Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.cer (raw, json)
Hash identifier: mgi33r+Ba6NICW1QAzt/CWsgjYtIe2XCEW/18yRdwms=
Subject key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC28697355942019349E536247A7A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43229
AS: 51682
IP: 46.16.248.0/21
IP: 185.213.12.0/22
IP: 2a0a:a180::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:28:69:73:55:94:20:19:34:9e:53:62:47:a7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:d6:eb:c0:2b:5b:e1:ec:fa:5c:6c:b5:35:
43:11:b0:e8:37:51:09:8f:f6:86:15:46:70:53:8b:
ce:c3:d9:1a:5b:69:ad:ec:46:ff:a7:37:dd:4a:71:
c0:4f:85:a7:2b:c6:10:d3:08:5f:48:39:cd:50:73:
0c:42:cc:40:44:e6:52:7c:52:99:f3:d3:c5:fa:13:
60:17:0d:30:da:d1:f9:66:9f:07:5a:16:4c:09:07:
63:f3:18:c8:ec:61:86:6d:b8:71:67:3e:08:69:04:
ba:33:8f:5d:f3:7b:22:68:95:c2:e9:87:07:73:38:
1e:b8:ae:3b:cf:67:96:ba:07:28:97:0e:ab:af:5e:
33:a9:53:26:10:39:4c:af:79:c1:18:e9:28:29:04:
dc:39:b6:b1:50:4e:7c:79:31:7e:03:0e:8d:e6:17:
6b:89:ef:45:72:0f:53:90:cb:34:99:4e:5f:9b:77:
1f:df:17:91:a9:79:9b:d8:d1:41:6c:b6:f8:0a:ba:
32:2a:07:59:b7:aa:9a:53:4f:e2:96:62:bd:4d:9f:
0d:67:5f:26:7b:92:73:66:d4:bd:fd:c9:9f:eb:4b:
11:45:98:97:3d:aa:fb:07:e9:52:9c:32:b2:a3:90:
5a:bc:52:a7:d8:c9:e3:21:24:97:9c:2f:17:3d:61:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.248.0/21
185.213.12.0/22
IPv6:
2a0a:a180::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43229
51682
Signature Algorithm: sha256WithRSAEncryption
60:0a:30:cb:b7:f3:ac:01:fb:41:eb:fa:68:f9:1d:30:30:81:
f3:50:1b:cb:81:28:36:ec:f2:b1:f5:2d:f9:19:9d:dc:72:a2:
bd:ac:37:64:e7:48:5f:ca:86:9c:22:a6:03:bb:fa:0d:df:43:
81:31:99:b7:84:9a:e8:c4:ca:59:96:a7:3b:27:bf:ad:da:3a:
a3:18:6c:d6:63:b1:6b:55:c9:f2:bd:56:b2:be:a9:32:a1:cf:
03:af:69:d9:9e:77:2a:1f:0f:e7:90:98:d0:1f:d2:1b:54:6f:
c6:5f:fd:63:48:6c:0d:e0:04:ff:be:ee:36:e7:b9:69:3b:a2:
b7:fb:89:af:32:de:36:45:02:dc:60:80:80:bf:25:2f:59:f2:
a1:14:79:f3:d0:de:3d:f6:a1:03:a2:33:d7:d8:33:58:f9:37:
9d:9b:2c:fa:9d:50:1f:62:7e:2d:49:d6:74:60:63:20:91:2b:
fe:89:5f:b4:6c:19:83:1b:c5:0f:5a:86:da:ae:e4:11:c7:f1:
2c:b3:04:84:c3:f6:69:6e:ea:ee:a6:0b:db:65:c6:39:56:b8:
7f:57:02:4f:d2:9a:9d:44:5b:fd:c8:0b:a6:09:89:b8:13:8d:
d1:e6:e9:77:40:5e:cf:5b:d4:1f:7a:6e:2a:f1:59:b8:2f:ed:
af:79:3f:fd
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQi/Chpc1WUIBk0nlNiR6eiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTY2YWRkZjljYTBkZTQ5YTZlZWY0OTg1ODM4NGY1NGY0N2E1NmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4rW68ArW+Hs+lxstTVDEbDoN1EJ
j/aGFUZwU4vOw9kaW2mt7Eb/pzfdSnHAT4WnK8YQ0whfSDnNUHMMQsxAROZSfFKZ
89PF+hNgFw0w2tH5Zp8HWhZMCQdj8xjI7GGGbbhxZz4IaQS6M49d83siaJXC6YcH
czgeuK47z2eWugcolw6rr14zqVMmEDlMr3nBGOkoKQTcObaxUE58eTF+Aw6N5hdr
ie9Fcg9TkMs0mU5fm3cf3xeRqXmb2NFBbLb4CroyKgdZt6qaU0/ilmK9TZ8NZ18m
e5JzZtS9/cmf60sRRZiXPar7B+lSnDKyo5BavFKn2MnjISSXnC8XPWGExwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFGVmrd+coN5Jpu70mFg4T1T0elbwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2JkNTZk
Ny0zODk5LTQwZTUtOTYxMi0zZjI4YjZhZGJkYTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYmQ1NmQ3
LTM4OTktNDBlNS05NjEyLTNmMjhiNmFkYmRhOS8xL1pXYXQzNXlnM2ttbTd2U1lX
RGhQVlBSNlZ2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDLhD4AwQCudUMMA0EAgACMAcDBQAqCqGAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCo3QIDAMniMA0GCSqGSIb3DQEBCwUAA4IB
AQBgCjDLt/OsAftB6/po+R0wMIHzUBvLgSg27PKx9S35GZ3ccqK9rDdk50hfyoac
IqYDu/oN30OBMZm3hJroxMpZlqc7J7+t2jqjGGzWY7FrVcnyvVayvqkyoc8Dr2nZ
nncqHw/nkJjQH9IbVG/GX/1jSGwN4AT/vu4257lpO6K3+4mvMt42RQLcYICAvyUv
WfKhFHnz0N499qEDojPX2DNY+Tedmyz6nVAfYn4tSdZ0YGMgkSv+iV+0bBmDG8UP
WobaruQRx/EsswSEw/ZpburupgvbZcY5Vrh/VwJP0pqdRFv9yAumCYm4E43R5ul3
QF7PW9Qfem4q8Vm4L+2veT/9
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:44 2025 by rpki-client