Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.cer (raw, json)
Hash identifier: 7diedRJe5sjlUl3Mkwb0q/OWt7UbswqIGNGAVvH9GEQ=
Subject key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F621DAE355B69AAD654F5DFD65AA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43882
IP: 79.133.160.0/20
IP: 2a09:5a80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:62:1d:ae:35:5b:69:aa:d6:54:f5:df:d6:5a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87943cb86e3a703813778fab790d65f0da21615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:37:af:14:15:c7:63:45:54:86:87:37:64:
44:0f:65:5c:96:c1:69:07:3f:2d:dd:ed:c8:76:ac:
08:e7:b0:8c:69:9c:e5:9b:8b:3d:a4:38:5d:a0:20:
94:d7:51:aa:33:8d:ff:17:92:39:e9:d4:4e:48:15:
c3:68:66:e5:85:20:7e:bd:d7:77:6a:95:dd:1e:3b:
5f:52:10:03:78:8e:84:13:8a:ee:c7:85:18:20:97:
1f:e4:11:28:4d:96:a4:28:ca:f3:a9:e5:d2:71:e5:
24:7e:8b:5b:24:cb:59:d4:9e:25:ac:17:85:c7:17:
67:ae:95:44:51:7b:7f:99:d5:7e:cd:fe:34:b9:cc:
6b:2b:fd:0c:d7:32:3c:25:7a:d6:34:06:84:b6:15:
c4:04:1f:bb:37:14:e4:50:b7:4f:7d:5c:e9:61:0d:
6e:c8:0f:a8:54:66:03:e7:b9:5b:77:18:be:e7:a3:
21:1b:56:a3:7c:4b:3c:ed:ec:e4:45:84:25:cc:f7:
ce:16:91:fa:8a:2f:d6:3a:cf:69:68:ae:65:ef:f0:
00:51:b3:70:20:44:4b:e9:1a:74:0a:4b:54:80:dc:
bc:ab:98:15:b9:43:b8:2e:d5:a0:ce:7f:37:3b:88:
7c:21:dc:88:61:70:2e:f6:8b:c1:3f:5a:04:88:b8:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.160.0/20
IPv6:
2a09:5a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43882
Signature Algorithm: sha256WithRSAEncryption
a6:a1:63:72:63:46:42:fa:ee:07:56:08:a5:0c:29:c2:df:68:
82:e6:ca:7d:9b:dc:ca:72:c5:fc:83:12:6f:5e:f4:fd:3e:34:
a4:9b:15:7f:8d:41:75:fc:29:73:9c:fc:ac:f5:fb:da:27:59:
8b:51:f2:13:84:03:64:d6:d8:d6:6a:dc:1b:52:c6:72:24:33:
9d:5b:40:a3:e7:4e:f2:02:97:1d:21:75:a4:d2:fb:e6:2e:cd:
8d:af:18:a6:ec:1c:d1:98:d6:b3:08:54:9e:c3:0e:b5:b9:26:
57:fb:36:c1:98:c8:35:6d:d0:f3:a0:3d:39:a0:c8:eb:77:a7:
73:45:c9:90:b7:c5:65:6c:06:ae:7c:2e:63:1e:3d:83:09:9b:
c5:32:95:79:01:e1:c1:21:ea:94:a1:6a:a5:29:26:ae:df:45:
45:ea:56:7b:02:b8:3e:3e:e3:74:ed:14:a9:11:8f:db:25:fd:
8e:f9:02:5f:9d:c6:d9:89:1d:25:65:b5:89:09:0c:b3:9b:73:
a8:3b:0c:0a:59:b0:96:10:ba:a9:18:71:41:50:d9:76:14:c6:
59:6d:ee:6b:7e:1f:66:71:ef:13:92:84:0b:1c:90:55:a8:fb:
cf:6b:25:50:7b:ad:33:2e:aa:f3:9e:30:48:ca:63:a1:90:09:
50:39:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:30 2025 by rpki-client