Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
File: HkXMabTR7hUbUCdEL7upRMJ035c.cer (raw, json)
Hash identifier: djLgC+1Oiwk6gy5FdYO99lzSe7v6PPyG5Qi0wmn4t4c=
Subject key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6166F281485464A81E8342CB057BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213376
IP: 2001:678:d08::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:16:6f:28:14:85:46:4a:81:e8:34:2c:b0:57:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:78:52:d5:ed:a8:4b:18:21:a0:e1:4c:fb:
91:07:42:5b:37:7a:91:aa:a4:07:19:e6:eb:08:5c:
94:f5:de:5a:19:97:c7:a9:14:d9:80:ec:68:90:ca:
f4:41:a4:a8:42:23:97:aa:38:09:05:c0:d8:21:48:
35:69:2b:ca:0b:55:e7:ca:50:07:e9:4b:e4:b9:75:
1d:d2:f0:89:5a:a6:65:fd:7f:c9:74:97:29:23:78:
57:82:95:71:dd:02:e6:2b:72:b7:d9:6d:8d:5c:51:
4d:87:4d:50:00:d8:14:15:ff:84:7b:be:b0:d9:76:
5e:26:99:d0:d1:c3:b2:a9:f1:62:92:fe:62:b9:5c:
6d:44:7c:e3:f9:07:14:f3:e9:72:ee:05:c7:23:4c:
e5:b5:31:57:4e:5c:43:03:04:6f:70:c2:9b:7a:eb:
89:61:be:0e:bb:53:93:b8:3f:67:38:87:b7:fb:32:
69:15:d4:4e:32:8a:31:77:da:8c:7c:75:5c:1a:39:
54:58:05:94:f6:71:96:fd:7c:77:29:dd:72:52:58:
41:7b:d6:9b:2f:12:22:18:0e:1e:6c:b8:56:3d:42:
a4:d5:99:fc:a0:d0:63:e3:4a:b1:d7:65:16:bb:5b:
60:1a:51:58:01:e5:3e:b9:f6:6f:c4:54:c8:5d:da:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d08::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213376
Signature Algorithm: sha256WithRSAEncryption
28:5b:7b:d7:58:0a:67:19:5b:b8:e3:12:c5:af:1e:8f:e3:fe:
e0:a6:b9:bf:8e:0b:b1:9d:ba:61:d7:77:8d:a9:31:94:2a:9c:
b4:b8:81:d1:6e:47:19:80:fb:36:5c:d3:40:4f:14:15:33:94:
29:22:7e:67:17:b7:15:43:f5:7c:35:07:a2:24:75:d9:96:64:
6d:71:a8:5f:32:d6:f7:cb:01:3b:6b:d3:53:aa:84:30:df:7d:
03:5c:b5:98:aa:85:17:27:83:8b:9e:39:7b:66:ef:6f:0d:e0:
f6:4c:96:3c:c7:20:ac:24:2c:fb:8e:bd:2a:53:f7:32:86:16:
ad:4a:c6:3c:a2:ff:99:19:e7:37:b0:ba:75:ca:4b:9f:21:69:
fe:5b:86:d8:bc:03:ca:67:7c:35:b7:55:6f:f0:a8:81:85:0a:
49:8b:b0:57:c4:b5:11:a8:01:2e:ca:70:ea:68:1c:91:c1:fd:
1c:8c:bd:9c:cd:2a:5f:ce:b7:5c:16:22:d4:c7:fd:6a:d0:c0:
cc:46:ac:91:92:45:36:ed:f4:c6:1a:41:e8:0c:88:38:2f:ee:
19:0b:46:c6:fb:53:4f:2b:3f:0e:5f:9b:e8:67:57:b7:9c:5e:
da:44:24:31:20:9c:38:75:d5:39:a6:42:5b:58:cd:12:5f:6f:
f5:e2:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:27 2025 by rpki-client