Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hKOZTFFsuF3uduIUBF7zmzjznPw.cer
File: hKOZTFFsuF3uduIUBF7zmzjznPw.cer (raw, json)
Hash identifier: 3hgOnJph+DDczDZY4sZUcBPnqu8p2AxUdc+HBQNmg9w=
Subject key identifier: 84:A3:99:4C:51:6C:B8:5D:EE:76:E2:14:04:5E:F3:9B:38:F3:9C:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F422ADE13BEB4F9E930D4C7959D30F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/hKOZTFFsuF3uduIUBF7zmzjznPw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 57705
IP: 5.32.132.0/22
IP: 2a0c:7740::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:2a:de:13:be:b4:f9:e9:30:d4:c7:95:9d:30:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84a3994c516cb85dee76e214045ef39b38f39cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:4f:23:a1:ab:fa:9f:de:d6:53:4b:49:6d:
2e:74:cf:3c:04:48:94:15:72:8a:90:11:03:cb:ae:
47:b6:90:54:7e:6e:de:c4:ec:8c:38:7f:69:ad:46:
45:20:81:23:ce:7f:5e:9c:59:75:11:04:bb:1b:cd:
b1:db:7e:00:73:b7:5e:0f:83:e2:9d:26:da:0c:35:
15:f4:36:72:ad:d6:53:b7:84:43:aa:53:1a:61:cb:
f9:3e:9b:96:2d:4b:af:d6:da:12:78:7f:f0:29:8d:
ed:73:30:c8:36:13:40:a4:43:b6:1d:7f:85:ec:7c:
02:7d:b9:fb:85:6a:96:8a:31:5b:7e:a8:df:25:bf:
5e:10:ee:ce:b0:94:b9:6c:86:00:a1:39:dc:d5:10:
6a:40:f8:13:70:31:7f:f9:11:fa:b2:10:7c:4d:91:
b4:66:b4:a2:50:e6:a9:44:2d:77:15:99:2f:c9:b1:
cb:a5:6a:1a:ed:ad:d9:86:2d:1a:9d:aa:5c:86:c0:
80:8f:09:d7:fe:87:7a:1e:66:fb:63:85:13:b1:7f:
e6:d2:d6:a7:ab:ed:37:7b:7f:37:71:16:9c:ad:ef:
75:fb:e4:4f:8b:95:3e:21:ab:3c:83:60:7b:17:c6:
93:43:86:51:7d:6e:c4:c3:08:f4:d4:88:9d:e1:d6:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:99:4C:51:6C:B8:5D:EE:76:E2:14:04:5E:F3:9B:38:F3:9C:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/hKOZTFFsuF3uduIUBF7zmzjznPw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.132.0/22
IPv6:
2a0c:7740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57705
Signature Algorithm: sha256WithRSAEncryption
aa:a4:fe:0f:89:66:83:7a:a1:e7:f6:ba:9d:e2:a0:e0:a7:96:
7e:cc:39:05:5d:01:04:03:e6:bb:c0:67:ea:df:a7:fe:08:d1:
5f:17:ee:cb:23:69:36:3a:05:4d:a9:24:95:d4:c9:7a:d8:23:
70:60:55:aa:97:af:8c:41:4c:2b:6c:2a:ec:c0:be:6c:03:dd:
b2:c0:07:42:2c:90:2c:59:de:de:4b:ae:44:7f:eb:3c:f6:a6:
3a:76:36:03:a9:46:3f:34:cb:d2:70:a6:21:f8:aa:66:b5:89:
3e:3c:a7:10:02:25:0e:63:3d:0d:01:f1:96:eb:73:96:86:d6:
5a:2c:f3:b7:cb:cf:ef:7f:a1:ae:db:27:6d:1e:96:7d:df:c2:
5b:5a:1a:0b:36:e2:69:28:14:5c:0e:20:9e:9c:a2:10:61:76:
9c:c2:1e:53:ac:dc:05:98:b2:4d:2b:10:b5:08:51:08:b1:46:
b1:d1:82:65:a9:57:e3:6b:02:32:be:04:c9:9a:e9:38:f7:e5:
fa:1b:9a:ac:ec:4a:d7:47:66:0d:ec:78:d8:3a:fc:20:9d:7c:
8a:85:f4:6a:68:ef:f0:d3:7b:2b:16:db:9d:60:17:f1:a9:c6:
68:a8:52:4a:29:ac:1a:3d:f8:93:a1:ff:61:55:a0:94:df:41:
24:8e:96:d4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVvQireE760+ekw1MeVnTDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjEzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGEzOTk0YzUxNmNiODVkZWU3NmUyMTQwNDVlZjM5YjM4ZjM5Y2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkulPI6Gr+p/e1lNLSW0udM88BEiU
FXKKkBEDy65HtpBUfm7exOyMOH9prUZFIIEjzn9enFl1EQS7G82x234Ac7deD4Pi
nSbaDDUV9DZyrdZTt4RDqlMaYcv5PpuWLUuv1toSeH/wKY3tczDINhNApEO2HX+F
7HwCfbn7hWqWijFbfqjfJb9eEO7OsJS5bIYAoTnc1RBqQPgTcDF/+RH6shB8TZG0
ZrSiUOapRC13FZkvybHLpWoa7a3Zhi0anapchsCAjwnX/od6Hmb7Y4UTsX/m0tan
q+03e383cRacre91++RPi5U+Ias8g2B7F8aTQ4ZRfW7Ewwj01Iid4dZTgQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFISjmUxRbLhd7nbiFARe85s485z8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2M5Y2Iw
Yy05NjA4LTQyODAtYTFiOC0zYjhmYTJmNTIyZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvYzljYjBj
LTk2MDgtNDI4MC1hMWI4LTNiOGZhMmY1MjJlNi8xL2hLT1pURkZzdUYzdWR1SVVC
Rjd6bXpqem5Qdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCBSCEMA0EAgACMAcDBQMqDHdAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDhaTANBgkqhkiG9w0BAQsFAAOCAQEAqqT+D4lmg3qh
5/a6neKg4KeWfsw5BV0BBAPmu8Bn6t+n/gjRXxfuyyNpNjoFTakkldTJetgjcGBV
qpevjEFMK2wq7MC+bAPdssAHQiyQLFne3kuuRH/rPPamOnY2A6lGPzTL0nCmIfiq
ZrWJPjynEAIlDmM9DQHxlutzlobWWizzt8vP73+hrtsnbR6Wfd/CW1oaCzbiaSgU
XA4gnpyiEGF2nMIeU6zcBZiyTSsQtQhRCLFGsdGCZalX42sCMr4EyZrpOPfl+hua
rOxK10dmDex42Dr8IJ18ioX0amjv8NN7KxbbnWAX8anGaKhSSimsGj34k6H/YVWg
lN9BJI6W1A==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:34 2025 by rpki-client