Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.cer (raw, json)
Hash identifier: Uxa/XSymPXi2tkUrGTmugRuIiL8+wLGtLVZ2iXM1pqw=
Subject key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F9EF092A09055981782F02A3484AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209956
IP: 194.48.95.0/24
IP: 217.119.134.0/24
IP: 2a12:75c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9e:f0:92:a0:90:55:98:17:82:f0:2a:34:84:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:6f:d6:e9:08:6d:c9:9e:54:f5:ac:91:4d:
93:c6:f8:c5:a3:91:52:cc:9b:d0:e9:7d:f6:25:fd:
96:76:2f:cc:80:8a:34:ac:b8:1a:e1:ab:3c:a8:70:
b8:a5:5e:21:08:af:6a:14:71:62:ab:39:21:6b:d8:
7a:72:e5:9e:df:cf:e8:a2:5e:6d:b9:10:78:05:d5:
fd:89:53:54:81:50:c7:3b:fc:23:b8:fa:26:0e:5d:
c7:f5:75:2c:6a:aa:16:b8:31:f8:54:e7:d7:04:e8:
4d:03:25:03:57:99:e7:3f:b2:93:b8:f7:54:8d:97:
aa:90:67:9a:f3:d2:a3:f7:de:95:5c:60:73:4d:a3:
3a:e3:b9:fa:03:41:58:a4:df:97:3a:bf:dd:4f:c4:
a6:9a:45:6a:6c:74:9a:40:49:0b:1a:79:36:71:7e:
60:ff:0b:99:1c:5a:a2:91:13:a7:50:1f:07:da:79:
95:7d:84:24:9c:db:96:c7:04:93:1c:ab:7b:51:8f:
62:f2:1e:b2:0c:09:58:65:50:2d:0d:d1:1a:c8:78:
46:af:fb:91:83:d1:1d:b8:c1:c6:6e:c7:e8:5f:ed:
31:2d:d6:cd:95:e2:ef:87:6c:da:34:f4:3f:cf:1f:
6d:6d:a7:23:52:86:a7:5f:0c:76:6a:d0:70:86:43:
f4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.95.0/24
217.119.134.0/24
IPv6:
2a12:75c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209956
Signature Algorithm: sha256WithRSAEncryption
1d:8c:88:3d:41:ce:7d:18:78:cf:71:8e:b3:1c:83:b9:3f:50:
23:32:b2:8c:f9:53:33:fc:9b:95:4c:2c:c7:a5:6b:a5:80:01:
5d:2c:9d:98:a2:20:17:9d:78:eb:50:69:98:cf:42:76:58:64:
e7:1f:ef:de:f2:01:4a:e6:32:ee:82:af:b5:a2:ca:7a:1a:82:
91:83:cc:e3:c5:14:c2:c4:8b:ad:fa:ea:3c:5f:ab:d3:e9:49:
40:a7:50:6b:8f:97:14:91:c5:7e:ad:99:55:7e:ba:07:86:3b:
ae:96:da:68:6b:3c:23:c0:cd:5e:42:1e:27:43:7f:59:a7:83:
47:fb:30:61:50:66:ae:b9:ad:03:9f:e1:d8:03:e9:98:b2:49:
5d:33:d7:65:fa:7a:35:ac:13:62:41:32:5e:ac:87:f3:38:fe:
22:59:55:3f:22:b4:77:c6:b5:4d:96:30:79:ac:52:7e:39:5e:
28:c1:55:52:a3:4b:47:db:da:03:48:ac:ec:48:dc:cb:ea:51:
d5:a7:4d:48:dd:9e:72:0e:d8:6b:9f:24:cc:29:de:8c:7e:fd:
51:a9:0b:9f:a6:6e:14:b7:65:fc:cd:b8:04:77:38:52:91:e0:
8d:5a:26:a6:48:88:4a:40:28:8c:a1:38:d9:10:a9:87:2d:57:
93:3a:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:35:13 2025 by rpki-client