Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
File: HHJWatYok1xux10O3dMXx7CnZpM.cer (raw, json)
Hash identifier: 3Qrvh8gMmIWCoH/c9LPpYCcQWKXaYUzQmJZAsjU5wvE=
Subject key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7D7A5E659EA6DA59A4EE6345024FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.153.32.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d7:a5:e6:59:ea:6d:a5:9a:4e:e6:34:50:24:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:ba:ea:f0:cb:18:34:dd:00:34:21:3c:0d:
6a:6d:e4:4d:85:6b:b9:a2:51:30:3a:a9:ec:ca:58:
74:55:00:30:73:4b:6a:be:72:79:be:75:90:9a:b7:
c6:3a:39:75:c9:94:36:1b:53:66:30:c0:2f:57:aa:
18:15:ce:7d:d3:ed:9a:62:84:1f:07:be:07:a4:0d:
87:e3:7c:23:87:f3:ae:25:70:a6:4f:1f:d3:c9:3a:
28:2e:93:16:7f:fa:de:0d:d7:79:f3:63:59:18:1c:
9d:d6:c8:90:9d:ea:77:67:2a:08:57:c8:50:06:fa:
69:e3:08:b1:61:c8:a5:0a:26:a4:40:00:20:21:43:
06:de:e5:54:71:20:60:99:c4:9e:27:11:55:95:79:
61:88:ef:fb:1b:1d:12:9f:b7:15:38:f5:a9:0a:8c:
32:84:36:3a:4a:0c:18:72:41:6c:2a:9f:56:25:6f:
b8:82:15:27:cd:26:a5:bc:78:fb:3d:b2:52:4b:28:
46:5f:35:cd:7b:22:a6:e1:f6:a7:cf:42:61:27:2c:
ea:46:7b:0a:cc:94:7b:e5:3c:67:02:e5:e9:97:cd:
34:ad:11:4c:80:04:05:10:36:8f:5e:29:9e:e4:7f:
41:58:b3:40:88:0e:d1:ac:f9:42:1a:a4:85:9f:0b:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.32.0/22
Signature Algorithm: sha256WithRSAEncryption
50:f8:0d:4b:41:a3:02:9a:74:23:15:0a:d7:9d:84:b3:6a:22:
dd:e0:aa:2e:87:1f:92:39:b0:b4:6a:6a:68:5e:67:c8:7d:8a:
81:52:75:e4:bb:21:c1:cd:b9:70:db:cf:e3:22:b8:30:de:b0:
99:b7:58:fb:66:7c:f7:db:6f:d2:f2:43:df:98:25:db:e5:05:
08:c4:67:93:f7:18:eb:e2:e8:5e:8c:2d:04:ea:02:81:32:84:
b4:af:c6:08:88:d2:8b:c2:2c:41:1d:86:61:74:4b:52:1b:4d:
a8:40:1f:74:55:c8:41:ba:47:83:23:86:38:9b:fc:e5:37:0b:
48:e3:6c:bc:e5:6d:d1:7d:63:fb:6d:b6:2e:da:8b:67:44:50:
52:71:15:70:c9:a0:29:31:ff:be:1e:a1:81:9b:4e:6c:07:b2:
82:24:0c:d2:13:63:de:67:08:78:8c:05:ab:dc:9b:2c:46:60:
d8:3d:68:59:00:b9:0b:f4:95:84:24:43:bf:c3:e0:d8:0c:14:
87:a6:74:3d:95:02:b5:72:6f:ef:de:44:3a:fc:9a:2d:7f:47:
90:06:8a:23:43:d2:2f:88:36:c6:b5:3e:41:bb:52:7f:5d:03:
06:78:4a:7a:94:98:15:6c:49:7b:52:ff:9d:6a:52:4c:7f:18:
70:39:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:12 2025 by rpki-client on console.sobornost.net