Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.cer (raw, json)
Hash identifier: eCFKzAMW2Vzm2HoT59Pt81+9JIon5ugPA235GmqgQMU=
Subject key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBADC5D138216032CACBEC41AEF29B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.161.16.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ad:c5:d1:38:21:60:32:ca:cb:ec:41:ae:f2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:47:50:3e:97:c7:99:23:08:2d:06:cf:83:
61:0e:0c:88:d7:77:92:37:72:3c:29:91:28:d5:40:
8e:de:19:46:05:fe:97:7e:6c:4d:ee:82:2a:ce:22:
90:62:6b:a1:d5:48:22:b3:04:69:ac:27:37:c0:5a:
20:e1:a8:cb:58:7f:4c:48:28:78:29:b6:97:59:18:
f6:2c:a9:9b:83:f5:da:ac:37:8a:60:08:a1:fe:47:
dd:10:45:cb:d1:9d:d6:46:6e:cb:bc:b0:7e:f7:97:
ca:b7:4c:0b:b6:0f:67:72:e6:6a:d7:5d:45:c7:04:
90:0b:4e:14:d3:03:d6:01:34:3f:31:3d:6f:a3:7f:
9d:46:ee:0a:f7:27:59:5c:6b:f0:44:62:d3:bc:3e:
67:5b:b7:97:be:da:b5:aa:41:5f:9a:7b:96:d0:9f:
90:20:2c:1f:92:1e:e8:82:e4:82:26:55:82:d8:9d:
a2:65:5b:ca:dc:0a:8f:6b:ed:a9:43:44:15:31:30:
7b:39:f5:84:b1:12:24:90:ef:bb:c7:62:43:8d:6e:
e1:99:8c:22:ad:97:8c:12:e8:ca:e7:b2:4d:23:e9:
cf:ae:6d:3f:68:26:ff:c6:0d:81:81:8c:95:4e:b1:
29:56:70:3f:7b:64:35:d7:01:fe:32:ad:05:7f:76:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.16.0/21
Signature Algorithm: sha256WithRSAEncryption
43:4e:ca:1e:b3:2f:e7:e0:3a:e4:4a:b7:58:be:01:dd:5e:1e:
b6:f6:73:82:fc:09:85:31:8f:de:e1:d0:22:0d:f3:ee:08:d7:
09:26:3a:99:05:20:76:c2:66:52:49:4f:5e:8c:cf:49:92:23:
75:7b:9b:1a:6c:b6:d3:b8:ee:bc:29:3b:a7:f1:e3:e7:45:c9:
ea:66:3e:30:6a:32:81:fb:7b:15:c4:e9:79:c4:be:e4:dd:bb:
98:e4:a6:1e:66:73:95:24:0d:b3:3f:3a:68:27:e5:15:47:0d:
88:5c:67:ec:7c:69:42:cf:9a:d1:54:04:4e:48:a2:cb:97:50:
de:54:00:40:da:56:b0:bb:e2:09:3c:b4:dc:ec:bc:60:64:f0:
ca:a0:08:c7:6d:b4:17:b6:02:b1:60:7d:62:c2:ff:d0:1c:95:
5f:a0:6b:10:05:92:41:0a:f3:d3:bb:46:97:cf:21:e3:70:fe:
95:dd:b4:4c:9f:8e:66:1d:4b:ee:cf:3a:b1:4f:bd:5b:1e:e0:
b4:72:77:0a:60:68:42:22:12:a6:1a:51:7e:b9:3a:34:5d:08:
1a:bb:ac:bf:54:84:00:9c:b0:1c:84:6e:19:38:1a:54:05:67:
3a:a1:4b:9a:83:55:d5:64:d9:84:02:e6:ac:67:23:8f:00:e0:
a9:23:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:11 2025 by rpki-client