Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
File: W8PKDWOo_M3A6SqIprrO_ydecEY.cer (raw, json)
Hash identifier: jv7POiS41w+KkYKv71z2IULe2Za/E20CwSW57XqQ3U4=
Subject key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826DEC1D7F66379EEF570B0F4CA09F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58093
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:de:c1:d7:f6:63:79:ee:f5:70:b0:f4:ca:09:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:70:d7:42:f9:6b:92:87:d2:a6:2e:7d:27:
5b:df:71:83:c7:33:51:82:65:41:28:c0:65:19:ff:
4d:61:0f:c9:9c:ee:85:54:06:76:40:4f:12:26:30:
40:e1:f4:ca:c0:60:ee:a3:16:8f:b9:1a:d7:e1:46:
a4:bf:fc:92:99:81:d8:45:0a:3c:30:72:cb:81:5f:
31:43:d9:9e:40:4f:8a:f1:45:5a:de:98:4d:46:7d:
56:43:a0:0a:a5:6e:28:82:0b:f3:ac:9a:26:31:ff:
a4:07:0c:7f:16:08:e4:61:2c:e9:66:31:bc:e2:ea:
8d:47:57:b8:1e:c1:81:96:25:95:77:7b:62:16:8a:
24:03:85:4e:dd:ad:90:75:22:4a:0e:90:c6:11:6e:
43:fd:b6:34:45:6b:e1:8d:a6:1f:62:07:70:09:9d:
b6:ea:86:8e:0d:aa:15:7f:26:f3:d6:9f:92:7b:78:
b2:4e:c5:7a:74:29:21:3b:f3:12:ec:50:0f:60:80:
f3:3d:f8:9f:bc:b7:d9:96:9a:66:9f:07:61:a6:f8:
2c:93:2e:2e:da:1c:5a:c6:70:7f:a6:f4:e2:95:2e:
80:e2:cc:8b:c1:d4:59:ba:15:f5:33:27:cb:0b:87:
e9:8b:20:28:51:1c:30:6c:55:35:87:71:ed:02:d9:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58093
Signature Algorithm: sha256WithRSAEncryption
25:97:a5:13:35:74:e9:a2:d6:4a:9b:b5:8d:54:40:a8:47:9a:
79:a2:3c:d1:d1:11:03:6c:4f:c0:90:9d:1f:b6:f4:8b:bd:c2:
f2:2b:87:c6:78:0e:c0:a0:48:f3:02:14:b0:4d:46:be:27:6f:
04:29:3e:32:dc:b0:4f:eb:5c:7a:3c:1f:81:df:2c:82:10:0c:
ad:90:ca:70:70:ab:4f:39:ac:96:cd:34:d4:10:71:3c:52:99:
6b:5d:f9:6d:6f:cb:11:4f:0a:67:62:6f:63:96:75:f6:e5:2b:
90:55:f7:42:c2:ab:bd:ab:f7:0a:89:59:0a:ce:bb:82:6a:1b:
40:16:a4:19:8f:83:e5:59:e4:c1:f5:07:41:89:da:60:2c:1e:
3a:83:90:f3:12:4e:59:a5:96:e7:92:d9:a6:14:46:01:7a:3b:
a2:6c:43:4d:c8:d4:2b:b1:3d:e5:78:04:d5:3d:fc:76:c5:4a:
d3:2d:1f:78:2b:22:b1:0e:02:4f:dc:85:e5:99:0f:1d:93:23:
2d:4a:e8:8d:58:1f:66:15:65:eb:42:95:65:49:c5:2c:7c:dd:
d9:f5:94:fb:a1:82:ff:a2:80:d8:ca:c2:9f:d8:8b:17:e6:a1:
26:40:0a:72:30:0b:a6:1b:56:a5:be:d0:c7:3c:20:6e:a4:58:
5a:29:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:43 2025 by rpki-client