Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer (raw, json)
Hash identifier: 4WPWzAYYkClt3bjTki8PWd5ZZGWsS1Nzdd17boNYF+M=
Subject key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942745D898C28BE6900A7C501A76B531D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.164.154.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:d8:98:c2:8b:e6:90:0a:7c:50:1a:76:b5:31:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:90:10:92:1e:11:99:48:dc:7d:75:94:a8:
fd:dc:0a:b2:ec:9d:3e:01:df:73:cc:c8:2a:54:02:
04:bf:9c:b5:4d:e8:ad:fb:94:62:1b:5e:c9:77:90:
be:58:7a:b4:17:6c:69:07:7d:2b:22:f3:cb:c0:09:
bb:b1:42:56:90:a0:8f:f3:f8:9d:71:27:2b:de:e6:
18:4e:6f:70:e2:a2:76:47:74:a1:69:41:1b:61:39:
0a:16:c3:4f:23:f3:1d:61:87:f0:1b:a8:77:60:0c:
4f:c2:e2:f0:a5:0c:74:46:11:a8:67:e6:8a:7f:81:
bd:c6:11:8b:f8:53:c0:03:3d:ab:ab:21:22:80:89:
5c:9f:6d:74:13:48:d6:83:25:a4:56:fb:b0:99:d0:
34:c1:b3:db:fc:f6:4c:9e:68:24:8d:11:f6:28:02:
b5:c9:b6:b2:77:78:7c:66:1a:af:c8:0f:70:23:e9:
3b:5e:a3:6a:7e:e0:59:28:a1:33:0f:56:1c:a3:f2:
0e:a1:76:ce:1e:1a:f6:40:1b:2e:49:ca:ac:1d:a8:
90:91:2d:36:ca:1f:a8:38:dd:21:c6:da:5e:ff:2b:
50:a3:13:85:b5:85:47:d7:1e:d0:0c:46:55:14:ff:
38:f2:0f:f1:b2:93:16:97:1b:79:a2:62:34:d7:00:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:eb:4c:b7:10:c5:a4:42:d3:12:28:1d:6a:40:29:be:75:83:
e0:7b:84:f6:6d:41:b5:0e:ec:fe:18:b5:88:1d:e1:05:0b:37:
1d:17:19:ca:6b:16:9f:1a:31:3e:8f:b2:d0:d6:f7:60:46:ec:
bd:8f:10:28:a2:04:33:7d:d7:6a:3b:16:76:f3:76:63:16:19:
81:5d:21:40:b1:fc:a4:81:69:b0:3c:1d:a4:cb:19:09:b8:85:
0a:29:c0:ca:69:18:c3:04:3a:f0:fc:b4:30:94:82:71:df:59:
e1:3e:fb:23:21:b2:26:dd:1b:a9:7f:cb:f7:5b:7a:23:fb:55:
18:ac:b1:9d:05:d7:95:a4:a4:20:ff:c9:20:75:08:fa:6a:96:
e5:56:51:a1:cc:86:6d:98:d8:fc:b8:71:82:7a:d5:70:2c:b3:
a7:b0:e0:31:eb:75:0a:5b:38:f2:97:73:87:e4:5d:5d:56:9d:
f2:71:7e:6e:2c:18:27:41:b9:03:2f:16:7d:35:6e:b8:7e:fe:
1d:a2:68:3e:6b:33:4d:1a:d2:a0:71:4e:f0:2e:b0:f0:4f:fb:
76:66:d0:c9:4c:7c:f1:8d:45:de:6c:a7:f5:41:1b:1c:dc:3e:
71:43:58:4c:b6:d9:67:b3:50:23:26:d6:4b:a3:7e:2c:fe:06:
de:a7:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:12 2025 by rpki-client on console.sobornost.net