Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
File: hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer (raw, json)
Hash identifier: tPCAG/Neh0TNpw7WKSFX/bCdugtn/+iIROOuxDXn3+Q=
Subject key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B07333C8D921EC2E130D246A5187A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49360
IP: 5.56.8.0/21
IP: 5.83.120.0/21
IP: 31.7.144.0/20
IP: 45.90.232.0/22
IP: 91.214.72.0/22
IP: 185.29.248.0/22
IP: 2a0a:d3c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:07:33:3c:8d:92:1e:c2:e1:30:d2:46:a5:18:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:25:85:17:0b:4d:fb:17:6b:90:c8:67:62:
f5:1b:ea:94:ba:0e:80:e3:22:0a:d7:7a:9b:bd:74:
ec:1b:a6:c9:7c:c7:24:54:f7:4e:95:71:3d:37:f3:
cd:d3:c8:08:03:d1:7f:22:52:92:05:b3:6e:33:26:
8c:e7:dd:b7:66:6c:5f:b0:bf:7b:bb:6c:ad:38:e4:
04:56:5e:0a:a3:20:0e:9b:2f:dc:df:6c:9e:62:89:
05:65:52:0c:60:0f:85:37:36:bd:12:69:da:ff:6a:
85:27:f4:05:5d:9a:89:0b:08:19:82:fa:72:d2:c7:
f1:06:0f:8e:67:a0:c2:ea:c7:a6:8d:91:8b:76:d7:
1f:08:7b:18:41:86:eb:13:87:2f:80:29:1c:ac:ca:
94:14:7d:33:4e:56:8e:39:29:94:98:2a:79:c8:be:
be:46:3e:3f:7d:9d:61:1a:a0:bf:b2:37:b0:07:45:
82:06:7f:2f:ab:47:37:ba:df:0b:e4:16:2a:25:0e:
08:2b:4e:93:e5:c4:26:ca:fc:25:58:18:ba:7d:b4:
01:4c:80:e7:ce:db:7c:e4:d8:75:64:95:4d:2f:39:
45:05:5b:ec:3f:79:53:c1:66:2a:4d:26:79:19:69:
45:a1:2b:87:61:64:27:f5:26:07:84:af:53:4f:ab:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.8.0/21
5.83.120.0/21
31.7.144.0/20
45.90.232.0/22
91.214.72.0/22
185.29.248.0/22
IPv6:
2a0a:d3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49360
Signature Algorithm: sha256WithRSAEncryption
9d:89:50:4b:5a:a8:29:25:5e:8d:c1:07:4b:9d:f3:4d:0a:04:
2a:55:89:38:e6:42:c8:05:d5:d0:15:49:37:cd:8f:19:2a:a8:
53:1c:5d:22:fd:92:e8:80:79:10:06:c7:11:b8:dc:f8:6f:7c:
cd:78:09:a6:5d:78:d9:e2:91:29:3f:a0:99:5f:b1:1e:a7:ed:
e2:df:f6:d4:41:85:0e:64:0c:d8:37:73:f8:74:aa:80:64:71:
d2:85:ea:5e:14:18:9a:f5:3d:7f:f2:82:c9:cf:55:22:66:cf:
7d:48:b9:bb:0e:9d:3e:77:75:cb:6b:14:36:12:fb:28:e3:a3:
86:21:54:15:57:c1:6d:4e:f9:ff:4d:b5:38:89:48:4b:3a:65:
e2:5a:5a:9d:b0:2a:e8:c7:eb:7c:4e:41:ec:c6:5d:b0:a5:df:
64:c8:f8:87:91:7b:95:b0:30:ab:70:75:56:79:5c:a3:9a:3c:
9e:ee:5a:1d:79:63:4f:fb:48:6b:d4:21:57:aa:d9:65:a4:37:
55:d8:9f:6a:fe:78:ea:a0:40:5f:7e:68:af:c4:80:c8:d2:ce:
06:d2:b4:cd:97:b7:9f:95:a4:fc:d7:f0:29:99:88:b1:2c:c4:
31:d8:88:fb:ce:1c:d6:b1:6c:af:57:7c:8f:59:04:de:d1:30:
3b:da:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:04:40 2025 by rpki-client