Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer (raw, json)
Hash identifier: z4g7P6WEeu0J+w4xuENgpMtTtRyokts5FdUC41OJunM=
Subject key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C898657BB11DF5D1B02934F1DB042
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.241.228.0/22
IP: 2a0c:b480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:89:86:57:bb:11:df:5d:1b:02:93:4f:1d:b0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:69:6f:4d:08:0b:fc:f1:4d:d7:42:0b:fe:dc:
24:cc:f7:0c:d2:93:b1:87:11:7b:12:1f:b0:84:b3:
56:42:71:36:1a:35:ba:60:71:d9:fb:3f:0e:f1:0b:
92:10:48:66:f9:b6:8f:41:aa:f3:a7:15:c9:7b:ac:
c1:cb:2a:67:90:b7:9d:20:07:15:0d:24:75:0e:c3:
98:41:1e:16:f0:69:33:c0:63:1b:aa:8f:a9:ae:30:
93:b3:b2:a6:4e:6a:1e:f8:b5:e2:40:dc:3c:76:76:
be:95:7e:06:64:1b:9d:5b:88:bb:b6:80:41:76:3d:
47:02:eb:a4:57:05:b2:ba:d0:02:f4:85:6a:ea:24:
d2:8e:a6:51:ee:d9:e2:13:09:b5:d2:78:36:c0:8c:
85:c2:d5:9d:9a:16:29:53:fa:e2:14:95:21:1b:82:
ee:d6:11:05:b2:d6:e0:46:8e:38:b8:f2:a7:ce:4b:
0c:00:aa:55:76:50:b6:00:bc:22:21:3d:1e:c9:64:
10:e4:4d:5e:d3:63:ac:83:20:86:15:04:fb:09:92:
5f:3c:04:1f:ec:2e:f6:85:18:e3:0e:02:79:9c:4a:
1a:25:63:fd:9f:1b:15:06:f2:c8:82:6f:00:88:ea:
40:56:b6:7d:ad:c0:a2:05:1b:49:b0:53:33:cf:e3:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.228.0/22
IPv6:
2a0c:b480::/29
Signature Algorithm: sha256WithRSAEncryption
29:76:49:fa:94:64:c1:93:ee:65:e6:cf:76:a8:05:8f:60:b8:
d1:0a:12:fc:be:65:ef:ce:47:b1:14:45:28:47:8f:4f:1d:4d:
de:a2:18:1d:ca:f2:58:29:de:db:3d:70:9c:52:d6:b0:82:ea:
95:91:52:c9:d9:c1:d1:97:a3:3e:58:be:e1:41:0e:90:32:0c:
4f:2b:1b:97:07:5a:c1:d7:26:ec:a1:41:a8:59:bc:b8:8d:fc:
cf:dc:72:b3:4e:61:fd:45:a2:db:48:5f:6b:82:10:21:04:b3:
bb:a7:59:6a:f9:e5:a2:15:65:0a:28:4d:48:ae:87:0b:7a:07:
99:4e:bc:55:f5:d9:5b:be:b3:79:e3:6d:9a:fb:75:e7:17:6c:
c8:e8:40:1c:f0:92:e2:c9:9e:a7:f3:80:d0:00:c5:47:9d:f2:
3f:c8:c3:85:bf:a2:42:22:2b:b1:28:36:9d:10:7d:bf:bc:92:
1d:68:98:76:6f:f5:c6:c6:2b:14:62:f8:9f:11:0a:7f:7e:1c:
ce:ae:c9:ce:ba:f1:26:0c:77:51:90:c3:06:f5:68:dc:b5:5c:
f8:72:43:8f:c9:bf:a0:a9:3d:e1:11:35:55:33:ed:bd:b8:3b:
1d:b8:84:ab:ab:47:3a:80:a6:5a:45:2c:c8:d2:d1:32:42:f8:
4c:99:68:ff
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQfjImGV7sR310bApNPHbBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTQ1N2M2ODVjNWIxNWMzYWY0ZDQzYjYwZTRkNGMwYTBlZWVkNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGlvTQgL/PFN10IL/twkzPcM0pOx
hxF7Eh+whLNWQnE2GjW6YHHZ+z8O8QuSEEhm+baPQarzpxXJe6zByypnkLedIAcV
DSR1DsOYQR4W8GkzwGMbqo+prjCTs7KmTmoe+LXiQNw8dna+lX4GZBudW4i7toBB
dj1HAuukVwWyutAC9IVq6iTSjqZR7tniEwm10ng2wIyFwtWdmhYpU/riFJUhG4Lu
1hEFstbgRo44uPKnzksMAKpVdlC2ALwiIT0eyWQQ5E1e02OsgyCGFQT7CZJfPAQf
7C72hRjjDgJ5nEoaJWP9nxsVBvLIgm8AiOpAVrZ9rcCiBRtJsFMzz+M1iwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFlFfGhcWxXDr01Dtg5NTAoO7taLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2Y0ODIx
Yi0wODYzLTQ1ZWQtYTZjZC0wYmYyYTFiMmNjY2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvZjQ4MjFi
LTA4NjMtNDVlZC1hNmNkLTBiZjJhMWIyY2NjYi8xL1dVVjhhRnhiRmNPdlRVTzJE
azFNQ2c3dTFvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCufHkMA0EAgACMAcDBQMqDLSAMA0GCSqGSIb3
DQEBCwUAA4IBAQApdkn6lGTBk+5l5s92qAWPYLjRChL8vmXvzkexFEUoR49PHU3e
ohgdyvJYKd7bPXCcUtawguqVkVLJ2cHRl6M+WL7hQQ6QMgxPKxuXB1rB1ybsoUGo
Wby4jfzP3HKzTmH9RaLbSF9rghAhBLO7p1lq+eWiFWUKKE1IrocLegeZTrxV9dlb
vrN5422a+3XnF2zI6EAc8JLiyZ6n84DQAMVHnfI/yMOFv6JCIiuxKDadEH2/vJId
aJh2b/XGxisUYvifEQp/fhzOrsnOuvEmDHdRkMMG9WjctVz4ckOPyb+gqT3hETVV
M+29uDsduISrq0c6gKZaRSzI0tEyQvhMmWj/
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:36 2025 by rpki-client