Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
File: WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer (raw, json)
Hash identifier: rZwIBGseXIxhQV25NAadVu/W1UNXdv2g+EEX8r18NrM=
Subject key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274851AA31785F0B56DC8FD639D34C23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6736
AS: 34837
AS: 35285
AS: 39200
IP: 94.184.0.0/16
IP: 185.62.232.0/22
IP: 193.104.212.0/24
IP: 193.189.122.0/23
IP: 194.225.0.0/16
IP: 2001:678:b0::/46
IP: 2001:14e8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:51:aa:31:78:5f:0b:56:dc:8f:d6:39:d3:4c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:21:08:fc:bc:82:dc:58:01:bd:28:2e:68:
37:1c:bc:0d:dd:55:87:f7:26:09:31:32:a8:96:3e:
16:dc:ca:32:2f:1f:2b:f0:c0:5e:40:30:91:56:10:
a6:64:bf:82:b3:52:05:5d:bb:34:c7:80:ab:b9:4d:
21:0c:59:1b:87:26:2e:36:bc:d6:48:9f:72:d7:16:
b9:94:32:1f:d9:ba:2f:2e:3e:93:42:cb:95:7e:7b:
cf:94:9e:2b:0e:79:04:38:1e:c8:c4:da:44:96:c7:
ff:f6:a1:f6:ea:58:f5:03:4c:87:17:31:34:4d:8c:
d5:9c:a9:ff:88:bb:db:63:1d:2a:80:06:3f:cb:0c:
99:7d:6f:d1:a2:c9:6a:1d:5f:69:45:5d:02:41:b2:
0f:36:d2:1a:07:60:37:e5:30:85:91:7c:91:3e:68:
03:c5:e8:68:46:9c:c6:a7:a9:6a:43:73:7a:44:1a:
fd:ae:8a:07:44:d2:34:a5:03:5f:47:33:0d:29:60:
66:5b:1c:8f:6d:04:df:4e:9a:74:a3:64:87:47:9b:
6b:b5:de:8a:de:bc:38:73:44:c4:19:94:dd:c4:2e:
72:ba:d7:13:9c:96:1d:f2:8c:4c:09:72:9e:c9:12:
74:da:52:d4:0e:f6:5f:7f:74:c6:66:8a:3f:77:ef:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/16
185.62.232.0/22
193.104.212.0/24
193.189.122.0/23
194.225.0.0/16
IPv6:
2001:678:b0::/46
2001:14e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6736
34837
35285
39200
Signature Algorithm: sha256WithRSAEncryption
04:a8:04:82:17:1c:91:a0:7f:d5:ed:16:ac:ef:41:38:d3:9a:
33:15:bd:9a:47:c8:ff:e6:81:26:df:40:71:0e:ff:72:50:7b:
e5:47:cd:3d:0e:d1:69:fc:7c:e3:17:94:9c:67:a7:da:77:0c:
ef:a1:35:96:ec:eb:88:88:6a:f6:10:e7:62:48:db:a3:29:9e:
0f:7c:c4:9b:2c:d0:af:b7:0f:b5:1b:2a:27:4e:84:c6:2c:f7:
02:7d:43:30:6a:92:e3:5c:ed:ab:7a:73:bd:37:11:b2:68:f6:
55:c2:7d:20:a6:b3:f0:06:8e:7b:27:0e:9e:ae:71:40:95:37:
31:be:65:8c:4c:6f:17:63:bb:b9:a5:04:d2:e1:55:90:20:fe:
92:aa:e6:61:12:dd:de:2c:a7:04:13:da:bc:5b:b9:2d:10:bb:
5a:c1:62:15:0b:94:72:5b:bb:03:bd:dd:a2:ed:65:64:b7:28:
b8:2a:e9:cc:c3:87:76:67:10:23:14:05:99:05:1e:93:9c:bd:
10:ad:26:35:65:f4:fd:cb:d9:5c:a9:2f:60:42:b3:6d:40:01:
70:c3:62:d7:5f:b5:3b:85:e4:14:6b:9e:6d:21:8c:3a:77:01:
c6:62:ac:b2:03:d1:d3:b3:b3:cb:03:d5:a2:f8:42:df:2d:e8:
e4:63:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:17 2025 by rpki-client