Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
File: RHtl-fh6qPdA1aF6cub4vB5diI8.cer (raw, json)
Hash identifier: fXAxVgGjMeC4nje9AYOqLhV2Q8CZwimFg6zbT1+eg+w=
Subject key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FFB4481A0D9F6D40B761FEBF9355C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29238
IP: 79.98.112.0/21
IP: 185.66.128.0/22
IP: 217.21.144.0/20
IP: 2a00:8ba0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fb:44:81:a0:d9:f6:d4:0b:76:1f:eb:f9:35:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:3c:70:3e:46:68:55:0d:9d:23:fe:70:78:
d6:aa:64:ae:6c:89:1d:85:d0:6d:34:a9:91:d0:17:
67:ba:08:54:39:b5:c1:74:99:23:77:f4:c1:4d:25:
74:30:50:16:4a:b1:af:01:18:fe:41:28:05:a1:13:
cb:54:ef:11:fc:00:ad:44:ed:d5:de:10:64:f3:9c:
9f:6e:c3:b4:62:27:17:b9:2f:c9:b2:34:f6:82:d9:
5a:6a:4c:6b:92:60:1c:73:82:ef:76:2e:6c:d9:bd:
e2:76:bb:f2:06:43:97:97:94:35:c3:d4:d4:c4:49:
6b:c6:62:a9:45:99:a6:be:9c:22:79:9e:f9:41:26:
39:4b:7c:0d:4c:58:90:c3:50:a6:0b:b0:16:24:10:
c5:13:73:6d:e8:92:b2:5c:4d:a8:c5:06:14:6d:77:
6a:64:ab:10:49:d4:b2:14:4b:fe:48:e7:39:cb:b6:
f8:b6:68:c0:d2:1e:5c:d2:25:93:b7:2c:d7:37:64:
64:ba:75:e2:2e:96:38:55:d9:b3:0c:74:6d:3c:b9:
b2:99:c5:3b:94:27:bb:17:b3:7e:9c:8c:0f:dd:f3:
63:1d:9d:96:56:f7:a8:2c:77:58:e9:40:4d:2d:fd:
4c:ee:00:af:61:c0:9e:d5:e7:a8:11:11:6a:2e:00:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.112.0/21
185.66.128.0/22
217.21.144.0/20
IPv6:
2a00:8ba0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29238
Signature Algorithm: sha256WithRSAEncryption
ae:68:79:e8:a3:3d:bb:07:08:9a:ef:bd:63:b9:61:45:fd:a2:
7e:fc:96:e1:fe:ba:16:de:7b:c8:2b:d2:8a:fa:b3:41:68:b0:
f2:c9:ad:95:e2:fc:ef:f0:2c:2a:f1:b6:6f:07:bf:90:23:a2:
19:6d:04:79:6c:4c:b8:4d:be:14:02:24:32:64:2b:c7:96:92:
53:4f:42:5f:40:96:03:c9:34:96:c3:0f:ad:13:b8:e6:b5:ab:
30:ab:a0:e9:a7:7c:fa:00:72:bf:68:67:1d:a5:7a:2e:13:96:
3f:af:cc:0f:ea:e6:4e:3f:4f:c0:f1:d4:8a:e7:23:05:28:f6:
a1:8b:ec:e0:45:b1:ea:6d:f8:f2:e3:e9:15:37:b3:45:1d:d7:
e8:ae:92:5e:dd:1e:61:35:42:b5:33:14:e4:ff:83:6f:19:2a:
14:b9:17:d0:42:3a:0e:90:0c:76:4d:fc:ec:02:74:9f:df:c6:
27:83:2d:17:f3:7c:1f:be:dc:d6:6a:a1:07:b0:80:02:c5:b5:
6a:71:ce:13:61:72:7d:08:92:8a:3c:f7:62:e8:71:9e:63:73:
2f:70:5c:c2:1b:db:ed:1f:19:7b:a6:ae:b3:08:8c:f7:16:8e:
46:48:06:53:1a:0d:77:c2:6a:c9:9b:63:8d:cf:e3:28:60:2b:
ca:d8:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:56 2025 by rpki-client on console.sobornost.net