Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer (raw, json)
Hash identifier: 9l8DhwjK2dSwK+xZCiJTM/JTFyXxv+s0YIcTkLObiwI=
Subject key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9227322272B7F61E4E94811F2CD16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.236.136.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:22:73:22:27:2b:7f:61:e4:e9:48:11:f2:cd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:6e:b9:04:f5:61:95:10:48:0e:69:e1:51:
db:35:49:ee:ff:81:c3:45:c8:bd:28:ab:41:7b:69:
99:ff:4b:ab:ad:d2:e6:c6:85:ef:2f:71:37:4c:48:
92:b0:6f:82:c7:06:8e:2f:a3:9e:80:b2:49:14:3d:
0e:05:44:b6:c1:97:d8:9c:0f:db:05:6e:b6:0b:91:
90:6d:e8:9c:88:e7:a4:eb:9a:7e:a5:dd:76:53:26:
19:eb:2e:88:db:d3:de:9e:e3:86:16:f4:d0:ad:66:
50:fa:26:45:bd:e9:df:75:f2:fb:69:e6:70:63:6e:
8e:25:b2:5f:76:8f:1b:b8:01:84:3c:a1:21:19:14:
cd:66:d1:11:47:68:8c:be:ec:55:08:3e:96:73:b9:
81:30:bd:49:eb:e2:86:45:92:5a:8e:d2:7a:41:b6:
27:9b:5d:29:bb:9e:ee:54:6b:44:67:e9:34:e8:04:
66:1a:85:dc:ab:3d:06:99:96:aa:57:8e:6c:ce:b3:
74:6a:29:5f:1a:77:85:5d:3a:1f:e4:8b:fb:68:f4:
30:e5:cd:09:a2:fc:19:16:dd:7b:71:22:b4:8f:84:
52:5c:aa:39:08:ae:20:b1:08:34:eb:db:f2:f2:b9:
5b:88:16:b0:d5:47:5a:22:fe:6e:20:80:d3:92:46:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.136.0/21
Signature Algorithm: sha256WithRSAEncryption
40:b0:6c:e4:19:44:4e:fe:b6:50:cb:3b:f9:16:77:0e:1b:7e:
38:e3:82:af:e1:48:9e:86:3d:22:5c:41:e3:f7:bc:d7:a9:f4:
31:ff:cc:64:d4:ca:aa:b3:05:89:b4:c6:6e:c1:70:e8:96:be:
ae:de:de:36:6f:d2:64:6f:e0:59:e1:5d:a6:c5:65:58:79:c9:
f1:0e:77:23:d9:9f:54:39:ff:ce:4e:d9:f9:03:54:d4:23:6b:
7b:25:8d:0f:02:e9:27:4f:3a:f4:b7:bc:2b:96:63:92:51:43:
6a:e8:6d:dc:7e:aa:15:b0:28:7a:96:c2:c5:52:cf:af:29:35:
41:4f:0c:f4:60:6c:33:41:05:82:6a:57:d3:fe:18:12:49:62:
a4:29:b4:a4:56:ab:ee:e2:d6:a8:18:f0:45:25:60:d0:6a:d8:
b9:e1:90:6d:85:f3:60:df:c9:31:3a:44:f9:6d:8a:55:a6:4b:
ff:aa:01:ac:08:70:95:d6:89:c1:14:8d:d2:9b:ad:ed:1a:c8:
93:20:7d:15:be:19:f6:60:61:06:56:51:4f:1b:02:0a:62:a7:
3c:35:3e:da:e5:6b:ed:d2:d4:2c:de:35:7e:81:9f:73:c3:fc:
8e:5b:96:67:fe:5b:a6:df:3e:6f:fe:01:ef:44:95:bb:51:0c:
1c:5d:8a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:05 2025 by rpki-client