Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
File: hGr1TmVYz8hiUpRuRpKrknd8DhA.cer (raw, json)
Hash identifier: 85fQi93dQG++PKSSaz0JpZXSNWVKq6lJNvE6AHZTTmU=
Subject key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD71FD4FD45908D8234CC49BAD02BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.24.40.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:71:fd:4f:d4:59:08:d8:23:4c:c4:9b:ad:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=846af54e6558cfc86252946e4692ab92777c0e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:ed:96:17:b7:2b:70:2f:f6:41:4b:27:13:
5c:ba:58:c7:92:00:3a:57:ac:3d:1b:54:6d:32:ca:
8a:fe:67:59:cc:22:b6:f3:4f:dc:cb:c1:35:2a:be:
7b:4c:c1:f8:4d:2e:76:99:f6:90:4d:08:78:89:c5:
8d:5f:4b:4b:fe:98:aa:6b:7f:51:5e:f4:a7:aa:57:
dc:a6:92:a8:c6:a4:8d:7c:e9:e8:a1:e3:0d:27:04:
15:11:ef:fb:cd:4a:f0:9d:3c:d1:08:63:d0:55:fa:
0c:55:f8:49:46:ac:3b:39:0c:ca:d2:a4:e7:63:af:
30:83:81:1b:79:2a:66:41:60:89:5d:be:a5:1a:83:
29:e8:4c:50:82:3e:6e:eb:03:55:12:33:c3:4d:5d:
bc:93:70:95:55:5e:1f:d4:54:ad:bf:67:82:3f:99:
9f:56:0c:ad:72:a5:ba:e1:9d:c3:de:1a:82:f2:67:
ef:7a:c1:70:c0:08:34:29:8a:d3:14:7a:78:cc:a2:
ac:25:02:81:87:0f:04:9d:50:7a:18:85:ca:30:4c:
84:29:a1:5c:b7:b1:1a:df:f1:8a:ed:0a:be:20:8b:
97:9a:8e:8e:cf:5c:da:f6:85:9b:66:ac:17:7b:6e:
76:c3:d7:1a:b1:fe:7b:7d:f2:47:46:45:6e:53:9e:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.40.0/22
Signature Algorithm: sha256WithRSAEncryption
41:9a:b5:1f:ee:b0:27:09:63:b5:ad:98:b4:eb:d0:1f:ec:a8:
d7:0e:f6:ac:a2:22:83:3a:2c:e4:bc:0a:e8:66:c3:8f:70:d6:
a9:86:2a:e8:ac:41:ce:5e:1b:e8:0e:60:a1:14:0e:c9:b7:07:
0e:21:5a:c1:e1:92:f1:4e:75:33:c8:ce:b9:67:83:1e:80:18:
0e:ef:55:c7:47:20:62:21:5d:48:d1:c6:2f:4e:34:ec:e5:d9:
f3:67:8f:a4:ba:7a:05:01:40:9c:fd:4b:43:4b:2e:e1:34:a9:
3a:26:65:e9:cd:17:fc:2c:19:b8:ff:94:54:e1:e2:ab:b7:54:
f4:0b:41:6a:32:af:54:e1:50:c6:c9:6e:31:98:1c:0e:e4:46:
23:65:04:35:7e:e2:62:9c:ba:8d:68:a0:81:b8:83:5b:14:44:
78:ee:c3:99:5f:14:56:9b:73:33:17:2b:37:41:83:25:35:a6:
5c:f3:11:39:a9:fd:4d:b9:4e:a5:2e:8b:98:65:6d:bd:e1:f4:
be:d8:0e:36:9c:78:03:1d:7c:ed:0d:00:8c:eb:e7:79:62:7f:
36:8b:56:db:5a:9d:97:42:f3:f8:58:89:48:7b:f8:8d:5a:5e:
dc:d0:ec:61:ad:15:cd:ea:b5:49:5b:82:a0:46:d1:06:99:08:
9f:c4:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:32:21 2025 by rpki-client