Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer (raw, json)
Hash identifier: UpOqQJyhdepWKE57FtOBtpcC0De4u3oWr04YkGppUpo=
Subject key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D6FCA717CD04A106C1823DCA2721E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.5.178.0/24
IP: 2001:67c:1818::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6f:ca:71:7c:d0:4a:10:6c:18:23:dc:a2:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:61:89:d1:6a:92:66:ed:a5:bb:ab:58:6b:
43:c3:48:4a:a8:fe:47:2c:df:a6:d9:11:26:29:7e:
b0:99:18:5e:af:96:a5:e1:87:b0:3a:21:be:e9:cc:
d8:9b:4e:80:b7:a8:dc:30:8b:7c:4e:12:d6:d6:3e:
00:fc:ca:68:83:a2:0d:14:b5:b4:24:ee:54:89:4e:
05:24:c7:2e:4f:d4:f9:a4:dc:b7:64:8e:3a:83:30:
8b:bd:f3:ec:bd:76:00:6a:0c:41:d2:20:18:de:46:
0b:29:0a:80:e6:58:71:34:35:2d:4f:d5:2b:4e:21:
9a:1f:e1:13:1e:29:7b:02:b6:c9:e0:98:48:17:0b:
44:fc:00:70:83:70:d3:46:45:ea:23:ae:f4:42:9e:
b8:9e:63:bd:88:85:6e:b1:99:5b:b1:66:0a:e6:83:
1e:a0:3b:46:6d:ce:f5:33:cd:07:5b:b7:9e:08:26:
10:74:16:cc:96:6b:e2:a0:48:4d:a3:a0:22:56:e6:
dc:ad:bf:7b:bd:71:76:7c:72:b8:50:54:3c:8b:43:
f0:26:96:45:91:e3:79:41:de:39:15:3d:38:65:ba:
36:a5:27:cf:a2:b4:14:21:fd:85:97:d4:7b:59:f3:
c7:33:66:d7:5e:37:5b:bf:0c:ad:b1:a7:fe:33:61:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.178.0/24
IPv6:
2001:67c:1818::/48
Signature Algorithm: sha256WithRSAEncryption
76:fa:5a:d2:f5:81:09:09:fe:97:89:77:54:d0:53:f2:68:d7:
88:5a:a6:a0:82:ae:01:32:1e:3a:15:b0:99:8b:c0:29:95:ed:
a9:93:83:5c:e3:b6:d7:2f:26:e7:40:26:3c:9d:d8:cf:28:b7:
a3:75:f4:6e:36:b6:04:b2:35:f0:ed:ef:99:ca:ba:5a:ce:d2:
80:80:a1:b2:ef:af:ec:b6:e6:02:05:80:d6:e4:1e:0e:a5:80:
53:68:95:b9:a5:a9:de:8c:64:f2:4c:ec:b8:76:b7:89:44:73:
51:55:90:d1:8e:dd:38:07:7f:40:c5:3f:06:e1:51:73:29:2e:
c8:c5:8e:75:93:c7:8d:dc:3b:c2:a2:c8:f1:62:07:0c:b6:db:
fa:4f:29:79:3b:5e:24:ac:ce:79:82:a4:9c:d8:7b:ef:93:55:
19:8f:eb:bf:a4:d3:12:79:51:04:4a:73:9c:91:78:c4:48:de:
4a:ac:13:d7:30:7b:42:dc:8b:b5:c3:81:e3:c8:f8:f4:b3:b6:
29:36:2b:9f:67:a9:14:dd:5d:d7:bc:66:c7:cb:bb:2c:83:cd:
1e:02:3a:e0:e2:07:63:e8:db:72:12:26:04:b7:cc:a6:aa:f6:
1b:f5:24:e5:e0:06:63:a5:29:8b:c5:ea:8e:74:37:56:c7:db:
e6:08:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:32:35 2025 by rpki-client