Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
File: WtikTa0xXyHqmS_G4QSCxB7N_PU.cer (raw, json)
Hash identifier: xzwYr0jCzTWOfMHWEvGQjIluGM7tG+l4b7Ikt3i3khw=
Subject key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747F7C209A7658F857D4B8B493DCDD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.233.35.0/24
IP: 2001:67c:2688::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f7:c2:09:a7:65:8f:85:7d:4b:8b:49:3d:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:30:ef:46:db:5d:26:bb:b6:b4:5d:a2:db:
31:3e:de:73:21:c7:a1:1c:da:e8:9f:1a:e8:11:1f:
f9:25:2a:21:f9:44:cb:e6:5e:db:d9:9a:d3:3c:08:
24:f0:51:97:df:5b:09:4b:e5:ea:24:6b:7d:40:a2:
b2:07:4f:2d:98:18:28:59:06:78:5e:81:64:30:5e:
42:d1:af:cf:54:58:91:34:b3:36:c3:b9:f4:a4:d8:
f5:e9:44:fc:4d:8a:ab:9f:55:00:de:b0:4c:50:ff:
e4:2b:32:a2:28:01:33:bc:45:f2:00:ca:86:5c:96:
bd:3e:0f:8e:60:f9:33:ad:f8:6f:2d:48:ea:1f:df:
3f:bf:b8:f6:9f:63:55:7d:8d:b4:fc:80:a8:67:89:
04:b8:a7:0a:7d:f0:72:af:78:53:d9:83:fc:57:2c:
a5:f0:ce:e8:bd:73:89:68:e0:7c:9e:31:4e:f9:07:
97:af:c0:a7:50:fd:e4:83:43:db:43:16:4f:41:3e:
fd:d3:19:f9:05:63:0e:33:19:bb:c3:3b:be:d5:ab:
3c:78:a5:cb:68:0a:f4:61:57:f1:d2:1c:1f:4d:64:
29:ae:6e:51:8e:52:51:4c:2e:6a:05:2c:40:ee:2e:
4b:ce:39:a9:ac:cb:d2:63:b9:ad:54:c1:6d:86:da:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.35.0/24
IPv6:
2001:67c:2688::/48
Signature Algorithm: sha256WithRSAEncryption
81:5d:f9:df:c6:42:60:4b:5c:16:cd:1a:02:a0:c2:ab:4c:52:
78:a5:ff:de:69:78:a1:a8:09:0e:c1:80:8e:bd:11:88:a8:83:
bb:c1:d6:59:ab:98:86:2e:af:c7:20:56:64:68:d5:96:2b:27:
4c:b4:93:c3:d5:5c:78:f9:66:3f:31:39:02:68:9a:18:32:6c:
14:b3:0a:65:50:f9:0c:59:cf:50:f1:52:9d:96:13:eb:87:8f:
a2:72:eb:78:ae:27:7a:c4:80:3e:03:b7:54:d8:1a:ad:0e:fd:
e2:b7:19:f8:ef:25:a6:ed:e7:fa:32:47:fa:10:61:6a:4c:5b:
36:88:d6:de:73:bd:cf:4c:11:74:c3:00:b6:5d:3b:7e:37:74:
fe:70:5c:2e:55:7b:7f:5d:86:1e:37:d9:61:4c:f2:c7:a7:09:
b5:7c:3d:96:b2:57:ba:1e:68:05:39:d9:e6:dd:fb:f5:27:15:
90:fe:94:c9:74:1a:b8:58:aa:b1:26:dc:70:de:f3:5e:98:3b:
6d:9a:35:b8:77:c6:d4:5c:dd:42:c2:6e:65:4b:d9:c8:9a:58:
90:9b:3e:21:7a:3a:1b:8f:8c:ce:49:1a:52:05:c9:a1:32:b0:
c5:68:3c:95:5f:75:cb:69:36:f9:ec:a2:be:b5:37:c6:ce:03:
66:2c:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:29 2025 by rpki-client