a0:7f:5a:
f1:8e:b6:ad:98:f2:01:d7:ed:5d:c8:2a:78:43:03:
7b:9d:ef:af:35:68:e1:e3:27:b0:53:6e:fd:27:a7:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.44.0/22
193.111.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:5d:be:d1:19:55:2e:89:82:61:cd:9c:13:16:55:ce:ea:9a:
c0:33:bd:9e:b9:cb:40:a2:4d:ec:82:8c:d3:b9:d9:8a:3b:d9:
b5:90:09:9c:c1:1e:2f:d7:c9:37:e1:72:ae:c7:98:27:ea:69:
8a:fa:07:a2:87:4e:34:ac:c2:f0:aa:bd:77:30:d9:69:ee:b4:
55:db:f7:f3:4d:96:25:7e:dd:db:fc:84:00:6c:54:18:3c:77:
b8:4e:da:92:f5:59:48:28:32:03:6d:f6:af:50:3d:34:11:0b:
45:03:de:23:4c:88:0b:68:a4:98:5a:45:31:98:f1:06:03:53:
a2:7d:14:94:40:00:eb:e8:fb:85:38:b6:c1:74:aa:ad:d8:ee:
e6:cc:5a:fe:44:72:21:3d:51:7e:28:19:5c:9f:4a:17:fb:e7:
05:91:43:f4:39:40:2a:46:91:93:46:30:41:7f:f4:f7:ed:bf:
b3:77:f2:e3:c3:26:ab:83:5f:de:ac:7f:11:b9:9c:a2:f9:78:
af:e7:e5:ac:a0:f0:f0:2e:96:97:4b:d3:e2:28:29:0b:d6:83:
b9:72:1e:86:b7:fd:8f:a8:58:53:a8:ce:8a:5a:e4:0a:3e:72:
4a:8b:16:cb:7d:5f:8b:e5:18:12:f5:f6:7d:d3:1b:e1:f3:a0:
d2:a0:69:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:46 2025 by rpki-client