Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer (raw, json)
Hash identifier: QUwSv8HPEmw8CKMawn9bXxJUNaGTautLkFo7NTs8qg0=
Subject key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F5D2DF32833F75C5FDA3FC3F89927
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.79.72.0/22
IP: 2a05:7240::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5d:2d:f3:28:33:f7:5c:5f:da:3f:c3:f8:99:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:07:31:35:c1:7b:9e:55:b3:9f:5d:5c:3a:
15:d1:b7:3c:fc:4c:e0:25:ae:5d:52:74:64:e5:8a:
47:7b:ab:2f:89:c7:73:10:4f:05:31:e5:40:b2:ee:
d1:1e:e0:e4:06:bf:70:f0:60:62:c1:4c:78:82:df:
2a:a1:3d:7a:82:0b:88:c8:54:db:76:65:09:2d:01:
18:8a:bc:c2:77:f1:38:4d:16:c2:d2:48:39:23:33:
82:65:b2:51:d7:67:ee:3a:b8:78:fa:c9:b2:e1:80:
94:1e:d9:b2:f1:c3:7a:57:ba:57:b6:ff:83:6d:6e:
18:e7:97:44:c7:b1:5d:9f:23:c5:df:9f:82:79:32:
53:c3:bd:e1:8a:67:e0:73:9c:cb:a6:3a:1d:49:78:
5d:67:fc:d8:83:75:99:1c:dd:6c:28:d4:81:ea:77:
fe:4e:04:b6:26:28:23:dc:9f:e0:e1:33:fe:23:1d:
53:a0:54:2a:80:bb:d0:fc:48:ea:28:7c:d9:c1:cf:
3e:d9:3f:5f:0c:ea:e0:29:3a:e9:2c:72:8c:e2:c2:
03:f7:ee:c6:95:e8:a3:9a:9d:01:8d:c3:67:78:44:
e1:08:11:28:63:c5:69:98:ee:4d:00:10:77:5b:82:
42:91:d9:6a:d6:16:32:9a:07:81:53:c9:7a:be:7b:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.72.0/22
IPv6:
2a05:7240::/29
Signature Algorithm: sha256WithRSAEncryption
68:63:59:74:93:96:ec:af:cd:2d:f2:92:a8:6d:ab:6e:be:42:
13:d4:77:48:56:b1:cf:6b:94:33:79:57:de:f9:53:8f:b1:3f:
95:ae:ac:69:a2:7f:c1:98:86:38:57:d6:74:a2:ae:68:24:77:
d8:3b:fc:04:50:e1:55:4e:5e:2e:2d:b3:ea:2c:5b:00:69:66:
81:ae:f3:35:b1:ed:f2:ff:2a:78:61:2c:62:f1:7b:33:1c:bb:
f1:aa:0e:36:88:03:88:f5:e3:e8:3c:e8:d3:17:78:8e:ba:49:
8e:ef:65:99:75:04:a5:32:48:9a:3b:c1:a4:bb:73:67:91:30:
13:fd:51:ca:ba:fb:b5:41:9d:f9:d5:78:fc:8e:27:78:dc:59:
1d:f6:e9:17:c8:d5:49:ef:e3:a6:9d:39:99:10:87:c3:52:0c:
70:5a:bb:56:5b:2b:77:61:e6:2d:51:1e:c4:aa:e0:58:54:76:
2f:f4:3a:53:a3:7a:fc:f0:85:ab:ec:e3:7d:29:46:c6:4b:f1:
f9:34:9e:69:d4:56:2f:9c:b5:a7:10:41:b1:80:ff:82:9f:63:
f3:8e:de:b2:ad:fc:3f:b6:d4:80:a3:f7:2d:91:96:fc:c5:f9:
87:fb:e7:19:27:dd:87:2d:3c:56:95:72:e7:3e:65:5e:cf:11:
e2:28:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:02:19 2025 by rpki-client