Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WXUlFhQ41aiPe3TcEVuhgr4uyVU.cer
File: WXUlFhQ41aiPe3TcEVuhgr4uyVU.cer (raw, json)
Hash identifier: 6jHXBYL61XOxein9BdP02aLfN+4dhbRX8puaDOyW8tM=
Subject key identifier: 59:75:25:16:14:38:D5:A8:8F:7B:74:DC:11:5B:A1:82:BE:2E:C9:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA995473E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/3da2e8-e973-478d-8ea1-22586b7053f4/1/WXUlFhQ41aiPe3TcEVuhgr4uyVU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/3da2e8-e973-478d-8ea1-22586b7053f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:57:41 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.31.36.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732716889061 (0xaa995473e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=597525161438d5a88f7b74dc115ba182be2ec955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:ce:9c:39:59:05:ce:32:83:ac:ae:62:a5:
06:2b:4f:75:a9:72:88:6d:38:1b:3e:cf:0e:21:1a:
af:27:b8:d6:0b:8f:4c:f7:fd:3d:f9:88:04:b4:6c:
c2:33:1e:eb:1d:a9:49:f1:82:4b:e7:8c:5b:0f:15:
2b:b7:5d:07:54:6a:82:02:02:10:b3:cb:e8:ae:ed:
fa:11:f2:cc:43:e6:2c:56:f5:7e:f0:06:cb:e3:34:
5f:a7:67:b0:15:f1:9d:09:8e:e1:65:e5:30:b9:5c:
fc:9c:18:b0:89:fa:f0:09:29:af:ac:25:58:a7:27:
39:f4:f8:c4:89:7e:de:c0:2c:13:73:b3:90:7d:72:
80:75:60:7c:35:f8:f0:1f:bd:a0:0c:6f:e9:7c:19:
72:a3:ee:64:cb:b3:c2:77:b3:5b:ce:6a:f6:9f:ff:
41:e0:7a:52:26:45:85:32:f6:51:77:47:1b:35:27:
51:59:5e:6b:2c:d9:1c:54:92:e3:bf:e9:7d:fe:f7:
42:6f:21:f2:8d:37:21:ff:24:ce:bd:00:2f:65:d6:
b3:d2:60:06:9e:8a:39:7d:5c:32:4e:22:41:70:b1:
63:05:a3:cf:df:e3:33:a4:24:28:40:b7:5d:f1:11:
18:27:4b:0e:ed:fa:d0:73:fb:bc:ed:67:c6:2e:32:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:75:25:16:14:38:D5:A8:8F:7B:74:DC:11:5B:A1:82:BE:2E:C9:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3da2e8-e973-478d-8ea1-22586b7053f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3da2e8-e973-478d-8ea1-22586b7053f4/1/WXUlFhQ41aiPe3TcEVuhgr4uyVU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.36.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:30:4c:89:56:7b:28:7e:1a:a5:6f:de:0b:2d:53:88:3e:41:
e3:82:da:28:e5:2d:5a:6e:4b:5a:a2:31:e9:17:89:6b:1b:55:
86:c9:b0:e2:37:74:c2:ce:bd:05:82:f8:01:e0:9b:8b:fb:22:
7a:47:21:a6:c2:b0:49:d9:79:f8:5f:51:a1:5e:ba:a1:f9:c1:
62:60:e0:08:04:99:ab:a8:5c:c6:7d:a8:29:cd:97:80:d5:cd:
90:34:39:bf:b5:83:ad:38:e6:30:6a:3b:1a:55:38:28:4e:d0:
8a:c8:a8:5d:3e:17:0a:ed:ba:1d:bd:4c:44:94:76:60:ca:b6:
55:1c:a8:c6:11:6e:6d:2b:14:35:f5:a9:93:31:51:6d:95:79:
31:33:1c:85:cc:55:de:0e:bd:6b:d0:70:85:2c:4e:38:17:24:
c2:64:ae:ac:76:04:c2:9d:2f:8b:db:b3:ac:64:28:f7:43:ec:
4b:11:1d:cc:83:d0:b8:67:0f:bd:eb:b5:35:ae:c8:71:ab:24:
ce:8d:9f:c7:d9:26:b6:cf:b8:a7:2d:6f:f3:18:87:0c:73:67:
75:ba:83:ac:31:8a:0d:48:f9:71:31:98:d0:13:30:41:68:8a:
ce:d5:02:62:df:c5:42:e9:e9:39:40:d0:e7:b1:e9:ef:d7:f2:
5b:21:84:cb
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKqZVHPlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTU1NzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1OTc1MjUxNjE0
MzhkNWE4OGY3Yjc0ZGMxMTViYTE4MmJlMmVjOTU1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAzhjOnDlZBc4yg6yuYqUGK091qXKIbTgbPs8OIRqvJ7jW
C49M9/09+YgEtGzCMx7rHalJ8YJL54xbDxUrt10HVGqCAgIQs8voru36EfLMQ+Ys
VvV+8AbL4zRfp2ewFfGdCY7hZeUwuVz8nBiwifrwCSmvrCVYpyc59PjEiX7ewCwT
c7OQfXKAdWB8NfjwH72gDG/pfBlyo+5ky7PCd7Nbzmr2n/9B4HpSJkWFMvZRd0cb
NSdRWV5rLNkcVJLjv+l9/vdCbyHyjTch/yTOvQAvZdaz0mAGnoo5fVwyTiJBcLFj
BaPP3+MzpCQoQLdd8REYJ0sO7frQc/u87WfGLjJnaQIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFFl1JRYUONWoj3t03BFboYK+LslVMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzNkYTJlOC1lOTczLTQ3OGQt
OGVhMS0yMjU4NmI3MDUzZjQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvM2RhMmU4LWU5NzMtNDc4ZC04
ZWExLTIyNTg2YjcwNTNmNC8xL1dYVWxGaFE0MWFpUGUzVGNFVnVoZ3I0dXlWVS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCwR8kMA0GCSqGSIb3DQEBCwUAA4IBAQAuMEyJVnsofhqlb94LLVOI
PkHjgtoo5S1abktaojHpF4lrG1WGybDiN3TCzr0FgvgB4JuL+yJ6RyGmwrBJ2Xn4
X1GhXrqh+cFiYOAIBJmrqFzGfagpzZeA1c2QNDm/tYOtOOYwajsaVTgoTtCKyKhd
PhcK7bodvUxElHZgyrZVHKjGEW5tKxQ19amTMVFtlXkxMxyFzFXeDr1r0HCFLE44
FyTCZK6sdgTCnS+L27OsZCj3Q+xLER3Mg9C4Zw+967U1rshxqyTOjZ/H2Sa2z7in
LW/zGIcMc2d1uoOsMYoNSPlxMZjQEzBBaIrO1QJi38VC6ek5QNDnsenv1/JbIYTL
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:28 2025 by rpki-client