Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
File: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer (raw, json)
Hash identifier: gzZ859uJWy0cy87Ekc+L/r7gSngrx6m0ac9ytsW5pbc=
Subject key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3455B1EC537194AABB477D3660E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200475
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:34:55:b1:ec:53:71:94:aa:bb:47:7d:36:60:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:c2:19:13:81:e3:67:4b:ae:de:53:57:0b:
9c:e0:49:1b:a5:3b:30:9b:fc:59:7f:63:c2:90:d2:
a1:d4:7e:94:f3:d4:9e:73:96:60:40:ba:4f:65:cf:
22:4d:42:66:48:97:1d:a9:ec:d0:28:37:44:2e:04:
37:c7:d8:2e:ab:54:67:88:cd:cb:fc:d5:c6:7c:94:
68:3d:5b:95:51:1e:a0:62:34:b3:43:42:1d:49:2a:
0f:e2:bb:5b:a2:30:b5:ec:db:0f:36:c8:d3:72:d6:
bb:68:60:d2:87:34:7d:37:f4:90:6a:0e:94:1d:0d:
0b:63:52:99:a6:41:9e:25:58:55:e8:66:ec:c8:ff:
42:51:fd:1c:a2:05:d9:76:a7:b6:b6:df:3f:d9:74:
d1:39:4f:23:d4:c6:eb:34:15:08:09:ed:b3:93:47:
01:1e:65:b6:8b:7f:4e:d9:fd:01:88:a5:db:1a:79:
92:6d:6f:35:6c:20:a9:24:b9:db:d1:4c:1f:ad:0a:
88:2b:de:e0:bc:8a:18:53:62:f5:3c:bf:5b:26:66:
ee:f4:ce:ff:3a:cb:23:0d:29:25:2d:6a:2a:1e:49:
8f:cb:cd:77:44:f0:cc:0f:ec:c0:94:69:7e:c2:95:
69:01:a4:be:66:4b:68:fb:85:95:8e:20:bf:75:46:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200475
Signature Algorithm: sha256WithRSAEncryption
3c:95:e2:75:9c:97:e5:44:b3:ad:4e:82:d9:15:0c:d1:70:b2:
7f:8c:14:eb:51:b9:fd:d2:1f:8b:6e:45:24:2f:fa:eb:bc:95:
5a:46:6f:44:55:a7:7a:e4:e1:54:56:49:0b:1b:fd:04:25:03:
bf:63:b9:02:1a:1d:b7:42:38:cb:71:a4:8e:a0:a3:61:c3:18:
4f:3c:85:0b:91:09:e6:ca:94:26:30:38:9d:06:06:d9:18:6c:
ee:4a:1d:bf:e1:a8:6d:f6:e2:02:b5:cd:42:d2:e2:7a:f6:0a:
f3:b7:a4:4c:26:c1:89:f2:51:ca:23:b2:45:bd:5d:33:69:df:
91:5e:f7:4c:d7:7d:fa:3e:7b:55:31:a0:4c:a7:49:ed:4a:d0:
69:f3:4b:6f:50:80:52:02:b4:7b:b8:92:8f:98:4b:43:26:54:
c2:b3:38:bf:6b:96:c4:ef:d2:57:91:a5:36:6d:d6:2c:4d:bd:
fa:0a:c3:a2:a5:a9:be:3f:de:23:0c:2b:13:bc:af:a5:5c:93:
da:ce:72:80:c4:d7:29:e5:50:31:79:8e:e8:4f:7d:e5:ce:a1:
5e:c6:62:c8:05:95:bb:89:1a:55:f3:ea:07:1b:fc:95:9b:70:
4f:f5:47:e4:b4:d5:e4:65:c6:79:7a:92:bc:86:e7:04:96:5b:
77:ec:59:e0
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQfjDRVsexTcZSqu0d9NmDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTAzN2E5ZmU1NjI1ZWRhMDEwODFlYjJlOTA3Y2ZkOWI1YTVkYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya/CGROB42dLrt5TVwuc4EkbpTsw
m/xZf2PCkNKh1H6U89Sec5ZgQLpPZc8iTUJmSJcdqezQKDdELgQ3x9guq1RniM3L
/NXGfJRoPVuVUR6gYjSzQ0IdSSoP4rtbojC17NsPNsjTcta7aGDShzR9N/SQag6U
HQ0LY1KZpkGeJVhV6GbsyP9CUf0cogXZdqe2tt8/2XTROU8j1MbrNBUICe2zk0cB
HmW2i39O2f0BiKXbGnmSbW81bCCpJLnb0UwfrQqIK97gvIoYU2L1PL9bJmbu9M7/
OssjDSklLWoqHkmPy813RPDMD+zAlGl+wpVpAaS+Zkto+4WVjiC/dUbl4wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFkDep/lYl7aAQgesukHz9m1pdyaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2VhYTdl
Mi04YWYwLTRkZTEtODI0MS1hNTVmZmFlMmViZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvZWFhN2Uy
LThhZjAtNGRlMS04MjQxLWE1NWZmYWUyZWJkMC8xL1dRTjZuLVZpWHRvQkNCNnk2
UWZQMmJXbDNKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMPGzANBgkqhkiG9w0BAQsFAAOCAQEAPJXidZyX5USz
rU6C2RUM0XCyf4wU61G5/dIfi25FJC/667yVWkZvRFWneuThVFZJCxv9BCUDv2O5
Ahodt0I4y3GkjqCjYcMYTzyFC5EJ5sqUJjA4nQYG2Rhs7kodv+GobfbiArXNQtLi
evYK87ekTCbBifJRyiOyRb1dM2nfkV73TNd9+j57VTGgTKdJ7UrQafNLb1CAUgK0
e7iSj5hLQyZUwrM4v2uWxO/SV5GlNm3WLE29+grDoqWpvj/eIwwrE7yvpVyT2s5y
gMTXKeVQMXmO6E995c6hXsZiyAWVu4kaVfPqBxv8lZtwT/VH5LTV5GXGeXqSvIbn
BJZbd+xZ4A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:58 2025 by rpki-client