Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer (raw, json)
Hash identifier: QoCS9tP7a9AnNWZElQZCD1RJ4NtTqtC/7C075uQ0lHI=
Subject key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019589BCA9109A303BF0C5BDB117512C4735
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Mar 2025 09:43:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 145.79.32.0/21
IP: 145.79.200.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:bc:a9:10:9a:30:3b:f0:c5:bd:b1:17:51:2c:47:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 09:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:31:02:06:34:7b:17:5d:53:d3:58:48:03:
07:d6:52:0f:47:a7:29:7e:b0:39:a5:f7:31:bd:ac:
59:e6:3a:05:96:a3:7c:d3:8c:96:83:6c:e7:33:d7:
70:01:ca:f3:80:21:b5:87:85:92:2f:14:5e:d4:62:
5d:b0:14:3b:9a:1c:45:4b:fd:6d:66:2d:f0:0c:41:
44:c0:4e:23:01:7a:ab:e1:7f:08:da:b8:b7:3e:bf:
4e:09:a5:55:dc:70:eb:6f:d8:3e:65:ed:88:9a:dc:
87:59:72:42:1e:3d:13:e5:cf:d2:74:2e:c3:b9:df:
fa:d9:69:94:e3:b1:47:41:0b:79:30:f8:e0:5e:1c:
ce:db:08:01:22:f5:f9:81:0a:3a:f9:41:c7:b9:13:
e6:0b:9f:cc:85:35:ad:0c:16:97:c5:c4:2b:7d:2d:
e4:fa:31:db:cd:f5:b2:e0:5b:4f:b6:a3:d8:73:40:
74:79:43:33:6f:90:a3:70:38:bf:17:db:d0:92:4a:
78:ee:b1:d4:a2:40:5c:63:a5:40:62:64:d2:aa:a9:
21:a7:57:d3:02:bf:2a:6b:84:d3:5f:14:80:12:87:
13:69:b7:0e:46:64:f7:e6:98:d0:32:2a:ab:fe:99:
d3:dd:4f:d5:a1:6d:26:f5:99:5e:67:5f:51:a6:2a:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.32.0/21
145.79.200.0/21
Signature Algorithm: sha256WithRSAEncryption
90:33:97:c1:ef:5b:10:bf:cc:38:2a:88:d2:a9:44:59:95:8c:
af:4e:2f:4f:1c:38:5b:1b:41:7a:6b:8f:bc:de:d0:9d:13:bf:
e7:de:cc:09:d9:e6:27:f1:c3:03:53:f5:e9:a3:d4:01:c0:8e:
9e:96:f0:72:69:eb:b8:5b:cf:8e:25:3e:2b:eb:dc:3e:92:dc:
3d:75:0d:4b:58:9b:c6:20:8c:ba:39:17:ca:d3:4b:51:08:e7:
88:51:20:6b:4c:77:f3:d0:fb:36:01:68:6c:d9:5f:3f:b9:13:
f7:37:5f:82:d8:6c:1b:9c:2a:e2:cd:04:f1:71:70:5f:b9:e0:
12:a1:61:b2:a8:5c:65:41:3d:a8:a1:6b:56:8a:0c:79:94:4b:
f3:3a:2f:39:41:b7:10:28:42:84:d4:97:cf:f1:6e:1f:3c:ca:
38:34:c0:61:7c:ae:f3:10:d6:80:13:74:20:e5:5e:a3:3c:97:
1a:fe:24:99:f7:97:5f:2d:64:76:22:5e:09:0a:aa:1a:d1:b8:
ad:90:5c:3f:b8:09:58:b4:56:27:a2:66:7b:64:6c:12:22:c4:
88:0d:cd:2d:b0:3a:67:c4:7b:4c:4e:2d:0b:78:87:52:86:e2:
02:37:0e:6c:45:5f:5c:43:18:13:b3:11:2a:1c:57:7f:54:99:
be:a5:de:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:15 2025 by rpki-client on console.sobornost.net