Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer (raw, json)
Hash identifier: lXJYOc0cs48GpeFBiiEp1FC6YHpbxwFM1WueeqpGD30=
Subject key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C195B1145E0A43192BC659A2A8AF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21392
AS: 25542
IP: 62.148.160.0/19
IP: 80.247.160.0/20
IP: 81.26.208.0/20
IP: 81.93.48.0/20
IP: 85.255.208.0/20
IP: 87.237.96.0/21
IP: 94.126.64.0/21
IP: 185.2.24.0/22
IP: 185.111.120.0/22
IP: 185.139.148.0/22
IP: 193.239.88.0/22
IP: 2001:16e8::/32
IP: 2a00:f80::/32
IP: 2a02:728::/32
IP: 2a02:4640::/32
IP: 2a06:5dc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:19:5b:11:45:e0:a4:31:92:bc:65:9a:2a:8a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:34:a1:3a:76:0a:84:16:c3:c9:04:c8:41:
0b:0f:d8:b4:b6:9a:cf:eb:75:83:0f:c8:ad:b5:d9:
68:76:c3:62:ac:d5:b8:47:44:71:b1:88:57:b2:5e:
b8:65:ce:17:da:93:30:b3:4d:59:73:b5:6e:55:81:
fb:44:d7:bd:96:94:b9:f5:ef:4c:18:01:02:b0:8d:
9c:06:5f:2e:7e:5f:a6:1a:37:25:e0:15:56:f7:e9:
3d:51:94:02:34:d9:32:54:a8:aa:59:f1:89:7d:b4:
94:db:8c:36:a4:e8:cd:f8:52:16:98:e0:10:d8:66:
a5:21:43:49:2e:b1:a5:06:2e:42:53:1a:d8:13:a7:
53:97:c4:55:0d:da:2f:8a:47:86:f8:52:36:03:38:
4d:52:cf:34:8e:e7:1d:51:fa:23:de:d5:2b:7e:04:
af:3f:50:78:53:11:58:35:06:65:c2:a4:53:9e:ce:
ec:27:79:fc:b4:2d:5f:c4:6b:a6:53:e2:90:9c:97:
fe:69:4b:a8:72:9a:8f:67:9e:9f:c9:5e:f1:09:46:
cf:41:dc:a6:31:c0:dd:00:b2:06:44:a9:33:f4:f4:
28:a3:59:14:cb:6f:49:fd:e9:07:c0:94:fd:3a:4e:
08:f0:38:68:a7:10:a4:89:92:fc:00:1d:01:c0:18:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.148.160.0/19
80.247.160.0/20
81.26.208.0/20
81.93.48.0/20
85.255.208.0/20
87.237.96.0/21
94.126.64.0/21
185.2.24.0/22
185.111.120.0/22
185.139.148.0/22
193.239.88.0/22
IPv6:
2001:16e8::/32
2a00:f80::/32
2a02:728::/32
2a02:4640::/32
2a06:5dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21392
25542
Signature Algorithm: sha256WithRSAEncryption
8c:a6:d1:c2:b5:d1:4f:ad:97:64:e4:c7:21:db:67:2a:a9:7e:
c1:cf:50:22:15:43:ba:0c:2b:de:06:50:d4:b2:3e:2b:c2:79:
cd:8b:89:66:19:e8:c2:ad:ea:fb:82:88:85:aa:d6:8b:c6:f6:
d0:09:22:7a:29:73:d9:0d:39:23:d1:9b:f8:59:44:a1:d7:52:
05:4a:52:2a:25:3d:72:d2:c7:1b:84:1b:ac:80:47:cc:c8:66:
8a:bd:fb:87:3c:b8:01:ac:44:02:f4:cc:ce:48:9c:a9:e3:00:
04:12:f0:ec:fe:c1:29:a8:97:96:e5:23:26:c1:e1:58:f6:b8:
ab:5f:35:f7:3d:35:92:3f:1a:c5:5c:87:be:57:54:5f:11:1d:
2c:42:58:c8:cd:c8:34:02:30:17:e2:cd:b1:ec:fc:ba:1e:d0:
64:60:38:5c:55:33:98:24:6d:1a:78:52:0e:e3:c5:f2:52:11:
cc:a2:1a:20:ce:7e:58:14:7e:6d:cd:63:94:5b:6d:4a:fa:ad:
a0:22:3d:0e:02:6e:8d:aa:8c:41:a6:88:f6:be:20:6c:63:6d:
a3:21:62:dc:59:74:43:56:6a:48:b3:96:9a:0b:63:87:d8:bc:
72:b3:01:1a:05:19:c1:70:60:1e:59:8d:cf:86:fb:e2:c3:c5:
88:d9:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:43 2025 by rpki-client