Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer (raw, json)
Hash identifier: rOyyBj80M7YZjvpc5qLTNSRmKPeQKU3jXoGkqGIoNgM=
Subject key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D97E95D94D1E2A848DDC78467DFF5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28979
IP: 185.204.240.0/22
IP: 194.127.215.0 -- 194.127.223.255
IP: 2001:67c:18ec::/48
IP: 2a04:b640::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7e:95:d9:4d:1e:2a:84:8d:dc:78:46:7d:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3358110dadf224e719914161731df5e56c4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:49:82:c9:a1:e9:6c:4e:71:03:b8:77:d5:
71:52:67:dd:fa:c2:29:8b:42:a1:2f:30:86:dd:5b:
c2:2d:cb:f1:a6:9d:0e:d7:56:ce:f2:98:0d:67:2e:
f6:69:10:09:ee:71:84:ca:79:78:67:ca:f1:ca:83:
fd:26:49:e1:8a:52:79:31:53:1c:81:7a:e8:bf:01:
45:37:37:ec:f2:8f:14:d7:b7:7b:6f:ac:73:2d:ac:
f2:3f:22:5e:24:db:ea:d8:c1:bb:5c:cd:3d:84:ea:
38:b3:f1:ac:98:67:48:11:f5:6b:b0:fa:ed:df:3f:
59:22:52:35:ad:d3:d4:bb:96:32:bd:59:51:f0:db:
a7:f8:c9:3a:f9:02:82:99:9e:cc:00:61:a8:89:45:
da:21:c1:3d:ed:25:0b:8d:cf:5f:01:32:0b:5f:50:
67:4d:b9:11:7e:dc:22:e5:e6:90:bf:50:34:37:cd:
a2:af:90:72:79:a1:e1:d1:03:69:90:ec:f3:43:4d:
68:63:bd:16:20:06:2e:74:53:ed:dd:b6:f7:0d:f2:
31:d8:51:94:ff:ff:23:b7:fa:9b:da:d9:71:2e:65:
bf:88:86:09:d3:82:ee:d5:28:5a:8d:15:3c:32:e4:
1b:40:51:9c:16:b3:36:f9:93:d4:a1:a0:6d:4f:75:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.240.0/22
194.127.215.0-194.127.223.255
IPv6:
2001:67c:18ec::/48
2a04:b640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28979
Signature Algorithm: sha256WithRSAEncryption
86:75:21:4c:2e:33:98:97:10:d6:94:73:db:a6:88:35:bc:4c:
56:e2:3f:60:ad:00:1f:57:5f:19:a2:1f:8d:e8:3f:20:2d:3a:
86:de:17:46:84:7f:3f:94:c5:50:9e:fa:42:4b:ce:e3:dd:6a:
c4:d8:af:f0:3f:0c:66:bc:7a:af:9b:7e:83:6c:6a:ae:75:62:
45:57:15:a1:f1:f2:12:ee:b1:34:c0:af:51:44:81:a0:05:99:
9a:8a:f4:21:1d:a0:87:df:a5:b0:ca:fd:13:9c:3c:4b:e8:f6:
4a:76:15:ca:bf:e2:c5:31:c9:01:f6:c6:8b:5d:e7:d1:97:e2:
09:f2:50:a5:41:2e:0f:6c:4d:48:94:d3:ab:56:5e:37:54:0c:
7b:cb:cb:94:c9:ec:0c:67:96:e6:5a:15:4f:38:ad:c9:a7:76:
e0:01:24:f5:e5:2e:a5:b3:44:a2:04:e8:12:99:14:73:00:c5:
a5:f6:76:25:99:3c:d5:90:dc:9a:a1:d4:37:2a:b9:0c:0a:15:
c4:9c:1d:8c:33:d8:37:d5:42:78:bb:29:61:fd:54:ca:29:9c:
f9:c8:e7:b2:e2:b4:93:c3:f3:48:ab:3c:c5:a1:1e:f3:e8:ed:
fb:e2:a2:b6:c9:d6:bd:d9:c1:ac:c2:3b:30:88:75:aa:52:92:
12:3a:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:34 2025 by rpki-client