Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
File: wXLnuWJS7qhzJjPTulGpsFWDp7M.cer (raw, json)
Hash identifier: Mhe7KXevK91LXdIS1hDv24bpzwpKJWKB/RnEeyvs7jM=
Subject key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823F9237754EE8F5632B5F582890D2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31420
IP: 193.151.80.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:f9:23:77:54:ee:8f:56:32:b5:f5:82:89:0d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:3f:45:d8:8f:e2:db:b4:01:91:2a:ba:c5:
45:03:cd:94:c3:80:27:3b:cb:a0:24:7d:24:a2:f6:
64:b4:62:96:8b:ba:d5:bb:14:6b:4f:68:73:db:8d:
30:dd:7c:61:56:e9:ac:1d:78:42:17:06:f1:78:ba:
10:40:77:99:48:4e:87:21:6b:a6:2c:23:0d:71:30:
73:70:5b:c4:90:a1:6e:ae:a4:00:87:6d:cc:18:cd:
ed:af:22:0d:f6:56:d3:f8:66:a1:03:48:25:65:db:
4c:38:a4:9c:8c:8f:58:a7:10:d9:aa:62:92:4d:44:
a6:55:16:d3:0b:3c:85:c6:06:52:91:40:dc:c6:e7:
0a:68:ef:1a:0d:99:25:35:32:d4:cd:1e:20:5a:53:
51:f7:82:9b:98:2a:e6:bb:0d:35:94:5b:9e:5e:d3:
9f:99:f5:cc:3d:e7:25:56:ce:ff:58:c5:b4:89:7e:
25:cc:5b:55:da:52:dd:01:5c:a9:75:d7:ed:10:6a:
45:90:0f:bd:dd:f3:36:c2:ce:68:ff:3f:03:59:41:
a6:e5:0a:9b:23:6f:22:4a:30:22:81:c2:df:82:84:
07:b4:d1:da:45:93:81:3c:3b:ef:af:48:11:15:33:
24:d2:98:92:ef:73:5b:e6:5a:75:24:64:0b:6f:14:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.80.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31420
Signature Algorithm: sha256WithRSAEncryption
17:63:22:3d:64:c3:7a:1d:44:18:61:ad:b6:0c:cd:70:e8:ef:
6f:45:ea:e0:9c:bf:75:33:ca:07:0a:7c:d8:2a:f2:8f:c4:e2:
ed:b4:4f:75:0f:92:06:7d:3a:23:09:71:14:c6:ca:02:5d:fb:
37:31:3e:1e:1c:ec:30:e4:fc:25:eb:d7:f1:34:39:5f:26:59:
d1:97:44:ea:02:29:ec:86:20:44:fc:4b:66:e4:39:19:5e:85:
30:31:56:1f:be:13:0f:19:d5:e7:9d:9c:b8:20:43:1e:42:3b:
85:69:9e:8f:fe:8a:dd:a2:34:59:35:5d:5c:e8:9c:91:9f:74:
27:a1:4b:f6:62:07:92:05:d1:e4:e6:e1:2f:1c:17:62:28:56:
d6:45:68:0c:9e:1e:7d:60:ee:5d:6c:2b:d6:83:3e:eb:ec:0a:
77:5c:42:8f:9f:b6:4f:35:27:6e:46:59:74:29:64:4d:2a:58:
f9:f0:1a:ec:76:bc:7c:b9:6e:78:cf:a4:1e:f8:a2:6e:25:95:
9a:04:aa:b6:8e:81:55:71:24:51:54:0e:57:52:e9:71:e9:cf:
91:55:72:9b:3f:04:8e:01:87:26:8e:14:35:33:60:f0:71:5c:
21:00:32:35:68:b3:a7:47:32:cf:95:c3:f1:62:f3:03:a6:ef:
12:6c:1d:21
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQoI/kjd1Tuj1YytfWCiQ0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc1MDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTcyZTdiOTYyNTJlZWE4NzMyNjMzZDNiYTUxYTliMDU1ODNhN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zU/RdiP4tu0AZEqusVFA82Uw4An
O8ugJH0kovZktGKWi7rVuxRrT2hz240w3XxhVumsHXhCFwbxeLoQQHeZSE6HIWum
LCMNcTBzcFvEkKFurqQAh23MGM3tryIN9lbT+GahA0glZdtMOKScjI9YpxDZqmKS
TUSmVRbTCzyFxgZSkUDcxucKaO8aDZklNTLUzR4gWlNR94KbmCrmuw01lFueXtOf
mfXMPeclVs7/WMW0iX4lzFtV2lLdAVypddftEGpFkA+93fM2ws5o/z8DWUGm5Qqb
I28iSjAigcLfgoQHtNHaRZOBPDvvr0gRFTMk0piS73Nb5lp1JGQLbxS5/wIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFMFy57liUu6ocyYz07pRqbBVg6ezMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2E2ZWM3
MS0xNmU1LTQxNjMtYTA0Mi0zMTdkYjQyMzJmM2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYTZlYzcx
LTE2ZTUtNDE2My1hMDQyLTMxN2RiNDIzMmYzYi8xL3dYTG51V0pTN3FoekpqUFR1
bEdwc0ZXRHA3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwZdQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
Anq8MA0GCSqGSIb3DQEBCwUAA4IBAQAXYyI9ZMN6HUQYYa22DM1w6O9vRergnL91
M8oHCnzYKvKPxOLttE91D5IGfTojCXEUxsoCXfs3MT4eHOww5Pwl69fxNDlfJlnR
l0TqAinshiBE/Etm5DkZXoUwMVYfvhMPGdXnnZy4IEMeQjuFaZ6P/ordojRZNV1c
6JyRn3QnoUv2YgeSBdHk5uEvHBdiKFbWRWgMnh59YO5dbCvWgz7r7Ap3XEKPn7ZP
NSduRll0KWRNKlj58Brsdrx8uW54z6Qe+KJuJZWaBKq2joFVcSRRVA5XUulx6c+R
VXKbPwSOAYcmjhQ1M2DwcVwhADI1aLOnRzLPlcPxYvMDpu8SbB0h
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:57 2025 by rpki-client