Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
File: woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer (raw, json)
Hash identifier: kO8up61qAOKXF5Pb5OSnUs0quL7kV+fzTTpuRZOA0O0=
Subject key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6FCEFEF6EBAA2EAC2FAFF4AF9F44D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.59.10.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fc:ef:ef:6e:ba:a2:ea:c2:fa:ff:4a:f9:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:0b:3c:99:b7:6f:fe:48:58:44:e6:c8:9f:
6d:b1:4a:d9:3d:71:66:69:1c:01:8b:54:1c:ba:70:
ae:dd:25:9e:d7:c1:53:3f:50:16:31:af:45:cd:c5:
56:1f:59:ed:3a:bc:a0:28:ac:5d:f4:74:a9:d0:85:
08:f4:23:67:16:84:27:75:43:7f:20:3d:cb:ea:95:
33:d4:8c:c0:fc:af:3f:e0:83:0f:50:21:12:69:4c:
88:4c:b4:ff:2d:62:0e:55:d1:a7:99:f9:2d:ed:1b:
99:0f:df:2c:da:c6:44:e2:10:52:b4:82:f7:a6:b1:
9b:c2:92:ba:80:6a:ec:62:23:b1:c4:0f:65:9f:12:
7c:bd:6c:f4:ec:66:8e:6d:9b:c6:e3:cc:f0:49:c6:
fd:b8:f5:79:44:17:04:52:ba:64:58:6a:8b:b7:86:
2d:7a:49:6d:47:83:c9:f9:ad:1a:65:48:bf:d7:95:
29:f8:2e:7a:ac:46:d0:32:55:32:41:ed:e1:ec:92:
0c:1c:52:5d:c1:e7:b2:54:fe:83:38:df:cd:4d:70:
d9:58:da:52:ab:9b:d8:2e:9e:27:9d:cf:14:96:42:
c4:a9:b7:12:03:85:af:0b:78:df:b7:0c:87:ef:12:
61:f5:e1:17:da:4c:62:f7:6c:3a:3d:a5:c0:2a:95:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.10.0/23
Signature Algorithm: sha256WithRSAEncryption
85:28:a4:3f:b0:3a:cd:8e:c7:31:d2:ca:23:b5:f1:cd:a8:1f:
ab:c2:54:20:32:82:73:6a:61:d5:e9:58:73:5f:f2:d5:0b:b9:
3e:ae:9d:51:15:aa:13:2e:95:0e:fa:ec:d9:da:53:37:bd:be:
62:8e:7d:1b:cf:70:36:ab:27:cd:fd:21:f4:1c:f9:44:a6:09:
64:2c:35:a2:58:f2:7c:e7:c3:c3:d8:37:39:b7:29:d2:a0:54:
00:ec:00:78:8b:99:85:45:d7:d4:3e:bc:0d:01:0f:43:87:cc:
d3:da:c3:aa:7d:a8:73:d7:97:f2:9e:41:f9:1f:5f:0c:db:b6:
6b:27:36:bb:f1:9a:eb:93:9f:2a:4c:03:88:5e:40:a0:57:80:
3b:0b:58:89:24:e4:f1:01:84:b2:46:ab:8e:c1:45:6b:bc:69:
68:6e:a2:4f:6c:68:1c:46:12:68:6b:8b:56:e3:62:0e:e3:88:
8b:6a:b4:a5:01:c5:89:c5:d2:30:e9:78:61:77:e6:fb:1c:69:
83:37:a4:bc:7d:a0:23:7b:a4:46:b5:6b:f7:ae:80:f1:6a:61:
82:7d:fb:30:17:97:d5:0c:21:f7:6c:cd:a5:d9:21:aa:a9:dc:
b3:ea:b1:08:59:e9:08:67:e3:56:3d:4a:2b:f1:e9:b1:e5:98:
b8:51:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:39:59 2025 by rpki-client