Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
File: w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer (raw, json)
Hash identifier: mbDpcFMujLBTtuJXfZdhUyOdyFN9diAxywF/f+WvT5I=
Subject key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA87056E90539D3E3EE7AB4A0745F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.46.100.0/22
IP: 193.187.247.0/24
IP: 193.187.252.0 -- 193.187.254.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:87:05:6e:90:53:9d:3e:3e:e7:ab:4a:07:45:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c34bdff88e8e8989871e13408111ad1433b30c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:bf:be:12:52:1c:58:50:cd:a4:f5:10:4a:
71:49:3b:78:99:88:4e:42:b7:89:9c:cf:ff:1c:cc:
e4:15:52:6f:97:ef:3b:3a:7b:73:41:68:45:3a:81:
5a:1c:5c:81:bb:0c:9e:32:ba:0f:b6:70:4d:1d:b3:
a8:58:4f:1e:d9:1c:ce:80:63:97:02:e2:ee:d4:8a:
9e:d8:a6:25:b8:cb:8c:19:2d:d4:4b:b7:c9:70:89:
3b:a0:d6:4e:c4:33:14:fb:a6:05:50:08:e9:8d:20:
d5:cf:18:0d:ea:e5:fa:d9:78:57:57:59:a7:d7:9d:
c4:79:48:6e:15:ea:66:3e:50:34:6b:a8:af:a8:b5:
3d:77:9f:9a:66:4b:de:c7:d9:97:83:17:0a:0c:87:
60:8d:93:aa:e6:d5:2c:4b:11:24:3e:87:74:ee:ab:
71:4d:fd:fd:83:8a:d6:cc:0b:b4:90:7f:6e:15:25:
b6:87:ee:d4:b9:a5:f2:22:a4:23:02:e9:e2:aa:ba:
bf:21:71:ef:ea:84:2a:88:11:76:04:ac:52:a8:13:
91:52:63:fa:2a:a5:8a:27:e2:cb:75:fc:b3:03:81:
a8:04:2f:24:2e:92:eb:c0:5b:8b:50:2b:bc:ce:f5:
2a:b7:0e:6e:c5:89:17:58:5d:90:6a:b7:08:bc:06:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.100.0/22
193.187.247.0/24
193.187.252.0-193.187.254.255
Signature Algorithm: sha256WithRSAEncryption
3e:2d:17:13:e1:94:d0:3e:55:2a:7a:e6:1e:6c:ae:d1:8f:73:
9e:c3:1a:71:61:0a:c1:35:17:34:48:db:a5:df:40:12:8c:ee:
58:0f:d3:5e:43:7b:2f:b0:eb:8a:51:fa:b3:0b:6b:7e:c4:73:
cc:56:9f:80:69:b1:67:52:2d:89:66:20:47:62:5e:7a:91:5a:
a0:bf:a0:24:00:ac:dc:24:7d:2e:d9:57:7e:48:7a:ea:c9:1f:
0f:cd:f2:a0:54:ad:0a:c0:2d:71:6d:0e:a7:eb:32:11:c4:62:
75:62:e1:73:54:85:de:07:96:84:60:39:39:01:86:13:d2:81:
06:70:ca:5b:48:7a:a9:e4:2c:13:5e:2a:f4:5f:83:41:8a:62:
6f:9e:2c:f0:59:cb:c8:26:69:8e:c0:3f:48:8a:22:5b:fd:d5:
92:e6:3f:9a:6a:66:f2:d9:5a:77:aa:ba:35:d5:1f:db:a5:12:
a5:51:72:60:54:6e:af:e5:37:0e:e4:df:1f:e0:85:2e:cc:d6:
69:74:85:16:26:bf:8f:7f:8a:b6:24:72:84:ff:0b:91:a9:fb:
6b:a8:81:c1:75:2f:03:5b:8c:20:75:8a:15:d6:35:2c:10:83:
c2:29:46:35:c0:6e:77:9e:a9:39:2c:d5:53:f7:d0:00:4a:39:
83:eb:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:37 2025 by rpki-client