Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer
File: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer (raw, json)
Hash identifier: qsVJtxYYQQLHGH6Fds76VSdCFs+rEA1WhqVhowLl3go=
Subject key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA9EE75F268E43C7AC58FC909847A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208013
IP: 5.182.0.0/22
IP: 2a0e:7800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:e7:5f:26:8e:43:c7:ac:58:fc:90:98:47:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:78:54:2e:24:bf:7c:e7:51:df:bb:cf:2a:
8e:ae:a7:39:7c:74:f0:cf:81:52:3c:f8:6d:d5:e9:
75:36:7e:11:34:3a:bd:38:3e:02:a5:e5:05:f1:7d:
26:ed:56:41:93:bf:a4:31:a2:31:bc:dd:9d:b1:90:
aa:92:b2:28:d4:89:10:a0:b6:38:1d:64:70:6d:c7:
a1:43:f0:72:70:c8:59:06:16:f8:43:96:c9:94:4c:
9c:23:d7:c5:ac:71:95:44:70:9c:e4:43:6d:a5:6f:
e6:dc:18:01:90:2c:48:1d:9f:6e:e4:fe:1a:0d:75:
c5:6a:16:2a:80:27:c6:1c:8d:22:8b:23:87:5f:61:
11:44:f8:31:46:a8:63:c5:aa:9e:6d:e0:b2:38:4f:
ee:1e:8f:71:82:7e:5d:f1:d7:be:dd:e9:6d:85:46:
7d:9f:70:b7:1f:f6:ef:dc:87:ff:e5:e7:77:8c:29:
97:c0:92:19:78:70:b8:01:3c:53:b8:5e:39:1d:17:
7c:7b:f2:66:77:12:5e:3b:cf:43:c2:4d:de:98:27:
68:3e:13:f8:9b:da:08:cc:22:bc:00:30:ae:56:fe:
85:dc:fa:1a:f9:93:ce:b0:f8:fb:c3:a8:93:e1:e2:
12:cc:34:d2:aa:5d:2e:97:55:2d:fb:19:f8:5b:0e:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.0.0/22
IPv6:
2a0e:7800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208013
Signature Algorithm: sha256WithRSAEncryption
96:c0:36:af:f6:a4:49:46:7d:ff:3f:a7:12:4d:35:33:78:dc:
c1:bd:cf:e7:1a:45:88:30:7e:e8:c7:3f:10:9f:8a:e0:25:82:
29:fd:26:d9:79:a5:06:b1:27:1e:64:9a:e4:bb:2d:61:53:c1:
97:31:b7:f1:3d:16:17:fb:37:ed:63:54:08:63:31:82:5e:df:
b8:f5:b3:2d:03:ae:7e:a4:07:6a:ec:8f:c4:d9:43:45:c9:9c:
6f:b2:aa:b2:84:d5:9a:08:6c:70:a4:04:00:31:87:4d:b0:28:
91:c7:fe:f7:28:ce:bf:2e:45:c8:2d:f2:31:91:9c:ef:28:94:
e4:00:d8:14:1d:32:28:12:4d:1b:c8:94:08:4a:c3:1a:d0:dd:
f2:f7:6a:1e:dd:f5:66:4f:5f:7c:f7:78:96:ed:66:8d:2b:4e:
33:22:e4:6c:de:d0:36:b8:3f:23:6b:7c:2e:21:f7:ee:08:7e:
45:12:2b:34:b1:27:6b:85:b9:f5:a8:0b:10:ad:e2:d9:02:d1:
2c:08:ef:36:63:ca:e0:fd:0c:58:d5:71:87:f9:32:e5:c1:4a:
de:3c:33:21:1c:4a:8e:73:c1:29:3b:16:8f:4a:b4:15:08:7e:
77:cf:83:5c:d1:15:4c:fe:88:ee:0d:ae:ef:f7:d4:6f:6a:b0:
8b:39:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:48 2025 by rpki-client