
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
File: Wx2S_lASvWW-DDKw7jkXGciClCw.cer (raw, json)
Hash identifier: 2kEZzhbMTBw9NIuRg0R8krcR6Aed8+bFzRH15fqy2VI=
Subject key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B39CFAB913C79EE360DE660A309F6C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60457
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9c:fa:b9:13:c7:9e:e3:60:de:66:0a:30:9f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:9f:31:5a:10:97:e6:e9:17:0d:11:f9:66:
8a:9b:d4:f5:ba:8b:41:52:26:20:92:4d:4d:f9:69:
f7:82:14:cb:7e:80:57:44:7c:7a:b3:25:2a:ac:88:
d7:08:be:27:8f:b7:38:48:be:d2:66:6d:0f:bc:38:
10:3b:46:a1:ff:2c:29:d4:22:6b:74:a9:20:ca:18:
91:1d:2b:13:2e:2f:c4:61:a7:a0:db:c0:ee:76:1c:
8a:4e:af:6e:5f:d6:cf:c7:57:a5:76:0c:a9:24:1e:
36:12:51:a0:53:3b:3a:69:fd:af:bd:5c:f6:13:41:
e1:72:0a:73:b2:90:06:2c:ff:fe:a7:ed:68:1b:4d:
71:3d:19:3e:cf:e1:aa:db:de:68:6b:b4:0d:b5:df:
13:ec:da:8d:b0:ed:75:3c:29:92:28:62:c0:46:2c:
9e:71:6b:92:11:3a:5f:ec:fa:66:81:a8:ff:ae:5c:
a6:a7:6a:ee:70:47:6f:19:10:10:0e:a7:d6:b8:0d:
cf:24:41:eb:53:e8:34:1f:74:9d:e6:46:c5:3a:02:
b6:72:b7:32:49:13:73:8c:13:e5:f5:14:8b:cd:a0:
df:61:c9:1e:3c:c9:2d:46:11:78:b4:2a:bc:7e:22:
60:05:9d:fe:c2:50:46:0e:0c:03:c4:0b:33:84:6e:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60457
Signature Algorithm: sha256WithRSAEncryption
35:b5:7c:59:5f:f5:db:72:65:e8:6f:6e:e4:f3:22:56:04:bc:
5b:80:c7:fd:cd:19:ce:fb:ef:a7:b3:9e:8e:9b:c8:75:cf:9c:
4a:71:d9:12:a8:f1:75:fc:63:54:95:84:06:41:d5:1c:0a:40:
1a:d8:d3:41:ae:44:3a:92:0c:e2:cc:1b:1e:05:a7:c0:c3:16:
f5:d9:bc:2d:e5:06:bf:d1:c1:a3:90:41:34:d9:23:9b:88:7c:
f8:0d:f5:c0:a0:7f:b1:87:1a:22:cb:bd:9c:99:2e:12:51:ba:
8b:45:55:66:57:05:e7:c2:e3:b4:7a:85:b6:91:60:86:e3:0f:
8b:3e:ff:f9:6c:c2:d5:6f:51:75:d5:31:f0:5c:fe:46:75:30:
24:db:52:94:75:84:5d:3c:fc:4c:d5:5b:ee:e4:37:0a:cb:d3:
98:d2:2a:d8:f6:bc:c1:92:b6:00:47:03:af:b3:a5:49:ae:65:
a3:55:65:e0:ef:11:44:b3:8d:89:fc:b3:05:24:3c:02:8e:c9:
e2:43:58:08:e6:e9:61:32:d9:8a:ba:8a:fe:63:a7:d1:e5:01:
72:f8:4b:12:e2:47:46:0d:84:ae:6f:f8:25:63:a3:64:24:99:
5e:a3:af:2e:db:a6:86:b1:ef:7f:69:21:cd:6b:19:50:c7:f4:
b9:f2:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:57:55 2025 by rpki-client