Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
File: wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer (raw, json)
Hash identifier: BLd7W6CybOgAQL0Wffp7FEm0nOysv+IviSC52UNVCd8=
Subject key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422201EE7AF06A3B7C532B3886994447F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.235.172.0/22
IP: 2a0d:6d00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1e:e7:af:06:a3:b7:c5:32:b3:88:69:94:44:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:36:5d:4e:14:ab:f3:63:f1:a0:9c:56:01:
4d:59:10:13:df:73:8d:16:3a:b3:e9:2a:03:ce:28:
1a:fe:11:25:41:45:cc:1a:63:25:28:e4:fe:84:0a:
42:d1:41:74:3a:ce:9b:b9:06:dc:2b:27:ea:04:51:
86:8e:a3:72:6e:a7:0f:82:4a:d1:12:17:cc:92:bb:
d4:d0:f7:2b:8c:89:f1:43:16:1e:d5:e5:77:69:84:
36:e4:c2:f3:a8:e7:a9:8b:ea:88:37:7b:83:4f:94:
2c:44:b7:a5:7c:b8:11:d7:17:ed:3b:65:09:8a:6b:
1a:8c:d2:b2:cf:0d:38:a7:44:cc:02:c6:b7:49:d3:
9c:87:0b:5e:d5:98:1c:53:ae:26:59:ce:62:21:a9:
3b:c6:f1:2b:5a:0a:79:3a:c9:db:50:64:69:68:b8:
ee:8d:41:18:e8:3a:21:10:cc:79:3e:04:48:e4:c8:
28:ad:90:a8:45:b7:a4:a0:09:b6:d5:45:93:de:86:
0d:eb:a3:e6:eb:0f:ed:a5:a2:86:9c:80:f2:25:0e:
67:e9:76:d3:24:3a:a8:0a:43:0a:04:97:1e:38:53:
fd:e8:06:32:79:db:2f:0b:89:ca:9f:4a:37:d7:b2:
cc:e4:f9:56:26:5b:c7:2d:81:65:c0:9a:05:d7:7c:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.172.0/22
IPv6:
2a0d:6d00::/29
Signature Algorithm: sha256WithRSAEncryption
4b:3d:dc:a7:00:fb:d4:37:14:8e:a8:de:a4:fa:db:36:c5:1e:
9d:38:e0:5d:ff:aa:a4:bc:37:7b:8a:bf:3e:cb:f3:93:ad:8c:
71:b5:64:e4:8f:97:f7:e2:f5:aa:08:e9:9e:ff:80:54:6e:e1:
21:08:83:18:45:e9:cc:72:f2:85:d8:7d:35:66:7a:c0:95:d4:
c0:bc:a3:f6:8d:c2:50:52:c3:e6:eb:49:7f:13:64:a2:f3:c4:
7f:aa:08:a5:1f:a1:5e:16:48:ff:0b:0a:00:36:f9:12:66:55:
69:72:33:10:1f:32:07:78:ac:df:9f:6e:f4:71:12:2d:9f:e5:
68:a0:d6:e1:60:02:25:8d:b5:5e:2a:e5:06:f7:bf:c6:b0:95:
26:c0:8f:0b:50:45:8f:b9:3e:02:94:1d:f4:33:c2:ab:44:1c:
24:bd:3c:3f:f4:99:b7:ad:09:f6:79:4c:3d:1b:dc:77:65:82:
fb:3c:07:54:dc:e0:11:a4:47:83:32:e9:7f:8f:e5:63:8f:ea:
b1:b1:0f:1c:74:24:01:53:06:d4:2a:85:6a:a3:b8:85:2b:46:
d1:a0:01:50:ea:55:a1:2b:50:a0:32:87:77:1b:7f:ab:f2:4d:
f0:4f:f6:9e:47:be:6e:5c:38:3c:e6:fa:8a:e4:dc:18:a9:7d:
5f:29:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:57 2025 by rpki-client