Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WYuxX8RsLGsgNqHGXUBLNmfLSnQ.cer
File: WYuxX8RsLGsgNqHGXUBLNmfLSnQ.cer (raw, json)
Hash identifier: aZx1n0JDpWn35pv1z8hj6haFKklDapzb1kix/JV67lg=
Subject key identifier: 59:8B:B1:5F:C4:6C:2C:6B:20:36:A1:C6:5D:40:4B:36:67:CB:4A:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701CB64D8EDFC22C3DD08ED6CD28CC9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/e45be0-6d1e-48c7-b14b-4d051737bff2/1/WYuxX8RsLGsgNqHGXUBLNmfLSnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/e45be0-6d1e-48c7-b14b-4d051737bff2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:33:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.52.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1c:b6:4d:8e:df:c2:2c:3d:d0:8e:d6:cd:28:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:33:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=598bb15fc46c2c6b2036a1c65d404b3667cb4a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fc:2e:8d:4c:a3:93:8c:8e:cc:f4:39:50:eb:
22:10:8f:72:da:bc:bb:1b:c6:2e:02:62:5b:93:c5:
84:8e:6b:7c:38:85:24:d4:77:24:9e:6b:ed:b3:4f:
d7:0f:89:99:11:de:bb:11:28:2e:23:a0:2b:2a:06:
c6:4b:12:93:37:88:81:cf:5c:cc:65:28:58:4d:1f:
b7:98:26:d9:64:ec:b1:d9:69:36:30:77:7e:a0:f8:
0e:0e:23:bf:a3:03:f7:e5:7e:ab:dd:ed:98:74:64:
7c:b8:3d:94:e9:02:c1:d6:cb:3e:be:2e:9e:5c:ef:
46:f9:14:87:bc:c9:c4:58:c9:87:9f:d8:4b:90:e2:
a3:19:d8:dc:e8:3b:0d:c7:02:b7:a8:ca:9f:be:39:
0b:ef:82:13:e4:f4:3d:1e:62:94:cf:6b:d5:c4:9f:
67:ae:59:1b:d9:e0:73:7a:ae:bc:03:8f:1e:d7:9e:
7a:9c:9b:60:84:42:40:d5:8f:2c:24:28:d9:7b:6c:
f8:09:3b:ff:28:cf:f2:40:6b:17:92:34:89:32:58:
37:93:f6:57:57:4f:30:8a:b4:07:35:f6:df:6e:aa:
2b:5f:a5:32:7a:68:98:88:26:7d:ac:68:6e:55:7e:
42:f0:9e:fd:07:a5:82:39:69:10:70:a9:de:ac:ba:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:B1:5F:C4:6C:2C:6B:20:36:A1:C6:5D:40:4B:36:67:CB:4A:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e45be0-6d1e-48c7-b14b-4d051737bff2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e45be0-6d1e-48c7-b14b-4d051737bff2/1/WYuxX8RsLGsgNqHGXUBLNmfLSnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.52.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a7:b5:e4:a2:5d:f9:20:d0:42:f2:41:51:86:3f:d5:79:54:
f3:f1:68:72:4d:26:87:c8:28:8b:89:c7:1c:81:05:2a:0d:7e:
2d:bd:4a:50:c1:be:67:20:d4:8a:f3:54:f3:51:36:ce:23:dc:
06:48:52:16:45:1e:39:23:00:4d:89:77:84:5e:75:b6:83:c6:
bb:24:5b:99:d3:79:14:dc:a6:9c:43:a3:c3:cf:b0:43:a0:ac:
92:62:d1:91:33:20:78:89:f6:7d:d8:dc:72:80:57:4c:97:bb:
d8:fe:16:26:cf:43:20:ca:92:50:81:de:30:d1:e7:df:ae:0c:
77:74:bb:f6:0b:3a:13:85:3f:03:9f:95:b8:52:08:35:12:ca:
2d:b3:d5:89:fb:c6:1a:08:7b:87:6c:fd:7f:53:00:85:2d:5d:
8a:b1:34:af:d8:28:77:59:d9:c7:99:b9:bc:0b:c2:06:de:5e:
ec:ad:bb:12:81:01:6d:8d:f5:73:16:e1:81:07:77:16:88:1e:
86:d5:56:bd:61:d6:77:16:69:a4:20:02:4f:fb:73:c8:2a:00:
fc:27:74:16:e0:09:1f:86:c2:a0:73:29:1c:ef:96:70:da:52:
53:da:36:0f:eb:97:5b:28:27:60:85:9e:62:50:7c:0a:bb:16:
9e:a4:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:54 2025 by rpki-client