Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer (raw, json)
Hash identifier: vmrlYjeoOEbeZu+lHnIGkxmTiQPmmaJlfH6pNZrsy7E=
Subject key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194282569EE442EAF787A7FA3A3F91F1722
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215797
IP: 141.30.0.0/16
IP: 141.76.0.0/16
IP: 2a13:dd80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:69:ee:44:2e:af:78:7a:7f:a3:a3:f9:1f:17:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:ca:20:2e:24:5c:02:e4:0c:e9:b9:a0:72:
aa:d6:52:39:f6:8d:5b:a0:e9:e7:63:ed:04:96:33:
43:a5:81:45:1f:22:ca:68:65:26:be:a0:61:1f:e1:
3b:92:9a:5b:03:9e:6f:71:4c:26:d2:18:94:68:53:
d6:57:f9:06:5b:79:20:ee:f5:f0:e7:51:30:17:58:
67:b6:db:83:8f:ed:b1:72:31:79:2d:50:06:91:7c:
94:10:c4:36:93:6a:3b:80:04:cd:69:af:30:1e:f6:
21:90:d7:0d:79:15:24:24:33:15:22:4a:a4:57:e3:
c7:1e:6a:9d:f1:0b:97:8a:73:a0:90:34:d4:56:69:
e3:5d:ea:ef:d9:a4:f6:74:4e:c5:db:0d:2d:0d:5e:
82:50:25:58:77:d9:f1:77:01:9e:a4:e1:05:73:33:
7a:74:1c:6e:ca:be:55:1a:9e:c1:47:f6:c5:e7:cd:
9c:0f:19:1a:36:ed:0a:a9:9e:d3:82:ce:aa:9b:82:
d6:d4:b4:86:e1:2e:0e:f1:bc:f7:83:e0:9a:41:7e:
ee:8b:6f:c5:aa:37:a7:53:8f:a9:d7:85:37:1f:79:
72:d1:d0:31:40:6d:b8:40:f2:06:9c:47:09:60:47:
c9:21:c3:7c:0d:a6:55:5b:93:5a:9a:f6:64:c8:57:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.30.0.0/16
141.76.0.0/16
IPv6:
2a13:dd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215797
Signature Algorithm: sha256WithRSAEncryption
9e:9c:a6:ce:c2:aa:9d:19:7a:4a:56:66:d4:2b:34:1f:91:6e:
6d:a3:fe:a6:15:52:9a:32:32:db:70:8d:17:49:e5:2d:97:89:
c0:8e:89:46:6d:09:79:ce:22:02:7c:30:ec:9f:45:22:c8:9b:
20:ac:7a:47:40:e5:72:6c:89:eb:99:c2:43:5d:1b:91:30:ae:
40:92:d3:3d:84:0d:e4:22:03:86:46:92:2d:90:84:2e:60:9d:
e5:d3:17:43:b2:12:80:8b:78:5a:2f:aa:4f:fe:0c:66:00:bb:
d3:d1:24:70:38:7f:8c:2d:7e:1e:5f:6d:89:4d:1d:29:55:46:
b7:b9:d2:b9:52:44:f9:fb:41:6a:c6:15:bc:a4:f7:4f:b3:05:
e7:ca:23:61:b0:96:b8:a6:90:c5:80:11:a3:52:33:a4:81:94:
4c:17:05:98:66:f1:fe:54:79:01:b5:08:b8:78:17:d6:ea:af:
cd:df:6d:82:5f:54:3f:b8:6e:17:59:c3:fe:74:bd:bc:b9:6b:
38:fc:f6:b9:78:27:5e:29:ff:e3:04:7f:de:35:07:75:73:3a:
95:bd:17:b6:25:9b:aa:de:29:a0:1d:90:b9:c0:27:e2:ff:f6:
e1:20:49:30:35:01:32:2f:0c:dd:4c:cf:b0:fc:96:5c:14:a1:
16:da:aa:8f
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZQoJWnuRC6veHp/o6P5HxciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTAyY2E4MWI5ZjBhOTcxM2IwOTk2ODdkYzgxNTUxYzQ1ZTNmOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0svKIC4kXALkDOm5oHKq1lI59o1b
oOnnY+0EljNDpYFFHyLKaGUmvqBhH+E7kppbA55vcUwm0hiUaFPWV/kGW3kg7vXw
51EwF1hnttuDj+2xcjF5LVAGkXyUEMQ2k2o7gATNaa8wHvYhkNcNeRUkJDMVIkqk
V+PHHmqd8QuXinOgkDTUVmnjXerv2aT2dE7F2w0tDV6CUCVYd9nxdwGepOEFczN6
dBxuyr5VGp7BR/bF582cDxkaNu0KqZ7Tgs6qm4LW1LSG4S4O8bz3g+CaQX7ui2/F
qjenU4+p14U3H3ly0dAxQG24QPIGnEcJYEfJIcN8DaZVW5NamvZkyFfeCQIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFFoCyoG58KlxOwmWh9yBVRxF4/j8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzJlZWQy
NC0wZGZmLTQ0MDAtYTU3Yy00NTlkZGM2MzFiY2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvMmVlZDI0
LTBkZmYtNDQwMC1hNTdjLTQ1OWRkYzYzMWJjYy8xL1dnTEtnYm53cVhFN0NaYUgz
SUZWSEVYai1Qdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUF
BwEHAQH/BCMwITAQBAIAATAKAwMAjR4DAwCNTDANBAIAAjAHAwUDKhPdgDAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMDSvUwDQYJKoZIhvcNAQELBQADggEBAJ6cps7C
qp0ZekpWZtQrNB+Rbm2j/qYVUpoyMttwjRdJ5S2XicCOiUZtCXnOIgJ8MOyfRSLI
myCsekdA5XJsieuZwkNdG5EwrkCS0z2EDeQiA4ZGki2QhC5gneXTF0OyEoCLeFov
qk/+DGYAu9PRJHA4f4wtfh5fbYlNHSlVRre50rlSRPn7QWrGFbyk90+zBefKI2Gw
lrimkMWAEaNSM6SBlEwXBZhm8f5UeQG1CLh4F9bqr83fbYJfVD+4bhdZw/50vby5
azj89rl4J14p/+MEf941B3VzOpW9F7Ylm6reKaAdkLnAJ+L/9uEgSTA1ATIvDN1M
z7D8llwUoRbaqo8=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:04 2025 by rpki-client