Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
File: WxweBiQDm9HxqUbLUTyTOG-raxk.cer (raw, json)
Hash identifier: GseuqJWwjFHCWpVP4SRG5RhFMiMGYOSIDPvRQeUoMDk=
Subject key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB35BD69001A04E722A049CE7B3A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29374
AS: 31545
IP: 193.16.109.0/24
IP: 195.149.94.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:5b:d6:90:01:a0:4e:72:2a:04:9c:e7:b3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:0d:22:9f:1d:c1:8c:f1:ce:a4:c8:fa:8d:
7b:97:2a:1a:27:c0:95:0c:5a:0e:61:89:7a:b1:33:
7a:54:a0:da:43:68:17:27:fb:63:c1:93:09:80:52:
a9:1d:fe:c8:12:d9:8d:d3:2a:b7:22:5e:63:ed:d4:
0b:ec:4d:44:d3:a5:e6:cf:d8:cf:0d:6f:d5:01:21:
06:f3:38:2e:9d:78:1b:4c:88:df:aa:20:25:e4:54:
f7:31:c2:94:c6:5d:01:e9:33:2d:9f:66:4c:b0:57:
5b:23:e2:5c:03:1a:a6:ac:c8:c1:c9:7b:96:66:e4:
d8:a4:20:c7:e0:79:c3:df:f1:58:4e:73:72:92:a7:
02:97:16:d3:f1:65:61:38:4e:e8:8a:2c:79:f5:07:
de:63:ed:f4:97:6c:5b:47:4b:37:e9:3e:88:26:07:
57:18:7d:9c:a3:51:ff:b4:54:73:2d:d2:bc:34:b8:
b8:bb:30:96:7e:5e:ba:0d:e7:e1:dc:d4:32:3f:32:
08:3a:42:e1:df:4d:be:78:43:89:33:ec:6b:68:c7:
af:1e:a9:b1:a3:07:38:ba:70:35:e5:2e:6a:88:f8:
ad:07:e0:bc:e3:60:02:2f:d4:37:92:18:8e:1e:be:
e2:42:29:bc:bc:94:e8:ea:ea:ce:69:e1:87:f5:12:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.109.0/24
195.149.94.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29374
31545
Signature Algorithm: sha256WithRSAEncryption
31:e1:d4:e7:b3:70:8c:cb:17:b9:d3:5f:46:8a:7b:7c:ea:dc:
1b:ab:bb:24:73:38:a9:16:9a:fa:8b:12:e0:71:ba:ca:e2:96:
5c:ac:83:47:4b:88:af:e1:57:ff:28:87:bd:df:69:41:ae:65:
62:52:ef:ea:9c:50:d8:7e:dd:63:2c:85:f0:cb:f4:36:c4:7c:
6c:5e:27:06:ec:dd:02:0b:af:7e:57:c7:13:7c:fd:17:ea:04:
24:35:cc:99:cb:63:01:e6:92:f4:68:ef:05:2a:75:c0:10:f4:
37:3e:17:58:ea:12:36:06:e4:60:41:23:ff:02:ee:71:72:db:
3f:3e:8b:6e:c5:10:92:32:10:c6:84:e3:fc:b7:61:cf:9a:95:
4a:64:a3:42:1a:29:49:1c:c8:94:3d:d7:61:8a:68:b9:b3:e3:
52:1a:11:53:da:05:ba:68:6e:09:78:58:2b:8a:b1:8d:cb:9c:
00:52:65:26:e1:23:ea:7e:bb:5a:c3:28:c9:58:7e:81:66:07:
7f:9b:97:c1:12:59:c7:8d:d6:3b:5a:a0:9a:7d:e8:fe:28:3d:
4a:f6:2f:49:34:32:d3:75:40:bf:d0:13:f0:21:40:6f:0f:c5:
d6:77:d8:ff:69:11:79:84:7b:11:1e:4f:08:4b:d6:53:30:04:
f4:69:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:37 2025 by rpki-client