Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
File: HbvT4bzmclG1jybP0l_UAVZBZgM.cer (raw, json)
Hash identifier: dY2V1/FpLjLFxa/b3xXNlztog2gsxwjKSPxlI6xiQ1U=
Subject key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748190D879B945D40BE3D0B9B37D4C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41215
AS: 42028
AS: 42684
IP: 77.73.192.0/21
IP: 185.100.152.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:19:0d:87:9b:94:5d:40:be:3d:0b:9b:37:d4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:8f:bc:af:c0:15:8c:03:5f:b8:b9:9f:24:
78:e3:20:98:13:09:39:0a:c9:53:64:fe:ee:fe:02:
c8:7c:12:08:32:d9:f3:23:16:03:e0:ec:61:ea:dd:
27:c8:f9:92:d6:39:35:61:24:bc:37:9e:44:6a:a5:
ae:71:47:6b:25:4f:68:65:22:f9:00:48:de:d7:38:
3a:9e:ea:40:90:05:da:8b:5f:f6:65:86:f7:ba:8e:
74:d3:24:17:35:cf:25:39:a9:ca:b4:f7:89:a2:c7:
e8:1e:34:b1:ec:10:59:13:69:28:a1:58:b4:1e:fb:
41:ae:c6:34:be:fc:a2:c9:08:87:aa:7c:a3:aa:c5:
dd:f7:65:21:bd:c4:a3:d0:d2:67:0a:76:9f:a5:b1:
d1:fe:f9:a9:4d:62:c1:93:29:4e:59:da:3c:fa:dc:
9d:e6:0f:08:19:af:9e:8f:f1:af:f0:d7:7c:49:a0:
99:c5:3c:9c:dd:59:e1:d7:11:83:41:5b:7b:b0:3c:
da:d0:b8:fb:d1:b6:82:55:92:c0:30:2c:b7:5a:a3:
bd:6a:d7:a4:a6:1a:2b:a5:e6:8d:e7:a1:ef:34:dc:
25:ab:f6:21:f9:0a:bf:33:33:eb:0d:73:8e:7c:53:
d7:62:03:ec:03:3e:d2:2d:38:b3:fb:ed:39:30:b8:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.192.0/21
185.100.152.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41215
42028
42684
Signature Algorithm: sha256WithRSAEncryption
a1:bd:70:2c:f4:32:0a:fa:20:8a:51:80:58:51:fd:52:e9:7e:
8c:12:d9:c1:85:51:63:a5:8a:21:2f:0f:41:97:1a:ca:9d:b9:
db:fd:41:5d:fd:05:ef:03:70:fc:83:63:8e:22:6a:af:d7:3e:
fc:07:b4:92:d5:cf:52:3a:9b:50:49:6c:c5:e2:22:ee:ab:b0:
43:5e:0b:9b:7c:08:71:ae:78:55:90:ff:99:f5:04:7e:46:ed:
9e:d2:0a:d2:13:cc:d3:34:cc:8d:be:a4:ec:84:79:bd:e9:bb:
1a:ba:bf:3d:e0:d3:b8:d1:61:e2:d3:28:60:3e:d1:54:68:a8:
af:0e:da:4b:aa:bf:b3:b0:1a:c3:69:f0:38:d1:1d:59:98:6f:
c4:f2:4b:79:d3:9a:bf:17:f1:00:23:8b:15:39:a5:67:06:5b:
ad:bd:04:9e:9f:26:f0:a4:75:4d:43:5a:ab:ff:3c:0d:7b:4a:
ae:8d:58:b6:df:b9:c1:88:3e:80:c4:26:52:18:9c:8d:79:a8:
a3:90:46:48:c1:45:bc:ae:6c:49:2a:4d:41:b0:7d:35:86:18:
6b:78:d3:7a:a3:d8:e7:2a:4b:bd:21:77:e8:12:2f:ea:d2:7e:
b3:96:f6:0a:a8:1a:3c:fb:3f:48:d2:92:be:4f:44:a7:70:2d:
ac:11:b3:6c
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZQnSBkNh5uUXUC+PQubN9TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGJiZDNlMWJjZTY3MjUxYjU4ZjI2Y2ZkMjVmZDQwMTU2NDE2NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSSPvK/AFYwDX7i5nyR44yCYEwk5
CslTZP7u/gLIfBIIMtnzIxYD4Oxh6t0nyPmS1jk1YSS8N55EaqWucUdrJU9oZSL5
AEje1zg6nupAkAXai1/2ZYb3uo500yQXNc8lOanKtPeJosfoHjSx7BBZE2kooVi0
HvtBrsY0vvyiyQiHqnyjqsXd92UhvcSj0NJnCnafpbHR/vmpTWLBkylOWdo8+tyd
5g8IGa+ej/Gv8Nd8SaCZxTyc3Vnh1xGDQVt7sDza0Lj70baCVZLAMCy3WqO9atek
phorpeaN56HvNNwlq/Yh+Qq/MzPrDXOOfFPXYgPsAz7SLTiz++05MLimxwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFB270+G85nJRtY8mz9Jf1AFWQWYDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzBjMGE2
OS02NzA1LTQyNmMtOWU3MC1jZjhiMDFmNmVmMTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvMGMwYTY5
LTY3MDUtNDI2Yy05ZTcwLWNmOGIwMWY2ZWYxNy8xL0hidlQ0YnptY2xHMWp5YlAw
bF9VQVZaQlpnTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDTUnAAwQCuWSYMCQGCCsGAQUFBwEIAQH/BBUw
E6ARMA8CAwCg/wIDAKQsAgMAprwwDQYJKoZIhvcNAQELBQADggEBAKG9cCz0Mgr6
IIpRgFhR/VLpfowS2cGFUWOliiEvD0GXGsqdudv9QV39Be8DcPyDY44iaq/XPvwH
tJLVz1I6m1BJbMXiIu6rsENeC5t8CHGueFWQ/5n1BH5G7Z7SCtITzNM0zI2+pOyE
eb3puxq6vz3g07jRYeLTKGA+0VRoqK8O2kuqv7OwGsNp8DjRHVmYb8TyS3nTmr8X
8QAjixU5pWcGW629BJ6fJvCkdU1DWqv/PA17Sq6NWLbfucGIPoDEJlIYnI15qKOQ
RkjBRbyubEkqTUGwfTWGGGt403qj2OcqS70hd+gSL+rSfrOW9gqoGjz7P0jSkr5P
RKdwLawRs2w=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:12 2025 by rpki-client on console.sobornost.net