Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
File: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer (raw, json)
Hash identifier: 9qF5iCh9P/tV3ii8aHc6btiRZ8CFWMzhf8rLNbZUgjk=
Subject key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B50EE5EB07A671974161DC90F05B04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42675
IP: 45.148.16.0/22
IP: 46.227.64.0/21
IP: 193.187.88.0/22
IP: 2a0c:dd40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:0e:e5:eb:07:a6:71:97:41:61:dc:90:f0:5b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:96:7e:69:1f:68:87:47:6d:e1:89:87:80:
7b:d8:c9:36:1c:dc:3e:39:ad:5d:c8:cc:0f:f7:94:
d4:98:d7:8c:d7:70:bb:14:1c:fa:14:23:a5:c9:ca:
34:50:bb:35:d8:d2:23:bb:d1:6d:17:3c:e6:d8:7a:
90:cb:be:ba:47:cc:65:66:81:86:8b:1a:36:3c:ee:
09:7a:55:4d:1f:6c:fa:76:c5:b0:30:ed:b0:2a:35:
f0:a8:d2:48:83:8a:5b:7f:c1:dc:f1:3d:53:f2:27:
3e:56:ac:c0:c3:15:b8:42:b9:fb:27:02:0d:5a:ef:
a4:a7:53:10:64:b8:1f:65:33:20:00:0a:6e:03:4d:
3a:67:5a:bb:a9:f5:bf:db:aa:55:58:09:3b:23:f8:
27:90:80:27:8e:5c:9f:e4:13:8a:7d:a1:53:e0:04:
db:dd:a2:87:e0:0c:de:e6:80:3a:a5:2c:e0:ef:d9:
d8:b8:fc:a9:d0:78:60:76:7e:f9:d0:ab:1a:45:88:
d7:03:a7:2e:7f:8e:0e:55:fe:95:35:48:c6:2c:ce:
0d:b2:dd:76:a5:0e:c6:36:7f:72:4e:c4:10:75:e4:
b4:5b:31:5b:b6:eb:df:cd:46:cd:8e:a0:96:a7:3a:
fb:f7:c3:eb:e5:3b:cc:21:81:e2:4e:fc:00:74:0a:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.16.0/22
46.227.64.0/21
193.187.88.0/22
IPv6:
2a0c:dd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42675
Signature Algorithm: sha256WithRSAEncryption
4c:cf:81:7b:f3:bd:f2:9c:7c:3c:ad:5c:c1:64:e8:eb:ed:1d:
e7:b1:dc:93:0b:d8:3f:08:34:11:33:01:89:17:87:87:0f:7a:
7b:da:58:df:fd:29:e7:f0:37:c7:58:38:0c:99:3f:97:5e:78:
8c:a4:89:a8:1f:26:24:1d:b0:1d:2d:51:9e:33:c1:94:68:f8:
60:e8:56:cb:14:6c:5a:f3:3f:a4:1f:a3:4f:40:c8:49:dc:5f:
70:ca:73:52:cc:57:5a:a3:ee:50:60:7e:e8:36:cd:b6:49:fa:
86:9a:41:33:5f:df:22:25:ab:40:da:6a:28:a0:45:4a:84:73:
21:19:54:41:b2:e9:26:2d:96:83:9d:41:44:89:5f:3a:1b:0f:
6e:23:b3:9b:93:57:3a:f3:36:ed:d2:7c:5e:6b:e0:d7:b9:a8:
d6:12:e2:89:ed:70:96:2a:90:bb:e4:37:f0:35:7c:e6:36:00:
5d:bb:8a:7a:d7:f4:f7:23:28:e0:4f:19:b8:b6:dd:d6:6a:75:
48:ba:7a:9c:91:c5:ef:3a:6f:a9:04:21:ba:71:07:f8:9a:61:
05:17:4c:d3:46:63:4e:15:47:de:c7:e1:36:cb:ae:52:74:87:
1f:25:f1:aa:bb:53:95:07:3a:26:4a:b5:40:e8:ff:de:9a:92:
0a:4e:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:13 2025 by rpki-client