Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WFxajPzhRoLOX_AL27RqK7We598.cer
File: WFxajPzhRoLOX_AL27RqK7We598.cer (raw, json)
Hash identifier: Nj++mS1yW9nmWbBEgZ6Hk6h8xBNW6ue3Zn9gFKZcsuM=
Subject key identifier: 58:5C:5A:8C:FC:E1:46:82:CE:5F:F0:0B:DB:B4:6A:2B:B5:9E:E7:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B0D827CEAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/8d1ff3-54ef-47e2-b038-2c75f225a056/1/WFxajPzhRoLOX_AL27RqK7We598.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/8d1ff3-54ef-47e2-b038-2c75f225a056/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 28 Apr 2022 07:55:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.213.128.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759540731566 (0xb0d827ceae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 07:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=585c5a8cfce14682ce5ff00bdbb46a2bb59ee7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:96:08:85:8a:ae:c2:3c:19:6b:5b:b1:64:
0c:72:c2:37:7d:54:1c:3c:f2:b6:1b:80:95:fb:49:
f9:64:a2:85:f2:0e:26:6d:70:49:f9:2a:ad:7f:d2:
fa:20:36:b2:99:41:c8:c8:f5:83:89:ff:9c:21:9b:
9b:fa:f4:8b:dd:52:8e:30:8a:bc:f8:24:b9:d7:8e:
0d:b2:83:6a:db:11:c7:e5:a0:f3:10:7c:dc:67:2e:
18:f4:92:6d:5f:fb:ef:93:b0:03:2f:83:5b:44:bb:
60:d8:ac:6d:0e:b5:9f:e6:76:31:54:27:9c:4d:9b:
20:a9:54:96:0f:65:92:89:0d:ff:d6:58:cb:9d:03:
f7:6a:d2:20:5a:9a:e0:e1:74:48:21:7c:fa:5a:0e:
f5:fb:f1:5c:c1:9e:15:60:40:36:aa:0f:f8:50:78:
26:be:b3:6f:4a:4a:f0:f6:08:29:a8:79:92:91:1b:
39:d7:d0:80:51:e8:74:b9:7c:6d:e4:6e:5b:54:f8:
ec:9a:8f:c2:6b:87:63:fe:49:f6:cb:0b:dd:a7:17:
8f:52:75:67:2d:d0:6e:44:42:eb:71:12:22:7f:0c:
10:25:fd:7b:79:9d:f8:be:d6:ce:85:ab:c4:5c:42:
80:a2:9c:ca:c9:2c:8f:b9:65:c5:0e:26:59:ec:af:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:5A:8C:FC:E1:46:82:CE:5F:F0:0B:DB:B4:6A:2B:B5:9E:E7:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8d1ff3-54ef-47e2-b038-2c75f225a056/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8d1ff3-54ef-47e2-b038-2c75f225a056/1/WFxajPzhRoLOX_AL27RqK7We598.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.128.0/24
Signature Algorithm: sha256WithRSAEncryption
29:75:ef:cd:9d:b9:e9:0a:02:85:2a:8f:a4:3f:75:6f:c8:c8:
1f:b4:b3:44:0d:39:c5:d9:ff:d0:dc:f6:bc:03:13:81:81:51:
16:47:3d:b3:c3:d9:46:d7:33:b9:b5:c1:50:66:db:82:f6:0c:
93:e5:fe:ee:4b:a4:17:72:f8:16:dc:b2:de:34:4e:8f:f6:cc:
18:4e:f0:c4:3a:fc:52:33:47:eb:a2:86:6d:40:f4:ae:04:fd:
7d:3c:84:9e:94:14:6f:52:cd:da:7d:20:cc:d9:59:1c:7d:4e:
1d:b6:cd:18:89:6e:8c:f9:c0:f9:86:b0:5e:d2:80:ca:ae:31:
e1:f3:a5:b0:4a:b1:0b:08:44:4f:be:3a:f8:64:c2:79:62:ea:
0c:62:5f:76:e1:1a:74:50:87:82:bc:fb:d5:c4:c5:66:fb:14:
36:34:59:61:7c:c2:27:32:28:c1:6b:09:74:59:cc:88:fb:c2:
ee:bc:8e:a2:bb:bf:59:1d:a8:28:66:8d:60:85:e0:07:56:e5:
7b:1a:02:2d:5f:ed:d2:89:90:e1:e7:f8:c4:fd:7c:01:d9:21:
21:db:2b:52:3e:0c:56:c1:ee:3a:b3:96:a9:d4:e8:9d:a4:77:
81:b2:8d:fd:75:cf:c5:f7:49:fe:97:ff:24:88:b5:c5:84:4c:
33:14:1a:11
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGALDYJ86uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NDI4MDc1NTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1ODVjNWE4Y2Zj
ZTE0NjgyY2U1ZmYwMGJkYmI0NmEyYmI1OWVlN2RmMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAv5CWCIWKrsI8GWtbsWQMcsI3fVQcPPK2G4CV+0n5ZKKF
8g4mbXBJ+Sqtf9L6IDaymUHIyPWDif+cIZub+vSL3VKOMIq8+CS5144NsoNq2xHH
5aDzEHzcZy4Y9JJtX/vvk7ADL4NbRLtg2KxtDrWf5nYxVCecTZsgqVSWD2WSiQ3/
1ljLnQP3atIgWprg4XRIIXz6Wg71+/FcwZ4VYEA2qg/4UHgmvrNvSkrw9ggpqHmS
kRs519CAUeh0uXxt5G5bVPjsmo/Ca4dj/kn2ywvdpxePUnVnLdBuRELrcRIifwwQ
Jf17eZ34vtbOhavEXEKAopzKySyPuWXFDiZZ7K+5WQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFFhcWoz84UaCzl/wC9u0aiu1nuffMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzhkMWZmMy01NGVmLTQ3ZTIt
YjAzOC0yYzc1ZjIyNWEwNTYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOGQxZmYzLTU0ZWYtNDdlMi1i
MDM4LTJjNzVmMjI1YTA1Ni8xL1dGeGFqUHpoUm9MT1hfQUwyN1JxSzdXZTU5OC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAW9WAMA0GCSqGSIb3DQEBCwUAA4IBAQApde/NnbnpCgKFKo+kP3Vv
yMgftLNEDTnF2f/Q3Pa8AxOBgVEWRz2zw9lG1zO5tcFQZtuC9gyT5f7uS6QXcvgW
3LLeNE6P9swYTvDEOvxSM0frooZtQPSuBP19PISelBRvUs3afSDM2VkcfU4dts0Y
iW6M+cD5hrBe0oDKrjHh86WwSrELCERPvjr4ZMJ5YuoMYl924Rp0UIeCvPvVxMVm
+xQ2NFlhfMInMijBawl0WcyI+8LuvI6iu79ZHagoZo1gheAHVuV7GgItX+3SiZDh
5/jE/XwB2SEh2ytSPgxWwe46s5ap1OidpHeBso39dc/F90n+l/8kiLXFhEwzFBoR
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:08 2025 by rpki-client