Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
File: WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer (raw, json)
Hash identifier: 5LoRcMkQ2kz2Z3LF42dnPBraTX4JLHzQxh1m5oCDuaY=
Subject key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9C4293205BFC96A463A1A16914361
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 87.236.33.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c4:29:32:05:bf:c9:6a:46:3a:1a:16:91:43:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:1e:5e:51:a8:d1:5b:17:33:c7:fb:aa:8f:
be:fe:f2:19:2a:71:bf:ed:b2:4f:34:5b:3a:88:4e:
a5:69:c5:97:aa:fa:b2:fa:b4:d1:87:28:36:3e:56:
a5:99:0e:fd:00:4a:5b:7a:d3:8b:9f:7e:a8:52:b0:
28:6f:8a:4a:04:76:88:52:0e:7d:73:6d:61:af:85:
19:0f:1a:c5:e2:74:cc:a8:f6:e1:7c:ed:15:b7:ed:
d4:cd:9e:d7:a6:ca:6a:72:ec:68:f4:ff:fd:53:7e:
70:57:2e:3b:f6:93:af:24:27:78:5e:94:b3:00:f6:
24:c4:17:7d:43:d0:ef:8c:52:26:58:0a:66:a5:76:
a4:6b:00:68:33:b6:9a:e6:bb:67:75:51:76:b5:1a:
9b:09:b2:db:a1:9d:09:52:8c:37:10:71:42:2e:43:
dd:6a:43:9d:d4:d2:93:78:d4:68:fa:7f:90:86:2e:
8f:64:90:94:d0:30:a2:e9:5d:d2:e4:b6:b0:b6:7b:
69:91:78:3b:a3:f8:dd:9a:d5:27:98:01:84:be:d9:
cb:db:cd:d0:86:54:05:fe:a2:f1:66:4e:83:1d:42:
1a:72:c5:aa:4d:3f:9d:cc:50:17:87:1e:ba:f1:f2:
d5:fe:69:1e:97:5d:63:53:7c:40:49:56:d3:b3:f9:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.33.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d3:4d:58:a7:f5:df:f1:6f:10:7c:a3:10:bf:e7:bf:17:e3:
7b:b9:6e:1a:c7:75:5d:c1:d0:c9:71:9d:1f:09:75:ca:3a:a6:
c8:65:35:7c:f7:c1:d3:e0:b5:48:51:3b:77:8a:7f:b1:7a:c8:
e1:e5:23:d3:97:7d:65:41:d2:d1:1e:65:36:f1:a5:23:74:4b:
2d:a8:82:99:ff:5a:0a:47:59:47:df:c1:62:91:67:99:65:93:
93:d3:32:93:d2:d6:f1:64:6f:fa:ba:5c:19:c5:8e:3f:fe:54:
cd:ff:9b:2e:a6:ad:62:5f:26:86:88:e2:4f:2d:c0:36:36:75:
03:94:63:30:51:de:2b:c2:6f:0b:d1:f2:af:b1:12:a2:c1:eb:
8e:4b:ce:ea:ef:df:ea:02:49:3b:0c:c8:7c:4c:f4:e8:1b:71:
e8:3b:4c:f1:3b:dd:18:51:0a:32:e9:66:e7:e1:a5:29:cf:ce:
b1:86:35:ec:f0:96:ef:aa:a9:12:cf:2c:32:74:81:40:53:1d:
ac:e4:22:0f:d1:b4:da:13:d8:5d:1c:1a:33:3e:62:e6:26:6c:
82:31:75:46:87:f1:df:b1:18:1a:d2:f8:26:62:ab:c5:d2:92:
01:b8:4f:25:82:9c:4f:7c:8e:ec:c1:4e:f7:85:15:c5:d4:ac:
1b:55:69:f1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2cQpMgW/yWpGOhoWkUNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk1ZDJlMzQ1YTFmNGRhYTRlZGZlN2MwNWNlNWRmNzZiNTlhY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx10eXlGo0VsXM8f7qo++/vIZKnG/
7bJPNFs6iE6lacWXqvqy+rTRhyg2PlalmQ79AEpbetOLn36oUrAob4pKBHaIUg59
c21hr4UZDxrF4nTMqPbhfO0Vt+3UzZ7Xpspqcuxo9P/9U35wVy479pOvJCd4XpSz
APYkxBd9Q9DvjFImWApmpXakawBoM7aa5rtndVF2tRqbCbLboZ0JUow3EHFCLkPd
akOd1NKTeNRo+n+Qhi6PZJCU0DCi6V3S5LawtntpkXg7o/jdmtUnmAGEvtnL283Q
hlQF/qLxZk6DHUIacsWqTT+dzFAXhx668fLV/mkel11jU3xASVbTs/mfEwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFqV0uNFofTapO3+fAXOXfdrWazwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzFhZGYz
Yy1iYTMzLTQzNWItYTZkNS05NTdhYWJiYzg0ODMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMWFkZjNj
LWJhMzMtNDM1Yi1hNmQ1LTk1N2FhYmJjODQ4My8xL1dwWFM0MFdoOU5xazdmNThC
YzVkOTJ0WnJQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAV+whMA0GCSqGSIb3DQEBCwUAA4IBAQBC001Y
p/Xf8W8QfKMQv+e/F+N7uW4ax3VdwdDJcZ0fCXXKOqbIZTV898HT4LVIUTt3in+x
esjh5SPTl31lQdLRHmU28aUjdEstqIKZ/1oKR1lH38FikWeZZZOT0zKT0tbxZG/6
ulwZxY4//lTN/5supq1iXyaGiOJPLcA2NnUDlGMwUd4rwm8L0fKvsRKiweuOS87q
79/qAkk7DMh8TPToG3HoO0zxO90YUQoy6Wbn4aUpz86xhjXs8JbvqqkSzywydIFA
Ux2s5CIP0bTaE9hdHBozPmLmJmyCMXVGh/HfsRga0vgmYqvF0pIBuE8lgpxPfI7s
wU73hRXF1KwbVWnx
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:43 2025 by rpki-client