Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
File: HyAOBxBBRee6mHap0-55Kgc2TTY.cer (raw, json)
Hash identifier: HayBihqaSjpNH50ab7hRLWi9vUkjZugq56dlYXRTkgI=
Subject key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425214D14BA4738CBF966215C3524F452
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60614
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4d:14:ba:47:38:cb:f9:66:21:5c:35:24:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:38:23:ae:6c:a4:73:8a:37:fa:fd:d2:aa:
ed:e1:0f:8a:ae:84:23:c6:e9:04:3e:1c:5e:e9:7a:
cf:29:38:8a:02:5e:4a:42:67:95:01:b8:df:2d:12:
1b:a6:2a:46:8b:b6:cd:e3:e0:4a:ca:fa:28:16:b3:
7b:d0:41:36:0d:2a:33:91:5c:98:b7:f7:bc:44:c2:
5c:1b:22:68:2c:ef:47:12:af:cb:58:e7:df:01:85:
12:72:b3:58:50:0a:79:4c:1a:08:9b:80:ea:2e:ce:
16:d9:cc:17:d9:b7:d8:77:5f:66:d2:f0:88:f6:f8:
73:ae:4a:77:21:c5:f7:dc:c4:cf:7e:c8:bc:4e:73:
07:e1:1b:97:30:11:68:29:7e:04:39:71:ca:ec:47:
d6:a8:ef:a7:97:10:c1:cd:05:ee:a6:51:1c:b3:ba:
da:0c:b2:f5:37:c0:1e:d1:39:a2:37:cc:4b:2c:b6:
ad:68:cf:d5:36:0d:89:65:74:bd:e4:4b:97:ed:c2:
dd:b8:4a:cc:24:59:32:4e:ee:de:18:71:db:9a:91:
12:b8:a1:e5:1d:40:80:88:d4:05:48:16:51:d9:61:
58:0e:ea:4b:82:cb:12:ab:0d:98:48:9d:c1:6b:48:
8f:26:c3:7d:0a:2e:45:26:98:00:77:cf:53:d7:9c:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60614
Signature Algorithm: sha256WithRSAEncryption
96:09:e4:a5:65:21:1e:db:77:73:11:2f:a1:e6:32:a7:f9:80:
3e:ee:22:a3:ff:f0:06:f8:1a:17:e2:83:41:5c:28:22:64:b5:
18:fd:e0:c6:d7:9c:bc:1f:ea:96:dd:6e:5e:7e:27:35:99:59:
67:e4:ae:a3:d7:72:dc:3a:82:a6:92:10:8e:f6:a4:93:7c:0c:
21:07:79:59:55:73:b3:cd:36:4c:76:92:a1:b6:88:da:53:f8:
9e:fc:d4:e7:40:46:7a:05:8a:ca:14:79:1f:a8:49:3c:9b:b6:
c4:8f:a1:9f:e1:b3:56:1d:5c:71:99:6b:8f:d9:4f:ff:52:43:
3c:79:dc:55:79:2d:a7:43:5c:a7:24:45:df:13:90:7d:cf:a7:
28:c9:73:31:eb:dd:7e:60:7b:d9:a9:3c:d8:49:3f:3f:f9:02:
6c:5c:15:23:fe:e7:9d:30:8c:7c:d8:bc:a8:f9:29:73:09:13:
09:af:07:51:2e:cc:31:63:4b:e1:9b:f1:34:e3:94:d4:89:af:
ca:fe:9f:7a:3e:6c:d1:56:c6:09:0c:5e:46:6c:38:08:6e:48:
dc:1c:13:8a:6b:11:84:68:48:e3:b7:00:1b:40:81:65:43:68:
f9:9d:0c:bd:77:6c:90:30:0c:ed:db:84:69:f0:6c:c7:8e:ac:
82:1f:c0:f6
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQlIU0Uukc4y/lmIVw1JPRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjIwMGUwNzEwNDE0NWU3YmE5ODc2YTlkM2VlNzkyYTA3MzY0ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXw4I65spHOKN/r90qrt4Q+KroQj
xukEPhxe6XrPKTiKAl5KQmeVAbjfLRIbpipGi7bN4+BKyvooFrN70EE2DSozkVyY
t/e8RMJcGyJoLO9HEq/LWOffAYUScrNYUAp5TBoIm4DqLs4W2cwX2bfYd19m0vCI
9vhzrkp3IcX33MTPfsi8TnMH4RuXMBFoKX4EOXHK7EfWqO+nlxDBzQXuplEcs7ra
DLL1N8Ae0TmiN8xLLLataM/VNg2JZXS95EuX7cLduErMJFkyTu7eGHHbmpESuKHl
HUCAiNQFSBZR2WFYDupLgssSqw2YSJ3Ba0iPJsN9Ci5FJpgAd89T15yedwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFB8gDgcQQUXnuph2qdPueSoHNk02MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzQ2ZGFi
Zi05NjI2LTRkMWYtYTg5ZS03NzVhN2VjMWNhMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNDZkYWJm
LTk2MjYtNGQxZi1hODllLTc3NWE3ZWMxY2EzMy8xL0h5QU9CeEJCUmVlNm1IYXAw
LTU1S2djMlRUWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDsxjANBgkqhkiG9w0BAQsFAAOCAQEAlgnkpWUhHtt3
cxEvoeYyp/mAPu4io//wBvgaF+KDQVwoImS1GP3gxtecvB/qlt1uXn4nNZlZZ+Su
o9dy3DqCppIQjvakk3wMIQd5WVVzs802THaSobaI2lP4nvzU50BGegWKyhR5H6hJ
PJu2xI+hn+GzVh1ccZlrj9lP/1JDPHncVXktp0NcpyRF3xOQfc+nKMlzMevdfmB7
2ak82Ek/P/kCbFwVI/7nnTCMfNi8qPkpcwkTCa8HUS7MMWNL4ZvxNOOU1Imvyv6f
ej5s0VbGCQxeRmw4CG5I3BwTimsRhGhI47cAG0CBZUNo+Z0MvXdskDAM7duEafBs
x46sgh/A9g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:51 2025 by rpki-client