Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
File: hst0KgO8nIVQcheiUgTf_4L8zfk.cer (raw, json)
Hash identifier: mjLJBTWHzIooyr5Pyc2yQDH27a+PsRs6ub31DRLk8sE=
Subject key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B23A42E9981972AEAC1C84AA170303
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.192.232.0/21
IP: 80.85.152.0/21
IP: 185.118.164.0/22
IP: 185.144.28.0/22
IP: 2a03:a0e0::/32
IP: 2a0a:eec0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:42:e9:98:19:72:ae:ac:1c:84:aa:17:03:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:8c:14:08:45:7a:da:2e:b8:b1:cf:ab:c3:
be:69:69:cf:43:75:79:e9:56:c6:18:68:df:73:44:
fb:70:68:88:1a:80:dc:69:79:e1:dc:3a:15:00:a2:
18:16:3b:5c:b3:53:41:d1:04:05:03:0a:2e:db:51:
7e:9d:a7:a2:23:b4:dd:56:f6:3e:b2:7c:87:1f:1e:
71:17:ff:4f:31:31:9e:94:41:1e:a3:aa:12:bd:8f:
08:dd:63:03:9e:f4:02:c7:7b:98:98:03:e3:a8:41:
78:fc:89:66:bd:b5:b1:04:0f:ff:ff:f3:cf:67:58:
13:44:4c:21:b7:60:f8:1a:50:d6:e4:b1:1e:49:fc:
db:76:d7:ed:8a:7f:4f:5b:d4:6b:8c:d5:dd:cf:6d:
40:53:6e:a6:ee:45:d0:d9:03:77:e8:14:d6:4b:80:
67:af:23:cc:13:1f:70:df:b1:aa:7c:3f:3c:b3:24:
27:20:2b:bc:81:46:e4:7b:cd:d1:1d:9a:a1:e7:26:
28:aa:37:a0:81:d1:db:3e:1c:81:66:8d:58:66:32:
b6:02:80:0a:4b:29:18:dd:07:85:4d:c7:1c:c3:ad:
41:f9:f2:5e:f2:16:1d:20:21:e5:c1:68:aa:e7:25:
77:9b:4d:05:be:a4:ff:af:d9:44:f9:b5:c6:a4:14:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.232.0/21
80.85.152.0/21
185.118.164.0/22
185.144.28.0/22
IPv6:
2a03:a0e0::/32
2a0a:eec0::/32
Signature Algorithm: sha256WithRSAEncryption
67:5b:0c:c3:89:bb:d5:58:ed:3e:d6:55:b2:b7:17:90:bd:f8:
31:d7:ec:0c:b0:1f:b0:6b:21:52:9b:95:78:15:9d:c1:56:81:
33:5f:b2:b2:2e:c5:bb:cf:ff:7f:4c:5b:05:e2:12:02:e4:ab:
dc:28:e5:2e:17:d1:44:18:99:16:7f:69:c7:cb:04:f3:50:ab:
f1:d7:44:92:8d:b0:77:0b:18:fb:e5:d3:41:58:fc:f3:12:c0:
6f:0d:4c:5d:73:85:fe:80:83:82:6f:12:30:ea:b1:e3:24:00:
ad:45:3c:71:20:36:d4:76:7b:ad:91:66:8f:b0:5a:9b:86:c7:
7a:7f:9d:17:7e:75:af:b6:d8:c3:32:ff:70:28:35:c0:81:a0:
af:e6:d2:fa:d0:1b:78:dd:e4:dc:31:09:c8:77:67:d6:b7:19:
e4:3e:64:50:52:4b:35:95:f8:c9:a2:62:73:13:e3:ac:12:65:
19:5a:ec:36:d7:76:cc:fc:81:e4:fa:be:d6:69:4a:6b:fc:c2:
38:ab:a7:92:b5:21:b1:d2:ae:4f:4d:73:72:66:d1:e4:09:00:
6d:84:cf:31:c6:16:04:08:f4:b3:82:f0:d2:8e:94:24:c3:0b:
e5:4d:ea:d4:5b:be:37:9e:cb:39:30:1e:b6:b3:08:e2:f3:57:
0e:a2:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:54 2025 by rpki-client