Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer (raw, json)
Hash identifier: FnXmF8XCjcjixOWhpM2iTl3MfP0nR6REsuMbvcHl2/A=
Subject key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427488EB537DBCE0C924A9A491ADDF641
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.131.208.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8e:b5:37:db:ce:0c:92:4a:9a:49:1a:dd:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:20:b0:75:ad:74:c0:64:44:c7:bf:4d:c4:
6e:0d:10:68:98:43:73:8d:ac:68:ff:8c:6c:6c:43:
a9:8f:72:22:34:9f:e7:a0:a5:b6:e4:73:5d:5b:34:
4b:70:43:b5:72:b4:01:92:af:a1:34:0d:a3:67:c0:
0a:2b:49:ac:2c:28:8e:de:24:0f:8b:90:9c:b1:ed:
65:63:ab:f5:13:bc:de:5a:3c:15:2b:0a:6c:2f:87:
9c:02:6f:ea:d1:45:f5:4e:ed:de:ac:26:8e:a9:5a:
13:43:0f:f7:34:14:34:41:26:57:95:90:a5:98:c2:
00:2c:06:6c:71:5d:fb:8e:65:66:f8:63:c3:53:96:
00:f6:af:a8:9b:0b:86:b4:3d:c5:9e:ea:f6:a2:38:
62:3b:45:b0:73:0b:22:d7:4d:c5:1d:b3:8b:e9:15:
cc:5e:84:46:fa:99:09:f6:ed:ff:66:6d:80:09:01:
99:c6:0e:9b:fc:bb:b0:4c:29:2c:c3:3d:3c:bf:1d:
64:fc:ee:81:e9:6a:68:f0:04:56:a3:e3:88:f3:01:
f8:8b:41:04:ff:a9:65:ff:8c:28:b6:81:cd:26:bf:
d4:9f:06:d1:f7:f7:f2:2b:96:a5:02:29:47:43:6c:
e8:5d:c2:25:52:8f:d8:f9:d3:52:17:6c:50:f3:c9:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:a7:24:c9:d5:63:b4:f0:1d:34:e1:3e:9e:01:bf:3d:69:55:
ba:10:10:aa:32:34:ec:db:b0:06:2f:39:f1:e0:94:84:18:1c:
3b:ae:59:d6:68:d5:3f:50:cb:07:3d:79:22:c9:c2:9d:09:ae:
29:16:74:4c:8a:21:89:66:c8:e6:cf:5b:e9:c8:2a:21:57:f5:
f8:fe:4b:c2:f7:27:32:a8:f2:be:30:79:3b:32:5f:fd:fc:39:
7c:9e:7c:f7:8a:2a:ec:b3:c7:56:94:b1:99:75:57:5b:0f:67:
f0:a6:70:a0:43:7b:b7:c8:33:7d:fc:5b:38:bb:06:c0:13:58:
0f:8f:58:7e:ae:cd:b1:36:8d:35:5f:c6:90:3f:43:14:9e:31:
3d:7d:0e:33:61:25:f2:3a:8d:0e:bc:7c:f9:56:fa:ed:43:eb:
8c:d3:f4:94:ae:b5:e9:e4:c2:fd:24:05:f0:a9:c4:fc:15:cf:
e0:ed:45:9a:f2:11:2d:1a:32:29:d7:6f:de:b2:ac:a4:a4:39:
3a:c1:1b:fb:73:54:1f:68:90:dc:e1:98:b9:b5:1d:07:dd:95:
a9:54:ca:f9:ea:3b:2c:d9:b1:90:4b:ec:a7:32:e8:28:fa:95:
a7:b7:08:c4:42:e9:e0:32:55:36:bf:5d:6a:23:e7:6c:48:fa:
70:bb:70:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:32:05 2025 by rpki-client