Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.cer (raw, json)
Hash identifier: 3TffIgsepETmEbm6/jlJOYP+a2hobR81aCwnF1tfcuY=
Subject key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B494BE361010614AF9E21AA3CE3874
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57295
IP: 2001:67c:2ba8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:94:be:36:10:10:61:4a:f9:e2:1a:a3:ce:38:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:88:57:d7:2d:51:19:42:78:d0:ff:4c:68:
76:84:85:b4:58:b0:d4:4b:95:9b:88:f3:1c:cb:ca:
aa:8e:c5:fd:b8:67:5f:a6:03:e6:60:26:fa:72:e8:
b1:28:70:4d:c4:81:c5:79:1a:d1:0e:1b:55:ba:47:
a6:13:c7:ce:a9:df:d8:85:b0:c0:68:7c:68:52:69:
55:be:87:09:d0:e3:57:1d:ad:12:a8:10:17:b1:be:
42:0f:8a:24:ff:bc:6d:b1:43:e6:2a:c2:4a:43:0e:
97:5d:9c:68:cc:8c:e0:3b:ba:11:21:2f:6f:73:e8:
76:54:cc:9e:8f:0b:a8:48:db:b4:d2:81:71:25:41:
e9:14:73:19:1e:ae:61:a6:c6:b6:aa:10:80:69:79:
c7:8e:23:0e:90:19:e8:0e:14:8d:a4:42:cd:86:f4:
27:57:39:01:64:a3:b9:b9:20:59:c6:6a:0a:a9:b7:
5c:01:f7:96:45:2f:be:b3:d1:02:df:d4:e0:09:1f:
7d:47:b0:80:62:0f:59:5a:72:8a:f0:40:b8:f2:bf:
82:9b:63:61:18:81:f6:59:81:10:de:38:e2:9b:ae:
d0:e0:a2:3a:72:74:d5:d9:c9:b4:b8:30:b7:66:2c:
ae:62:c6:a8:28:66:a0:70:27:f1:7c:35:f0:3e:cb:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ba8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57295
Signature Algorithm: sha256WithRSAEncryption
4d:52:99:24:cb:b4:2f:e0:05:09:b5:81:66:ab:30:8e:91:90:
37:f3:0e:c2:9e:45:c4:df:f0:5b:4d:45:fb:32:c0:aa:80:36:
42:b0:c8:fe:55:b9:ea:c0:4e:80:b7:67:b3:4b:de:40:5b:a2:
71:57:69:ae:83:56:0c:33:47:c6:cb:31:f9:07:86:23:a4:67:
c0:e8:9b:52:7a:d5:e7:22:25:92:de:12:97:83:f3:fd:f0:a5:
f6:44:90:60:e1:70:44:7e:d8:d0:17:ff:ba:d6:66:a7:a2:16:
1d:77:14:f4:53:b9:6a:9b:6b:0b:8c:69:c5:77:4d:d2:f9:57:
d0:12:4d:be:8c:c1:41:60:af:83:47:b6:e5:cc:99:01:a3:76:
c4:62:62:fc:95:23:ab:d4:b5:3e:8c:6f:8f:fe:e0:f6:95:16:
64:5a:c4:0a:2f:eb:1f:ac:7f:0b:09:12:75:62:de:7f:26:9b:
48:5f:01:ea:67:29:a2:63:16:e9:e9:4f:6f:0b:46:cc:91:29:
d4:d3:90:51:f8:b0:ac:e0:cd:99:cb:12:ac:b8:4f:39:e9:3d:
82:f5:02:9f:9a:13:c9:2f:73:29:8e:3e:5d:f6:19:0a:d4:80:
0f:bc:b7:de:16:76:2f:2d:47:40:74:df:8a:33:de:4e:28:f0:
7a:09:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:10 2025 by rpki-client