Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.cer (raw, json)
Hash identifier: xWZIigbQm7NfMWsx6BXvwUSfJ1Os12CKEHj8/oIuZxk=
Subject key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3BA5A2B726D9F57BE468FA6AE0ED6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212041
IP: 31.43.186.0/23
IP: 37.153.140.0/22
IP: 193.169.104.0/24
IP: 2a10:c580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ba:5a:2b:72:6d:9f:57:be:46:8f:a6:ae:0e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:2d:6c:95:10:9d:6f:2e:fc:6b:cb:25:84:
b9:a8:30:b5:19:41:b7:bc:8c:f8:62:a4:a7:f5:58:
14:40:d8:9c:83:a6:71:45:fe:fb:f7:65:df:73:36:
24:a5:49:5f:f0:b7:f8:9d:f4:4a:7c:dc:59:a0:1c:
c2:6a:f5:0a:bf:df:82:2d:a0:37:80:3b:26:96:28:
b3:86:09:40:02:5b:90:3a:74:6c:32:07:76:3b:5f:
88:a6:0b:8d:be:6d:a1:82:df:be:f6:46:59:38:97:
4a:2c:86:ce:71:c6:f8:4c:24:9a:a8:33:06:3a:57:
fd:1c:6f:7a:fc:ef:e2:f5:bd:84:1d:f0:99:f9:56:
03:e2:4f:79:e5:5f:35:10:23:2d:5e:46:de:b9:bc:
25:52:15:60:eb:c7:23:59:a9:f0:ee:7d:f4:4c:e7:
30:32:50:6f:ff:94:c2:6d:da:71:69:67:1c:f9:67:
21:f6:db:fe:4f:c8:0e:74:eb:d4:db:d7:a7:9f:cc:
c7:ac:07:fc:ad:66:74:ee:8e:e5:6d:e1:c8:7a:4c:
68:85:13:10:cc:da:db:3d:de:53:0c:d4:3b:01:be:
3c:c2:03:6a:6a:e5:47:b8:05:b1:e2:cb:a8:ca:6e:
4c:e5:08:0e:ec:7f:fd:64:6d:8c:e9:c9:1a:41:a5:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.186.0/23
37.153.140.0/22
193.169.104.0/24
IPv6:
2a10:c580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212041
Signature Algorithm: sha256WithRSAEncryption
10:3d:07:6d:ba:9d:1c:46:d0:68:28:2f:99:83:4e:67:0f:a6:
13:ef:e7:75:9a:58:eb:98:20:6f:d7:16:cb:e3:b0:67:62:bb:
8f:0a:93:0e:57:f4:5c:ee:bb:90:7b:e5:39:f0:2f:43:91:78:
c7:5b:42:da:ec:d1:53:2b:de:cd:39:10:83:62:20:7e:02:7a:
f0:42:1c:24:30:1e:93:8e:0f:31:81:f8:43:fe:18:51:b2:da:
77:a1:ca:12:b7:75:fc:ed:33:9c:15:5d:11:08:9a:b5:49:36:
6c:64:2e:57:ab:ce:33:1b:0d:92:1f:0b:66:c6:ee:8c:0d:3a:
77:9b:9e:3c:1d:cd:a0:da:48:b2:90:93:e0:76:88:ee:09:8e:
21:30:e7:24:26:25:db:e1:ca:f0:18:75:c8:32:ce:ef:5f:f4:
3e:b7:a1:00:dc:61:b0:20:ec:c2:74:aa:64:2d:09:d4:ac:70:
e2:04:40:66:c3:83:07:1f:8b:2a:d1:6b:24:52:f3:cd:0b:71:
88:ff:15:e0:1b:0a:98:2b:fe:3d:81:fa:2a:58:be:bf:51:a0:
56:2d:b3:e3:71:54:10:6a:9a:44:92:2f:1b:db:30:f6:50:45:
2b:cd:07:b5:53:33:68:34:c4:5c:1b:88:69:48:63:ef:b8:bb:
1f:c0:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:46:01 2025 by rpki-client