Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hesz_RfSMvvmsq22bLCv4N7pA7A.cer
File: hesz_RfSMvvmsq22bLCv4N7pA7A.cer (raw, json)
Hash identifier: ++wlg0vlB8ZFRg+onRBtRv9mFUPQxu6X/wROOenll9U=
Subject key identifier: 85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B242C49A1A6C387364904620BB9CCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35200
IP: 176.123.62.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:42:c4:9a:1a:6c:38:73:64:90:46:20:bb:9c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85eb33fd17d232fbe6b2adb66cb0afe0dee903b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:d4:35:dc:b9:32:b8:af:e9:ab:3e:66:19:
4c:5b:3d:b3:ba:a5:c2:6f:cf:2f:24:54:cc:6c:7b:
7a:b6:05:48:ad:9c:48:a7:f8:99:2a:d3:03:ad:3e:
cb:65:c8:c2:e1:8d:7f:b7:76:f3:ec:71:f3:a3:7f:
5d:6b:0b:92:22:bd:8f:c1:49:2c:2e:b8:28:f7:49:
ef:00:19:10:ea:ea:ed:95:e6:f5:32:a4:7d:36:71:
f4:f6:21:05:54:89:bd:da:13:a1:69:2c:f7:0a:97:
15:c7:7f:b3:89:95:68:63:33:db:7b:c1:99:11:5f:
31:3d:28:4f:24:b7:35:dc:53:12:aa:51:62:c2:01:
af:04:73:02:c3:88:d0:59:85:61:b5:21:02:76:f6:
be:94:2f:96:79:25:de:17:94:44:9e:df:2d:c2:16:
c2:0f:3c:3b:8a:e4:f8:bb:86:cc:e3:03:49:da:82:
8a:01:e7:b0:3e:1f:39:42:04:7f:c8:55:57:44:a2:
78:ec:76:03:b5:ea:39:3e:3a:da:f4:3f:01:b4:ba:
c0:e5:51:4d:61:67:02:c5:27:a9:16:be:b3:7f:bb:
59:3e:a8:af:9d:ad:a0:1c:91:ff:64:e3:c9:c3:5b:
ba:ba:0e:5a:43:8e:7a:47:07:76:c7:b2:a0:04:1d:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.62.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35200
Signature Algorithm: sha256WithRSAEncryption
99:c5:1a:a7:af:f2:cd:69:0e:d2:41:46:f6:c3:2e:87:88:a4:
06:1e:42:2e:dd:14:fb:0b:5a:3f:cf:3c:8e:09:6d:bb:2f:75:
5f:9b:9e:b8:7e:a0:53:43:ba:88:f1:23:a5:16:e5:16:41:6f:
36:07:4d:0b:02:f3:43:81:c8:b1:10:81:45:65:84:0e:a7:1e:
9e:81:3a:0b:dc:13:33:e3:12:a8:9b:78:8a:7e:1b:ec:63:e7:
af:1d:ff:75:bf:b1:33:b5:a7:d3:1d:fe:c4:ed:85:f0:4f:0c:
85:d7:5f:b1:c3:d6:b6:14:08:2e:70:44:a7:ec:9a:16:ed:e0:
5e:ee:83:20:99:26:9d:1f:9e:4d:28:ba:97:5f:cf:9b:7e:98:
7e:a4:16:25:fc:8d:9e:94:37:83:e5:0e:8f:21:1e:76:99:08:
80:c5:06:0b:74:9a:62:3f:00:fd:b8:fa:56:37:86:99:0d:3a:
33:66:2d:fa:70:aa:31:f6:fb:5b:a3:7c:eb:9a:0d:5e:26:b2:
29:b8:b4:2a:8c:c9:47:b2:b5:70:c7:22:c8:a3:8a:ba:f2:c0:
a8:14:d7:c3:5f:54:56:93:8e:38:1b:11:7c:32:2c:8e:7b:2d:
ab:c6:cf:43:de:a9:32:ee:fe:9a:8c:af:e2:fe:7b:d0:5b:1d:
99:16:92:cf
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQhskLEmhpsOHNkkEYgu5zKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWViMzNmZDE3ZDIzMmZiZTZiMmFkYjY2Y2IwYWZlMGRlZTkwM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTLUNdy5Mriv6as+ZhlMWz2zuqXC
b88vJFTMbHt6tgVIrZxIp/iZKtMDrT7LZcjC4Y1/t3bz7HHzo39dawuSIr2PwUks
Lrgo90nvABkQ6urtleb1MqR9NnH09iEFVIm92hOhaSz3CpcVx3+ziZVoYzPbe8GZ
EV8xPShPJLc13FMSqlFiwgGvBHMCw4jQWYVhtSECdva+lC+WeSXeF5REnt8twhbC
Dzw7iuT4u4bM4wNJ2oKKAeewPh85QgR/yFVXRKJ47HYDteo5Pjra9D8BtLrA5VFN
YWcCxSepFr6zf7tZPqivna2gHJH/ZOPJw1u6ug5aQ456Rwd2x7KgBB1TpwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFIXrM/0X0jL75rKttmywr+De6QOwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2NlODI0
Zi03M2M5LTQ4NWUtOGVkYy04YTM4ZWEyYjFmNTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvY2U4MjRm
LTczYzktNDg1ZS04ZWRjLThhMzhlYTJiMWY1NC8xL2hlc3pfUmZTTXZ2bXNxMjJi
TEN2NE43cEE3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAsHs+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCJgDANBgkqhkiG9w0BAQsFAAOCAQEAmcUap6/yzWkO0kFG9sMuh4ikBh5CLt0U
+wtaP888jgltuy91X5ueuH6gU0O6iPEjpRblFkFvNgdNCwLzQ4HIsRCBRWWEDqce
noE6C9wTM+MSqJt4in4b7GPnrx3/db+xM7Wn0x3+xO2F8E8MhddfscPWthQILnBE
p+yaFu3gXu6DIJkmnR+eTSi6l1/Pm36YfqQWJfyNnpQ3g+UOjyEedpkIgMUGC3Sa
Yj8A/bj6VjeGmQ06M2Yt+nCqMfb7W6N865oNXiayKbi0KozJR7K1cMciyKOKuvLA
qBTXw19UVpOOOBsRfDIsjnstq8bPQ96pMu7+moyv4v570FsdmRaSzw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:06:43 2025 by rpki-client