Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer
File: Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer (raw, json)
Hash identifier: StCpfvWJrJplW3SUN70c30OjaoyQts7TCFTrBKwfI+M=
Subject key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FC9DCEE67BD4F6CB33B65D89727DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:a14::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c9:dc:ee:67:bd:4f:6c:b3:3b:65:d8:97:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:6c:84:ff:a9:a6:3c:3b:67:ce:fd:65:f8:
da:de:3c:8b:1a:3e:de:f1:bb:69:67:aa:7d:37:a6:
a9:13:76:90:56:77:00:15:29:e8:c0:0a:04:21:93:
3f:c8:5f:0c:45:0f:c5:15:58:d7:89:ff:03:a4:eb:
1a:4c:a1:45:d8:ed:a6:97:fa:64:3f:a5:51:2b:b3:
1c:8a:c3:78:ea:22:78:b6:49:3e:2c:72:52:85:54:
43:a8:25:39:86:93:96:9d:3d:2a:58:68:96:9f:e0:
eb:2b:bd:00:74:f5:5f:ba:45:5e:00:ca:e6:2d:11:
2c:04:3a:d5:95:c8:00:51:1c:a3:f2:52:af:e6:a5:
a6:c6:bb:ab:b9:87:dc:ee:a1:3d:58:3e:9d:72:63:
c7:87:f1:7e:a1:46:0e:74:3a:0a:98:57:7a:7e:64:
23:d6:5c:48:da:28:6c:e6:61:2d:98:a7:b8:77:ad:
d1:93:15:08:f6:c0:23:65:bc:c2:93:6c:64:68:cf:
07:64:00:ad:ea:ca:6e:31:ba:70:16:53:82:86:99:
b1:4a:da:69:66:7f:a5:23:e6:cb:b0:0b:3d:58:b5:
c6:76:34:d0:4f:c9:d1:df:7b:77:68:61:00:34:ca:
2a:6f:71:76:a1:b0:1f:47:06:ed:8e:0d:fc:66:05:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a14::/48
Signature Algorithm: sha256WithRSAEncryption
a8:90:bd:32:b2:96:18:62:95:ed:9f:d7:8c:ba:ee:ec:ac:2e:
d5:e5:9a:1d:e4:f1:29:93:aa:c8:1c:dd:0a:cc:a8:5b:68:7f:
8c:eb:2f:61:14:9a:e3:1a:04:4a:7e:55:92:5c:0b:cf:ce:a7:
8c:2f:5d:28:0a:81:90:13:43:ba:79:ab:31:b1:66:c3:4b:c4:
f4:20:f9:47:eb:bf:24:c6:dd:87:00:d3:b8:16:61:bf:03:60:
d3:9e:6e:75:b5:66:89:2f:f0:66:7e:ec:f4:11:12:fb:34:e8:
ea:01:46:4b:e2:c8:95:06:22:4f:6d:95:de:05:5b:47:55:30:
bb:ae:49:12:b3:e1:c1:0a:2a:10:aa:6e:21:32:49:a7:4f:5d:
aa:d1:03:22:4c:4c:a3:06:b9:aa:90:26:f0:63:1f:43:77:00:
e6:e4:9d:4c:31:42:e7:2e:a6:be:70:c7:e8:25:d1:52:8d:ab:
9b:2c:50:ea:a7:ef:9a:fd:c1:c2:41:6a:26:bd:82:34:a0:cd:
1c:a4:8b:a1:22:68:c2:88:4a:84:80:e4:73:b6:16:a6:54:14:
24:89:6d:53:2f:fc:54:71:27:5c:9c:5f:4e:f4:0b:c8:a6:92:
95:71:22:3c:a1:c1:19:d5:9b:e6:96:9a:de:d8:c6:5d:55:9e:
59:07:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:07 2025 by rpki-client