Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
File: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer (raw, json)
Hash identifier: Ghh8cn46gsboC+bKIKDA9daPu6fv8hqIyoCcYaZWLuw=
Subject key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1EFEEE3A75BEC2FEC222F851DD25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51177
IP: 45.128.116.0/22
IP: 84.234.96.0/22
IP: 91.235.116.0/24
IP: 188.214.30.0/24
IP: 188.241.58.0/24
IP: 193.29.187.0/24
IP: 193.201.82.0/24
IP: 217.197.99.0/24
IP: 2a13:2d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:fe:ee:3a:75:be:c2:fe:c2:22:f8:51:dd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0c9413f076a782110c14490d890f1b3e98e0785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:cb:c1:7f:7c:77:94:b1:ee:46:87:e8:9e:f1:
5c:5a:83:9b:48:9e:fc:c5:a3:69:30:cd:58:bb:ca:
f3:d6:c2:85:3c:53:1f:26:c2:f3:71:00:67:3a:84:
71:c7:1a:e4:ea:8d:ee:73:5a:9e:3f:51:80:71:b0:
0b:78:63:dd:d1:d3:91:de:da:44:e0:b3:e1:78:49:
42:8c:6b:fd:08:ce:b3:4a:5b:87:69:c6:26:89:e7:
11:1b:65:73:58:ab:d6:ce:a3:71:75:41:57:07:65:
ad:f4:6b:55:6d:11:1e:2f:8c:55:c2:2d:28:7f:f1:
0c:bb:66:bf:11:22:2b:d4:f5:26:53:7f:bd:41:f0:
8f:f0:e7:84:61:13:6f:3c:7f:1f:6e:69:62:5d:52:
ba:10:cf:c1:8d:d7:5a:e8:e3:ae:82:4d:77:2b:59:
61:96:e1:4b:fa:8b:1a:57:5a:2e:95:a0:40:42:f2:
1e:88:b5:dd:44:14:ca:ae:00:87:12:a3:23:bf:ad:
57:52:5d:3b:fe:5e:e2:dd:bd:a1:f4:db:17:2f:ab:
2d:82:49:91:e1:d0:52:71:73:88:21:ba:b5:0d:19:
fc:d9:27:83:b0:10:fb:fb:05:7c:e1:f2:5d:b1:03:
cd:89:2b:fe:7c:bf:69:92:08:bc:fa:ec:3b:92:8e:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.116.0/22
84.234.96.0/22
91.235.116.0/24
188.214.30.0/24
188.241.58.0/24
193.29.187.0/24
193.201.82.0/24
217.197.99.0/24
IPv6:
2a13:2d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51177
Signature Algorithm: sha256WithRSAEncryption
33:b4:d1:3b:16:04:44:82:f7:ff:b3:79:7d:15:2f:67:a4:6f:
2a:f8:79:58:a5:f7:95:c1:7f:e3:92:d3:d0:3a:1c:c8:e5:c2:
3a:35:b0:bb:14:f8:92:6a:90:d2:c0:34:08:8e:38:02:3c:f5:
b9:96:56:f1:83:37:44:b4:14:88:93:df:45:78:37:7a:6a:ab:
47:28:c1:aa:5e:cc:88:0a:03:46:09:93:01:35:79:51:a8:9d:
6b:f6:21:3d:77:91:de:ce:77:b1:0a:07:db:64:26:5d:7e:79:
af:a1:db:d4:d3:0a:20:21:2c:cc:01:5c:50:f9:d8:f0:d3:9b:
b0:eb:c3:64:da:9c:f5:09:3b:5e:f8:fd:fb:4e:62:c9:24:f5:
2f:6e:e9:12:21:3c:6e:63:24:38:4d:24:70:42:65:b4:8e:8f:
ae:e0:d3:68:48:7b:68:40:86:b2:24:81:c3:a1:62:4e:04:bd:
c3:c3:54:af:4c:23:34:02:81:08:e0:8c:ff:2f:fc:76:02:00:
ba:53:8a:f7:d3:4a:e6:6d:6a:d6:d0:6e:1f:d1:69:56:07:7c:
e6:b0:1f:d1:e3:28:17:dc:da:60:24:02:b2:ce:42:cc:72:bc:
d7:dd:5e:e4:dd:4b:83:94:e0:67:c0:69:4c:bc:20:1b:0c:30:
24:69:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:14:05 2025 by rpki-client