Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
File: HSzcucdvXgzgw4XX4O8VVy0VpUw.cer (raw, json)
Hash identifier: VMCJgbxv2D/uyw8twnKgAHzRPc5qavKOFBJqOtLx9i4=
Subject key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252193BCB89BA7D9BD8D0BF9EA8825F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 132.66.0.0/15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:93:bc:b8:9b:a7:d9:bd:8d:0b:f9:ea:88:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:68:c5:20:5f:91:48:7d:fc:f3:a9:2c:88:
2a:30:59:46:06:86:25:a3:ce:f3:62:85:0a:04:78:
fa:8e:98:9a:d1:72:df:91:6c:04:5e:80:05:3b:30:
b9:e9:c0:d6:b3:cb:5d:ee:76:74:ab:b5:0c:fc:e5:
c3:de:3e:8d:2e:7e:ad:7b:42:8a:c3:78:a5:62:8c:
ba:c7:53:2f:1e:e5:29:56:95:6d:ff:00:bf:13:46:
cf:77:66:36:8a:23:1a:26:55:32:4f:32:f5:e3:23:
84:75:76:ea:37:eb:81:86:ea:ef:75:22:47:ee:fd:
77:12:90:0d:4a:57:d5:f0:c0:d6:c2:9e:c9:e0:b6:
65:00:e3:0c:9c:7f:72:02:7b:b6:2b:6c:88:b7:06:
73:96:bb:b8:7c:6d:e2:d7:5b:33:0b:00:dd:64:2e:
ca:73:09:17:1b:9e:b3:e8:ce:e8:d8:0c:94:d6:3c:
5b:c8:79:01:da:2a:ed:8f:e9:5a:ba:64:30:9a:fd:
18:e2:e5:26:ae:2e:5d:7f:a6:d6:3c:e0:24:c9:d3:
74:1c:65:5c:ac:c4:88:79:d7:da:b7:e3:92:4a:f1:
e0:ce:0b:dd:8e:58:a9:bd:57:ff:22:6b:49:2d:6b:
73:c0:b1:4d:5b:9b:16:8f:33:ff:57:0c:6d:ca:74:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6b:c1:56:58:d6:ec:8f:20:96:88:15:d7:14:1f:3c:da:d3:a5:
2a:a6:8d:a2:28:4d:d9:6e:33:4b:46:56:72:62:eb:0b:70:ce:
3c:cb:c9:c7:0d:03:48:2a:b6:6c:15:fa:89:99:3e:64:41:9c:
e4:21:77:a9:5e:17:fa:cb:a7:9d:81:6e:a9:98:2a:98:b2:0b:
e0:63:49:37:59:9c:26:f9:5b:6b:cc:bb:68:b2:43:38:4e:e8:
7a:70:37:42:e4:46:9c:c7:0e:2e:b5:52:f3:36:05:c2:e3:c8:
31:1b:c9:f2:31:96:10:3e:7d:39:0d:65:4b:79:ab:0b:f6:2f:
49:73:c3:c2:a6:2f:25:b3:37:04:a2:4c:76:1f:ab:08:6b:42:
60:81:16:58:42:e4:1b:5e:7f:0f:b3:d6:b2:c7:b7:6c:5e:a4:
46:3b:09:bb:4e:30:51:12:44:ac:fd:ea:1c:bc:7d:e8:5b:b9:
3e:21:e6:87:33:39:41:f5:a7:7e:ba:6e:14:da:3a:bb:4d:c4:
1d:de:6e:67:e8:cb:28:8a:d8:07:a2:e8:93:80:a1:c5:1d:80:
6c:b2:9b:a9:48:5e:61:84:52:43:6d:36:3d:59:54:2c:26:d1:
7c:63:6f:39:72:90:45:7e:d5:e8:2d:b9:fc:c9:ac:51:0f:0b:
26:45:0d:45
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQlIZO8uJun2b2NC/nqiCXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDJjZGNiOWM3NmY1ZTBjZTBjMzg1ZDdlMGVmMTU1NzJkMTVhNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOtoxSBfkUh9/POpLIgqMFlGBoYl
o87zYoUKBHj6jpia0XLfkWwEXoAFOzC56cDWs8td7nZ0q7UM/OXD3j6NLn6te0KK
w3ilYoy6x1MvHuUpVpVt/wC/E0bPd2Y2iiMaJlUyTzL14yOEdXbqN+uBhurvdSJH
7v13EpANSlfV8MDWwp7J4LZlAOMMnH9yAnu2K2yItwZzlru4fG3i11szCwDdZC7K
cwkXG56z6M7o2AyU1jxbyHkB2irtj+laumQwmv0Y4uUmri5df6bWPOAkydN0HGVc
rMSIedfat+OSSvHgzgvdjlipvVf/ImtJLWtzwLFNW5sWjzP/VwxtynQfzwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFB0s3LnHb14M4MOF1+DvFVctFaVMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2I2NjY2
Ni1iM2I3LTQyNDgtYWU2NS03NjBlNGVlNGM2YjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvYjY2NjY2
LWIzYjctNDI0OC1hZTY1LTc2MGU0ZWU0YzZiMi8xL0hTemN1Y2R2WGd6Z3c0WFg0
TzhWVnkwVnBVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMBhEIwDQYJKoZIhvcNAQELBQADggEBAGvBVljW
7I8glogV1xQfPNrTpSqmjaIoTdluM0tGVnJi6wtwzjzLyccNA0gqtmwV+omZPmRB
nOQhd6leF/rLp52BbqmYKpiyC+BjSTdZnCb5W2vMu2iyQzhO6HpwN0LkRpzHDi61
UvM2BcLjyDEbyfIxlhA+fTkNZUt5qwv2L0lzw8KmLyWzNwSiTHYfqwhrQmCBFlhC
5Btefw+z1rLHt2xepEY7CbtOMFESRKz96hy8fehbuT4h5oczOUH1p366bhTaOrtN
xB3ebmfoyyiK2Aei6JOAocUdgGyym6lIXmGEUkNtNj1ZVCwm0XxjbzlykEV+1egt
ufzJrFEPCyZFDUU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:49 2025 by rpki-client