Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
File: hAKSSGHLwIjGVahyU1qQMQige_E.cer (raw, json)
Hash identifier: cS7pXVn3QdGn+Df0Gw9+urVgdBpbJhGM7XXii17/CqA=
Subject key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D72A87711BF5C462D3F31E28592FE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.233.66.0/24
IP: 217.65.131.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2a:87:71:1b:f5:c4:62:d3:f3:1e:28:59:2f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8402924861cbc088c655a872535a903108a07bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:1c:25:44:33:44:c0:8a:25:84:cb:f2:19:
f8:b5:e6:b2:e8:bb:32:ad:f2:37:cd:00:36:cb:7f:
1e:4e:44:82:88:da:d0:82:45:d3:ff:a1:1c:d5:b8:
5b:71:ac:ca:9a:5f:c4:55:f9:4c:b8:f0:30:5b:f6:
bc:11:a6:d3:fc:ba:3c:cc:8e:cb:76:8a:e0:ed:d5:
dd:91:4a:82:5c:c8:b5:d0:dd:22:fb:7d:10:08:b4:
a8:39:c5:7e:76:5d:c6:c1:22:91:22:64:3c:68:ed:
0d:90:d2:bd:4b:11:52:41:38:dc:7d:70:0c:c9:45:
e7:9c:3f:b1:b9:0e:63:b0:86:10:70:4e:9e:4c:98:
fb:a1:2b:1b:c7:04:2a:9c:52:52:91:8a:a4:e8:4d:
af:9d:c7:13:d7:42:b6:27:3b:12:0d:e9:cf:d3:e2:
dd:ec:b6:61:2c:b7:b2:31:e2:d1:66:0a:61:86:d6:
9f:cb:bf:1d:11:a9:c7:d9:68:5e:d2:20:2e:78:82:
c9:da:ba:bf:26:b7:59:6b:98:8a:3e:5d:30:cc:c4:
48:ad:f8:34:29:ce:fc:aa:61:35:17:44:53:2c:f2:
c0:4f:11:ba:fb:bb:1d:24:d7:2a:7e:9b:e3:3d:24:
da:bb:77:76:50:3f:d5:63:ca:34:b5:84:bc:07:41:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.66.0/24
217.65.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:fd:74:5e:3b:1b:2d:4c:25:36:3f:ee:0e:d2:26:17:1c:2c:
72:33:21:ba:b2:bd:96:58:cd:9d:b5:e3:07:e5:ac:74:29:c6:
4a:04:69:1d:47:d7:db:3c:a4:c3:90:18:87:67:00:78:79:c4:
b3:a9:c9:ab:fd:4b:98:1d:06:f9:53:22:34:0d:7c:f6:08:cc:
fc:74:34:bb:4a:bb:c7:5d:bf:ed:f3:68:47:13:e8:a5:38:76:
e0:e7:45:87:82:f0:2a:37:8d:e3:fa:0a:c9:6a:07:69:9a:f8:
1c:a8:29:3e:03:4b:b6:bc:d6:e2:45:49:3b:5e:d1:0a:a8:7b:
a2:0a:f5:b5:bf:7f:10:0d:05:a9:a9:c5:21:c8:1e:8f:e8:cd:
30:e2:80:d3:c9:5a:10:f7:21:41:81:00:07:c9:3c:1d:07:4b:
7a:9f:bb:93:a3:f9:9f:f6:3a:26:9f:44:f0:00:ae:22:4e:bb:
58:8d:bd:dd:49:f7:ba:81:53:1d:c6:67:0e:73:8b:a3:fa:15:
83:95:8a:67:0a:d2:37:59:b3:2e:08:35:2d:10:47:a0:fb:f6:
81:5d:4d:44:eb:8a:e9:af:6f:ca:31:2a:34:84:b3:95:8e:85:
07:44:9d:da:d5:fd:9b:d0:75:68:b9:79:50:b0:1a:cf:06:a3:
56:cf:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:31:55 2025 by rpki-client