Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
File: wlbSXx_dANyA3W0iWyERm_ISHok.cer (raw, json)
Hash identifier: xtEZlxlLJDJE+3c0X/s0l9/jccbJ2BPJnFsD6SYstTQ=
Subject key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D73971D769523CE325DC30BF5B4C84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.255.216.0/22
IP: 2a0c:6040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:39:71:d7:69:52:3c:e3:25:dc:30:bf:5b:4c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:1f:5e:1a:38:5e:e4:f3:22:f8:99:3a:af:
cc:1e:c4:83:1a:39:bf:5a:6d:45:b4:36:72:4f:b3:
81:69:2f:b2:c7:c2:f8:d9:ee:92:71:33:5b:d1:89:
86:22:ef:1a:ae:84:a8:90:2b:e2:fd:11:d7:d6:1b:
cf:d1:99:20:5a:8f:44:dc:64:93:80:1b:0a:33:0a:
cb:0e:fa:21:72:f4:fa:69:20:06:ad:0e:a1:ce:8f:
25:26:f0:79:3c:60:20:8b:53:f3:6b:1d:7f:2f:a3:
22:2a:00:b3:82:69:5a:6d:dd:33:5f:a8:10:4c:cc:
7d:0f:d4:12:d4:f1:87:9e:f9:1f:9e:00:8b:be:a8:
38:53:4b:d0:a7:4f:c5:3f:00:73:07:20:bd:d0:4f:
78:ac:ae:bd:9c:b3:e1:63:3e:04:50:ba:5a:c2:1f:
9c:a9:7a:29:5c:f9:b1:14:1f:fc:55:0e:8d:a5:44:
58:0e:20:f9:ce:b6:d4:7f:fb:61:cc:34:d1:1d:39:
ef:72:b7:1a:3d:e7:48:6f:4a:39:0a:a3:99:6f:16:
44:bd:87:a2:74:41:45:94:e6:2f:86:96:f0:df:5f:
91:00:4d:83:b5:c4:18:2b:af:f2:7f:89:be:bb:b2:
e1:e3:ec:31:14:20:7e:d0:f5:3d:b0:ff:c4:44:eb:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.216.0/22
IPv6:
2a0c:6040::/29
Signature Algorithm: sha256WithRSAEncryption
28:e1:7a:1f:14:15:bd:71:f3:18:a5:49:e3:35:9d:02:08:e1:
ee:bb:ce:34:5d:a6:a1:f7:b5:d7:8a:d5:9a:fc:d3:1e:c7:fd:
f1:65:90:e6:84:bc:6e:8b:9a:84:c2:df:e4:7f:c6:a2:96:73:
a1:d2:6e:33:00:ab:fe:2c:fd:88:39:55:0e:2d:14:88:dc:f9:
c3:d0:0a:53:72:f9:07:46:aa:e8:3c:8d:18:bd:46:2c:96:79:
8e:59:88:39:f7:9a:1c:c4:72:05:1c:f9:48:55:70:da:ec:4b:
08:81:e8:0e:d7:03:f0:fb:48:29:54:3d:a9:cd:a7:b5:a6:97:
e8:1f:c5:28:a3:ff:58:a0:51:35:52:f5:1d:dc:95:90:4e:be:
eb:d7:b1:35:d6:98:d5:17:00:5f:c5:ee:d0:fc:4f:6f:4e:a2:
39:ea:c8:a9:fb:6f:03:d3:77:b1:ac:57:3d:88:79:dd:ef:13:
b8:c4:36:f9:87:84:9e:69:5f:42:a3:a0:b4:62:80:7e:33:db:
f4:a3:50:ee:1d:de:ed:dc:6f:02:89:06:ae:31:a0:07:06:04:
2d:48:22:5b:f7:72:0d:1d:e0:80:33:60:92:2b:3d:d5:27:5f:
71:c3:b1:87:b9:bd:c4:18:6f:f7:b6:6e:de:18:38:01:a3:63:
e6:38:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:27 2025 by rpki-client