Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer (raw, json)
Hash identifier: asmGm7B8Iw14EQ0O9/7ISRyHtgyuJHM/pMnIvympzXc=
Subject key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206856276B6F70C411A655CB8188CFC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29152
IP: 2a00:1b10::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:56:27:6b:6f:70:c4:11:a6:55:cb:81:88:cf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58dd42ab3460279709c134b570f76e34e4d95b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:05:ef:03:b6:b3:e8:52:f5:a4:4a:37:f7:
5c:65:8c:ed:2c:2f:46:5a:a3:71:de:f7:52:68:93:
98:95:97:9d:d7:bf:ea:00:e4:65:79:e7:e6:7b:f0:
f0:8d:a6:cd:d3:7f:90:e9:8c:f5:0d:f9:37:b8:8b:
86:95:ad:a8:3e:e1:cd:d3:7d:96:3e:84:bc:e8:18:
3d:3a:32:51:b5:62:fb:57:ee:ae:ca:6d:32:68:c2:
bb:36:3a:7b:e3:f2:28:4d:5f:23:e1:75:be:b9:2f:
19:cb:51:1a:ee:8d:85:e5:6d:50:b6:92:b2:e7:d4:
4f:8a:f1:b7:e7:db:da:8b:11:a5:6a:cb:6e:7f:d6:
7b:2b:9b:6b:07:88:28:22:37:1f:16:16:2a:c3:f6:
89:3c:87:58:da:a4:40:f2:ad:2e:8b:ce:c4:b9:b6:
d3:26:41:07:49:82:0d:de:97:10:05:58:27:c5:d6:
8f:f3:aa:f8:de:a4:39:da:68:e0:46:26:66:22:ce:
ad:81:02:19:94:a6:e2:f2:ac:ff:4e:a3:57:b8:23:
56:92:56:03:0d:10:e5:27:18:ce:50:b2:f3:63:96:
b5:97:12:5e:60:70:e6:6b:c2:4f:d3:e9:3d:49:e3:
82:a0:0c:48:fd:dd:37:27:24:ef:f5:b8:6e:a0:ea:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1b10::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29152
Signature Algorithm: sha256WithRSAEncryption
43:78:95:cf:23:92:1b:ef:15:47:36:0b:0d:11:de:a0:48:fa:
40:b6:92:cf:20:1b:d1:30:9b:d0:78:17:e0:3c:01:1a:6a:fd:
c4:14:36:1b:fe:77:61:2f:b7:70:9e:ba:7f:06:5f:ce:aa:89:
32:20:36:7d:89:81:8e:99:98:14:e0:ba:48:2b:97:58:66:7a:
3c:3a:82:f5:5a:3a:9f:8c:83:d1:53:a4:e4:44:ea:58:18:82:
98:30:c5:a9:fa:97:f7:bd:0f:00:db:5a:1c:6f:c0:67:d4:30:
83:35:2c:0d:78:ea:d0:7f:ff:03:c4:52:2a:a2:e2:95:61:f2:
cd:f9:ae:dd:0a:90:06:8e:2c:d6:be:62:46:68:83:cd:ee:c3:
52:63:bd:00:75:53:f1:11:f2:c1:f2:30:41:27:43:de:d3:dc:
25:2d:4a:e8:85:80:aa:73:6a:e5:af:52:15:27:26:09:f4:91:
49:37:06:4d:95:75:46:9f:67:34:d7:d4:8e:14:98:70:96:17:
42:85:ed:04:91:23:fb:41:52:e3:62:f9:f0:04:81:11:7c:0d:
4e:80:0a:e9:16:ba:77:28:14:53:d8:9c:c3:76:b0:45:e7:9c:
91:90:c8:a9:39:e3:64:fd:5b:2d:af:7e:18:f9:f4:39:36:b4:
2e:50:88:ec
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQgaFYna29wxBGmVcuBiM/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGRkNDJhYjM0NjAyNzk3MDljMTM0YjU3MGY3NmUzNGU0ZDk1YjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGAF7wO2s+hS9aRKN/dcZYztLC9G
WqNx3vdSaJOYlZed17/qAORleefme/DwjabN03+Q6Yz1Dfk3uIuGla2oPuHN032W
PoS86Bg9OjJRtWL7V+6uym0yaMK7Njp74/IoTV8j4XW+uS8Zy1Ea7o2F5W1QtpKy
59RPivG359vaixGlastuf9Z7K5trB4goIjcfFhYqw/aJPIdY2qRA8q0ui87EubbT
JkEHSYIN3pcQBVgnxdaP86r43qQ52mjgRiZmIs6tgQIZlKbi8qz/TqNXuCNWklYD
DRDlJxjOULLzY5a1lxJeYHDma8JP0+k9SeOCoAxI/d03JyTv9bhuoOrTMQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFjdQqs0YCeXCcE0tXD3bjTk2VuRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzQwYjhm
Ni02ODVkLTRlODYtOTdkOC02ZTMxMzQ3ZDA0ZDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNDBiOGY2
LTY4NWQtNGU4Ni05N2Q4LTZlMzEzNDdkMDRkOS8xL1dOMUNxelJnSjVjSndUUzFj
UGR1Tk9UWlc1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgAbEDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJx4DANBgkqhkiG9w0BAQsFAAOCAQEAQ3iVzyOSG+8VRzYLDRHeoEj6QLaSzyAb
0TCb0HgX4DwBGmr9xBQ2G/53YS+3cJ66fwZfzqqJMiA2fYmBjpmYFOC6SCuXWGZ6
PDqC9Vo6n4yD0VOk5ETqWBiCmDDFqfqX970PANtaHG/AZ9QwgzUsDXjq0H//A8RS
KqLilWHyzfmu3QqQBo4s1r5iRmiDze7DUmO9AHVT8RHywfIwQSdD3tPcJS1K6IWA
qnNq5a9SFScmCfSRSTcGTZV1Rp9nNNfUjhSYcJYXQoXtBJEj+0FS42L58ASBEXwN
ToAK6Ra6dygUU9icw3awReeckZDIqTnjZP1bLa9+GPn0OTa0LlCI7A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:46 2025 by rpki-client