Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.cer (raw, json)
Hash identifier: ZUq0YFj57sM5Q/vd1B/QaoyyKXXpSTK2kgzqQLz+cUQ=
Subject key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B62618910C955311A0BAFF23C1185C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57531
IP: 91.232.188.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:26:18:91:0c:95:53:11:a0:ba:ff:23:c1:18:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:e4:7c:9c:a2:47:d5:45:66:f7:0c:73:95:
34:45:13:ac:31:50:3d:0d:66:60:0b:f8:3c:f7:2a:
f6:e8:0d:c0:af:88:82:0d:3d:0e:ab:aa:ed:a4:cf:
50:74:e2:1f:59:f2:0e:a5:06:1e:70:ca:d2:82:57:
64:9f:43:d3:1e:db:06:b8:3e:5b:bf:20:c6:e0:e3:
24:71:7e:3b:bf:d3:0e:ec:f8:8c:d8:c6:fb:99:1c:
35:9d:9a:af:7c:9c:bd:46:f8:36:d9:d9:0e:8d:36:
40:2a:37:24:65:ad:ea:e0:dc:fd:ed:64:f2:ee:3d:
cc:7d:3e:7e:04:49:51:4f:35:9e:81:00:fd:b9:c7:
c2:16:16:27:33:46:3a:4f:f1:7f:2b:46:38:04:1d:
3d:10:aa:85:8b:f4:1c:66:c0:e8:0d:5d:b6:53:c1:
c0:6e:dd:13:05:ba:35:67:f4:f4:a1:9c:80:63:46:
e9:c7:49:6f:62:fb:5e:bf:6a:b0:17:ea:4a:74:5c:
a1:2e:e3:09:d2:c1:b4:1f:ad:1e:9e:f5:cd:97:ed:
a7:09:68:20:c2:0a:ac:1d:89:2c:50:43:75:16:e9:
e9:43:c8:ae:7a:64:2e:0e:d5:db:67:90:2d:2c:5f:
ab:84:13:49:88:15:3b:1f:23:26:bc:cc:7e:c7:ba:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.188.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57531
Signature Algorithm: sha256WithRSAEncryption
21:cc:20:9a:99:27:99:6a:eb:47:eb:a2:9d:4e:8a:1b:ef:ee:
12:87:0c:df:0a:91:6a:ad:69:fb:75:a8:d1:16:2d:0a:34:32:
bf:44:32:e1:62:30:8a:ce:bb:e4:b9:38:f3:f2:1e:90:6b:3a:
5e:fa:1b:c3:9a:09:cf:51:a2:b3:08:88:2a:8d:7f:71:34:ed:
6d:91:e0:9c:e5:d3:2d:bf:da:6b:f9:c2:37:6b:0b:b4:6e:25:
d6:8d:9e:00:fe:01:55:80:c6:bc:80:8c:1b:c3:40:a8:df:3b:
73:27:fc:d3:bb:64:5c:d7:08:9c:ce:cc:82:16:92:94:b1:c1:
94:50:de:f8:42:4a:97:76:e4:7c:e2:39:81:2d:45:4e:47:2b:
4f:f3:1c:76:1b:4d:0a:75:69:58:0a:80:03:56:1a:12:59:2e:
b3:b0:3d:c7:9e:de:a2:48:91:0c:54:fc:0d:50:ae:31:86:e3:
00:d2:78:03:63:e4:62:42:34:38:27:9b:db:eb:58:6a:7a:69:
55:8e:81:47:cf:cc:5b:bd:54:f2:28:78:49:e8:4a:63:66:af:
29:db:90:48:d6:8c:25:de:6b:c6:77:38:2c:65:9a:40:ae:2a:
f3:1b:9b:8e:42:68:d7:76:fa:33:8b:28:f0:98:a0:10:c3:4b:
0e:a8:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:24 2025 by rpki-client