Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
File: WMTqejhe-jZyQZa0NDlguqR8vrc.cer (raw, json)
Hash identifier: OFrJ2zoV4POqMRNcE9HqFj+hCe83y3v1WyktOACbkhw=
Subject key identifier: 58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA214258831159C1B60490380C99D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.30.173.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:21:42:58:83:11:59:c1:b6:04:90:38:0c:99:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:96:8f:c2:bc:f2:27:00:3a:96:a0:d4:e2:
8f:d7:cb:f0:94:0b:dc:c0:f6:91:8d:08:e8:74:f1:
e9:cd:bb:3f:71:25:6e:b7:8b:17:c3:06:9e:f4:3f:
45:96:ac:a2:c2:2e:05:63:22:3d:80:4b:7e:69:4f:
fc:6d:74:e2:d3:62:f5:4f:14:46:22:0b:79:29:3a:
b9:f3:dd:c5:80:29:d9:87:7f:91:63:e4:22:ab:c9:
e5:56:62:9b:06:58:4e:df:30:d0:c5:98:cd:1b:d6:
eb:a0:15:c1:f7:a0:0c:eb:97:b0:59:55:84:48:27:
3b:b8:07:fc:1e:80:00:83:f6:87:ea:83:6d:01:83:
ba:cd:40:a7:ac:7c:b0:09:e9:1d:9e:24:a9:6a:27:
7d:bf:42:68:32:1a:ed:43:26:0b:de:85:f8:75:10:
65:6a:2e:7a:9f:32:38:1f:80:66:c0:ff:9f:8f:0b:
70:37:a6:ec:da:4d:f3:27:07:1d:8f:76:c8:b4:46:
f5:c0:78:ed:e1:2d:80:88:ec:ac:b0:e5:87:5e:e2:
1b:d7:fe:1b:27:9a:60:48:52:bd:44:79:2e:46:aa:
6a:2c:c6:8e:98:21:98:aa:95:41:a1:21:b4:13:73:
26:ba:19:6d:90:39:7b:75:d9:1a:0f:5f:de:b7:6c:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.173.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a9:74:96:9f:9b:7b:00:de:be:05:ce:74:28:46:48:d0:57:
69:ea:78:ec:53:17:d9:0f:a9:f9:c4:04:49:9b:8f:4a:f8:98:
e4:0f:72:fd:02:d2:be:e0:fd:1d:55:f7:f4:9c:dd:3a:39:3e:
02:68:53:b7:51:06:9d:b5:12:17:ee:ea:bc:d7:9d:5b:ea:dc:
11:04:95:81:91:3f:bd:2e:88:80:9c:88:2b:fe:f2:6e:52:38:
9e:19:98:a8:fd:13:da:20:56:0b:3b:26:94:ba:68:40:1b:a6:
da:fd:64:f8:cb:78:a1:1b:2e:8d:8f:d1:1c:b6:c8:2f:3e:48:
43:62:41:ac:2a:b3:8b:91:dd:62:84:50:29:42:5a:9b:03:c2:
04:15:67:bb:0e:7e:46:34:ca:8a:92:1d:19:ca:23:38:98:25:
f2:2c:d7:2f:d2:e6:98:8d:33:33:22:c4:7b:26:fd:b9:8d:9a:
23:17:1d:35:ba:ac:db:fd:26:65:05:0d:2e:64:f1:a5:84:75:
bf:92:67:fa:58:76:db:cf:5a:e4:47:b0:fc:e3:34:39:6a:e7:
3c:0e:ad:4b:51:b7:56:67:09:37:80:94:29:9c:44:97:18:b8:
be:1b:21:cb:24:c2:c9:91:60:d5:7c:db:35:cc:7d:79:80:f8:
1a:46:39:33
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQf+iFCWIMRWcG2BJA4DJnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGM0ZWE3YTM4NWVmYTM2NzI0MTk2YjQzNDM5NjBiYWE0N2NiZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GmWj8K88icAOpag1OKP18vwlAvc
wPaRjQjodPHpzbs/cSVut4sXwwae9D9Flqyiwi4FYyI9gEt+aU/8bXTi02L1TxRG
Igt5KTq5893FgCnZh3+RY+Qiq8nlVmKbBlhO3zDQxZjNG9broBXB96AM65ewWVWE
SCc7uAf8HoAAg/aH6oNtAYO6zUCnrHywCekdniSpaid9v0JoMhrtQyYL3oX4dRBl
ai56nzI4H4BmwP+fjwtwN6bs2k3zJwcdj3bItEb1wHjt4S2AiOyssOWHXuIb1/4b
J5pgSFK9RHkuRqpqLMaOmCGYqpVBoSG0E3MmuhltkDl7ddkaD1/et2zB5QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFjE6no4Xvo2ckGWtDQ5YLqkfL63MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2JmYTAw
Ny0yOWU5LTRmYzctOTU2ZC1iMGU4YzMzMDQwZmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYmZhMDA3
LTI5ZTktNGZjNy05NTZkLWIwZThjMzMwNDBmYS8xL1dNVHFlamhlLWpaeVFaYTBO
RGxndXFSOHZyYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwh6tMA0GCSqGSIb3DQEBCwUAA4IBAQBRqXSW
n5t7AN6+Bc50KEZI0Fdp6njsUxfZD6n5xARJm49K+JjkD3L9AtK+4P0dVff0nN06
OT4CaFO3UQadtRIX7uq8151b6twRBJWBkT+9LoiAnIgr/vJuUjieGZio/RPaIFYL
OyaUumhAG6ba/WT4y3ihGy6Nj9EctsgvPkhDYkGsKrOLkd1ihFApQlqbA8IEFWe7
Dn5GNMqKkh0ZyiM4mCXyLNcv0uaYjTMzIsR7Jv25jZojFx01uqzb/SZlBQ0uZPGl
hHW/kmf6WHbbz1rkR7D84zQ5auc8Dq1LUbdWZwk3gJQpnESXGLi+GyHLJMLJkWDV
fNs1zH15gPgaRjkz
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:29 2025 by rpki-client