Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer (raw, json)
Hash identifier: LBVYH0jLDdrDGuQtYasELjnqiOPFcvlZFeukhC9gyfU=
Subject key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D942F5E0759F50FDBF2EF8FCBBD7A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.66.168.0/22
IP: 185.71.60.0/22
IP: 193.110.143.0/24
IP: 193.110.148.0/24
IP: 193.110.158.0/24
IP: 193.111.32.0/24
IP: 2a03:2020::/32
IP: 2a03:38a0::/32
IP: 2a0f:8cc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:42:f5:e0:75:9f:50:fd:bf:2e:f8:fc:bb:d7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:c1:0f:6e:f0:e9:12:37:6f:82:a8:a0:7b:
02:77:28:09:03:3f:17:d7:e6:27:50:5f:5f:6b:db:
0d:5f:e4:10:3d:cd:f4:71:49:16:15:f3:f8:b9:35:
62:16:ed:a2:74:19:99:7a:0c:a2:b2:73:43:32:77:
a4:bd:cd:19:e5:4d:11:08:74:c6:43:2f:4e:66:89:
35:d4:3c:91:60:a3:40:14:05:24:61:59:52:f5:c9:
79:fb:84:8b:c3:04:ab:fb:d9:12:d9:dd:33:79:09:
38:e2:1d:ce:8e:e7:6b:5e:14:6c:c6:46:7e:6a:aa:
9b:d5:01:95:11:f7:99:23:98:e3:3c:5d:18:10:75:
40:d2:38:46:04:4b:43:c7:9e:f8:2e:68:21:ec:ef:
2a:71:29:2c:a5:c9:ba:6d:dc:d7:4a:66:18:f8:ab:
79:62:c8:18:ee:91:3c:12:a8:00:41:1d:c5:e7:3c:
c7:89:65:18:6c:b3:ac:36:16:41:81:d9:a6:af:33:
19:9d:d9:01:c7:32:a5:f2:76:aa:6a:ed:a4:8a:eb:
28:da:ac:75:87:11:c4:5b:00:a4:1d:d4:ae:21:85:
cf:9a:12:7b:26:bd:24:30:b9:2e:a8:d2:9e:b9:72:
97:47:e3:98:bf:23:5c:be:09:5f:f2:8d:0f:e2:25:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.168.0/22
185.71.60.0/22
193.110.143.0/24
193.110.148.0/24
193.110.158.0/24
193.111.32.0/24
IPv6:
2a03:2020::/32
2a03:38a0::/32
2a0f:8cc0::/32
Signature Algorithm: sha256WithRSAEncryption
71:94:ef:ec:77:47:a3:04:ae:18:98:f7:99:2b:29:16:27:f5:
38:ef:80:69:85:8f:12:53:1b:83:32:b3:c2:22:a2:4f:54:5a:
56:3d:09:57:af:30:28:64:9a:4b:72:db:75:66:af:f4:d1:c9:
3f:e8:6e:ed:e7:fa:a1:9a:a2:6d:24:5b:08:9a:43:6d:e9:48:
f1:30:43:48:8a:46:13:9b:1b:6c:44:65:8c:02:60:2f:ba:98:
d5:cb:c4:53:11:b3:06:9b:08:c1:97:b7:44:e9:54:35:06:ae:
06:67:cd:d9:7d:6c:5c:71:ba:85:34:84:57:49:77:78:75:dc:
7f:0f:a5:81:f5:23:50:c8:39:a0:c7:1a:ab:13:b2:74:3d:59:
57:db:75:08:be:d7:ea:5b:ca:df:93:81:da:a4:b2:70:69:0f:
cc:4e:b1:0d:be:3c:c9:8a:ae:e8:73:95:19:73:21:87:ad:7b:
55:58:a9:8a:60:3e:f3:54:de:1c:80:ba:97:32:a8:74:61:02:
c0:d4:5c:01:ca:d7:f4:9b:57:8d:8c:e8:ba:b8:e4:dc:52:bb:
3b:01:20:37:7b:a7:4a:1d:6b:e6:b0:5f:57:41:92:b4:d2:b3:
c0:60:9b:0d:1a:b5:e8:f8:04:44:a7:2e:a6:a3:60:02:8e:17:
bb:02:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:51:15 2025 by rpki-client