Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer (raw, json)
Hash identifier: If9i+kQnjE1bAnGL4Jkw/W79OSfgGNfS2ZBbtcHKlJ8=
Subject key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206845E406CCDC850A2EAD9F83D5815E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.208.40.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:45:e4:06:cc:dc:85:0a:2e:ad:9f:83:d5:81:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:a7:ca:49:da:f1:41:bb:7b:b1:e4:23:49:
c2:9c:aa:b6:8c:6b:80:fc:c5:65:35:e3:41:c6:e8:
ed:a0:64:f3:07:7c:ee:66:12:d7:1c:d4:58:4c:0b:
d1:de:25:e4:89:ba:02:83:d3:9a:89:02:cf:6c:f6:
48:ea:ec:fb:ff:9d:8d:87:6d:41:af:b1:1b:03:4a:
1e:44:3f:45:bc:19:5e:03:e5:02:b3:dc:ca:67:61:
96:a5:3a:25:d6:b2:3b:0b:02:67:59:fb:57:1b:7f:
28:9d:11:1b:0c:a6:d7:8f:45:85:b2:f8:4c:34:99:
c6:a1:2d:09:84:8c:4f:c1:bf:e9:b1:82:5d:fb:0b:
07:78:90:78:19:c0:00:35:0c:40:50:25:54:bb:4d:
3e:a8:5c:14:2a:2c:ef:1d:98:db:fc:f6:4c:fc:d7:
91:d4:6e:e4:d1:cc:a5:7e:23:d6:2d:94:08:04:65:
e3:b1:8f:29:8b:7b:c0:49:7f:74:7c:de:3a:bf:29:
d4:f3:b6:53:f8:12:3d:2b:bc:59:90:d6:1e:a6:ea:
46:81:9d:9c:e1:21:e7:bf:e6:64:81:76:58:8e:19:
02:2a:64:36:e9:3a:89:2d:94:a0:53:a6:a1:10:c9:
2c:b6:38:03:8c:0f:ea:cb:5d:b0:ca:ac:73:4f:06:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.40.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b3:1b:1d:9d:68:0a:f9:d3:53:84:e5:5a:1a:85:fc:4f:2d:
98:a9:9e:d5:2a:f0:f8:2c:2c:51:c7:7b:58:67:7e:25:07:39:
96:30:49:ea:88:d2:43:f3:ba:22:bf:71:15:1f:5f:74:9e:71:
66:e4:ee:d3:49:07:16:15:2f:6b:eb:58:52:6d:20:b3:f2:ad:
50:f0:5f:07:d2:9d:4f:6f:58:37:01:00:06:c2:17:e9:1e:80:
e2:9f:77:3c:50:fb:c7:7f:c0:c2:67:69:01:43:c1:53:65:62:
12:61:11:3d:4e:6d:9a:66:79:9b:c5:b3:be:ae:a4:fa:08:2e:
9a:1e:65:c1:b1:f5:8c:82:0e:7b:af:de:42:2a:88:6a:14:cf:
c3:9d:37:9c:86:44:11:55:68:8d:8f:f6:68:e2:1f:b2:c4:30:
00:76:54:38:5f:71:11:9b:17:b0:50:f6:37:0c:f8:22:c1:f0:
e7:9f:0d:c4:d1:94:81:c4:4a:06:e1:22:ce:04:a9:0e:50:21:
fa:20:b1:28:ec:dd:d3:5e:64:64:ce:a3:c0:de:c7:8d:41:c6:
cc:30:0d:41:a4:2a:ee:4b:ea:f0:33:a1:03:8a:e5:6e:ae:e8:
e2:67:ad:87:8c:2c:1e:1a:36:18:ae:76:5b:80:ee:16:cb:be:
5c:c2:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:51 2025 by rpki-client