Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
File: hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer (raw, json)
Hash identifier: HkAypmkyk6WitZ1HEmK5TcKQD+4MK/zX8Dwrpir4bto=
Subject key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DC647DC75791CD8CB687BB7A1F969
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.14.180.0 -- 31.14.182.255
IP: 37.156.69.0 -- 37.156.70.255
IP: 45.81.169.0 -- 45.81.171.255
IP: 84.247.44.0/23
IP: 85.204.109.0/24
IP: 86.105.24.0/24
IP: 86.105.232.0/24
IP: 86.107.186.0/23
IP: 89.32.171.0/24
IP: 89.32.240.0/21
IP: 89.33.17.0/24
IP: 89.33.30.0/24
IP: 89.33.65.0/24
IP: 89.35.34.0/24
IP: 89.35.76.0/24
IP: 89.35.88.0/24
IP: 89.35.91.0/24
IP: 89.35.163.0/24
IP: 89.35.248.0/24
IP: 89.37.40.0/24
IP: 89.46.40.0/23
IP: 89.47.176.0 -- 89.47.178.255
IP: 89.47.180.0 -- 89.47.182.255
IP: 91.132.40.0/22
IP: 93.113.72.0/21
IP: 176.223.144.0/20
IP: 178.239.16.0/22
IP: 185.160.74.0/23
IP: 188.211.172.0/22
IP: 188.212.112.0/22
IP: 188.212.157.0/24
IP: 188.213.86.0 -- 188.213.95.255
IP: 188.240.70.0/24
IP: 193.164.216.0/23
IP: 194.145.194.0/23
IP: 217.148.134.0/23
IP: 2a00:bba0::/32
IP: 2a07:bac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c6:47:dc:75:79:1c:d8:cb:68:7b:b7:a1:f9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:4b:4c:db:47:95:39:c5:18:49:f6:46:da:
df:66:9d:aa:c7:54:bb:82:97:ea:39:ae:11:ba:a0:
f4:18:03:3d:f8:c3:67:d9:56:84:20:ce:b5:72:02:
a2:0b:a8:5c:d3:23:37:3b:70:9a:5a:60:76:a2:ea:
c3:fe:d0:e2:8d:a8:e3:0d:4d:22:03:32:77:9c:9f:
58:c2:ee:c3:40:d7:43:d8:b4:96:3b:a5:59:c9:d5:
11:b8:29:8a:c2:dd:1f:95:95:ab:a8:bb:b2:31:ef:
35:1d:44:9f:23:93:c7:81:37:dc:ed:f8:d3:29:7b:
e0:88:b3:e8:de:f1:f4:39:d8:91:7a:51:e5:f8:f1:
51:f6:58:47:a8:6d:d0:94:a6:c0:c3:71:a1:25:31:
8e:ec:f0:e0:95:13:0a:ae:59:71:6f:76:a5:f9:9b:
1e:75:d3:5d:98:36:2e:ad:e0:40:dd:8e:9d:db:c0:
92:3f:27:5b:d8:f0:0e:40:c2:47:0d:8a:cc:df:c7:
47:2b:90:8f:d1:38:38:ff:91:61:40:14:c9:0f:ed:
a6:6a:9f:ce:f4:7f:5b:0d:8f:d3:ec:a3:9d:69:68:
d4:ff:06:e8:b9:a8:42:86:b6:9e:15:8a:ac:74:3b:
7b:71:65:07:60:38:c3:de:c5:88:ba:fc:46:94:75:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.180.0-31.14.182.255
37.156.69.0-37.156.70.255
45.81.169.0-45.81.171.255
84.247.44.0/23
85.204.109.0/24
86.105.24.0/24
86.105.232.0/24
86.107.186.0/23
89.32.171.0/24
89.32.240.0/21
89.33.17.0/24
89.33.30.0/24
89.33.65.0/24
89.35.34.0/24
89.35.76.0/24
89.35.88.0/24
89.35.91.0/24
89.35.163.0/24
89.35.248.0/24
89.37.40.0/24
89.46.40.0/23
89.47.176.0-89.47.178.255
89.47.180.0-89.47.182.255
91.132.40.0/22
93.113.72.0/21
176.223.144.0/20
178.239.16.0/22
185.160.74.0/23
188.211.172.0/22
188.212.112.0/22
188.212.157.0/24
188.213.86.0-188.213.95.255
188.240.70.0/24
193.164.216.0/23
194.145.194.0/23
217.148.134.0/23
IPv6:
2a00:bba0::/32
2a07:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
77:9a:65:ce:88:f7:95:cf:57:c6:54:86:8e:41:b5:1e:ec:d8:
d6:78:ac:f3:92:a2:3c:4a:f6:4e:56:25:32:52:28:33:4b:fd:
27:12:d5:d7:0d:b2:12:6f:22:d8:24:55:fd:45:55:f2:44:eb:
ef:f4:26:eb:e6:81:63:d9:7d:d4:62:67:46:14:17:f6:f1:12:
c7:08:df:77:0c:c6:da:fe:bd:b6:5b:d7:bf:1a:bd:24:81:3f:
81:6c:37:34:23:23:59:ce:4f:11:74:fc:76:f3:12:df:c6:ab:
58:d7:64:08:0a:87:b4:97:ae:9d:45:5a:a8:83:60:08:c2:c0:
dc:b1:ad:cd:e4:e4:3b:e8:b6:0c:37:5a:f4:32:2f:5a:b4:c4:
08:4b:98:d9:23:96:32:62:07:b1:82:9d:32:16:bf:4a:48:42:
0c:0e:c2:48:7f:77:37:39:d0:b2:b9:f6:a6:96:da:72:b8:3c:
59:8b:e9:d4:4c:a3:b9:80:f5:52:77:84:90:66:ee:cf:65:94:
36:27:97:ed:1f:92:ed:ed:86:40:81:ba:ca:f0:33:a1:1e:60:
ca:7d:67:14:2e:db:84:4a:2f:66:f3:f2:50:7f:a3:89:ef:36:
a2:89:2d:e2:0c:f2:21:79:99:66:59:bd:50:1b:78:78:3b:05:
ed:26:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:10 2025 by rpki-client