Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer (raw, json)
Hash identifier: xo0HXt2OO29avvUAAD5UJw4VfDhsnXsXtqiZzBA7Wv8=
Subject key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B591A3ACB7B8D41A6AD002F0E26911
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 145.79.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:91:a3:ac:b7:b8:d4:1a:6a:d0:02:f0:e2:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:31:02:06:34:7b:17:5d:53:d3:58:48:03:
07:d6:52:0f:47:a7:29:7e:b0:39:a5:f7:31:bd:ac:
59:e6:3a:05:96:a3:7c:d3:8c:96:83:6c:e7:33:d7:
70:01:ca:f3:80:21:b5:87:85:92:2f:14:5e:d4:62:
5d:b0:14:3b:9a:1c:45:4b:fd:6d:66:2d:f0:0c:41:
44:c0:4e:23:01:7a:ab:e1:7f:08:da:b8:b7:3e:bf:
4e:09:a5:55:dc:70:eb:6f:d8:3e:65:ed:88:9a:dc:
87:59:72:42:1e:3d:13:e5:cf:d2:74:2e:c3:b9:df:
fa:d9:69:94:e3:b1:47:41:0b:79:30:f8:e0:5e:1c:
ce:db:08:01:22:f5:f9:81:0a:3a:f9:41:c7:b9:13:
e6:0b:9f:cc:85:35:ad:0c:16:97:c5:c4:2b:7d:2d:
e4:fa:31:db:cd:f5:b2:e0:5b:4f:b6:a3:d8:73:40:
74:79:43:33:6f:90:a3:70:38:bf:17:db:d0:92:4a:
78:ee:b1:d4:a2:40:5c:63:a5:40:62:64:d2:aa:a9:
21:a7:57:d3:02:bf:2a:6b:84:d3:5f:14:80:12:87:
13:69:b7:0e:46:64:f7:e6:98:d0:32:2a:ab:fe:99:
d3:dd:4f:d5:a1:6d:26:f5:99:5e:67:5f:51:a6:2a:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:91:a7:c8:50:6a:c5:91:0b:9d:de:1b:7a:25:46:57:e9:26:
48:ee:ae:31:44:ae:1f:47:a9:1d:7f:ed:41:d1:89:35:e5:75:
67:ff:70:eb:91:0d:69:54:c7:a2:a2:d0:2c:3b:b5:7e:37:06:
a1:09:2b:1a:a0:77:3f:b2:4b:22:8e:8e:4d:ba:11:42:a9:6d:
60:8b:65:19:6c:48:db:3d:29:2c:c1:a9:cc:cd:c2:be:2f:06:
68:a7:34:6b:05:f2:3a:5b:13:2b:b4:64:09:52:a3:17:34:e2:
1e:f2:72:77:6e:78:e8:c5:cb:a6:71:3b:af:6e:c1:8f:10:71:
49:58:1b:0f:61:59:b6:22:be:d4:7d:f7:15:07:89:8d:7a:7a:
3f:28:4d:7d:90:88:bb:a4:87:ba:3d:a1:83:1e:03:4b:b9:4f:
26:7b:f6:c1:76:8f:37:69:d2:0f:fc:3e:71:98:c8:b3:d4:7a:
77:3a:6e:1b:fc:2a:68:3a:3a:6c:b3:8d:f1:00:22:81:98:d9:
74:4d:1a:2e:95:ec:7b:68:35:93:e5:91:d8:03:d9:61:3b:cc:
f3:09:36:59:4c:d5:7a:47:8d:59:fc:69:02:ce:27:2b:12:b2:
59:9f:66:a1:b9:d3:ab:9e:47:e6:c5:23:ca:46:de:75:6f:9a:
52:62:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:41 2025 by rpki-client