Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
File: wtJUnY0AZ6NyMjzHbY7gECt02DM.cer (raw, json)
Hash identifier: XzpeR6czJhM3ogqMKpfKMHqgZCGoxX4TrCFtdzLzL3M=
Subject key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D65F288E536C0873ED47FBC09902A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198776
IP: 78.110.44.0/22
IP: 185.117.64.0/22
IP: 185.220.132.0/22
IP: 2a0b:f740::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5f:28:8e:53:6c:08:73:ed:47:fb:c0:99:02:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:f8:a8:25:73:ee:90:09:fc:ec:62:2e:4b:
5b:4d:9d:a7:fd:8c:e7:ac:be:d6:ab:89:d3:85:92:
3b:f9:f1:99:dc:e2:a7:da:47:fa:8c:e3:6c:76:6e:
01:d6:dc:27:27:0e:cd:cb:ad:d9:de:85:71:d9:0b:
5b:fe:68:20:36:15:57:50:04:a3:3e:16:bf:f5:a6:
fe:2c:e6:f1:54:47:bb:4f:b5:5a:6b:d3:d8:7b:ac:
48:c1:7a:bb:ce:08:3d:6c:9d:de:ac:6c:da:f8:56:
8e:52:57:36:1d:7c:a7:66:f7:2d:e9:f2:43:12:f5:
c2:d7:f7:72:c7:91:b7:ee:be:30:c7:19:ff:1b:cf:
0c:48:7b:41:74:a0:17:bb:c6:43:a2:45:a4:1c:c5:
07:2a:17:6f:89:7e:f6:b5:c4:75:36:1b:96:6c:35:
99:0f:9f:e4:7e:df:12:91:a5:ef:b6:7d:df:5f:e5:
6e:7d:7f:23:75:89:0c:4e:61:62:8e:a9:ed:a3:86:
bf:c7:a9:b9:2f:e7:70:af:03:19:72:07:ae:88:6b:
a1:a3:e6:ca:06:a1:e2:31:a0:e5:1a:45:5b:10:f7:
1f:38:9d:3a:6f:ab:3b:45:18:12:eb:c3:ae:8c:29:
59:65:c5:03:e2:d2:24:85:fe:ee:fa:e9:77:af:64:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.44.0/22
185.117.64.0/22
185.220.132.0/22
IPv6:
2a0b:f740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198776
Signature Algorithm: sha256WithRSAEncryption
6a:36:7a:05:12:36:74:63:0e:09:04:b4:13:d6:81:89:5b:0f:
c3:7c:ce:87:55:ba:24:82:33:fa:50:92:11:92:99:1a:0f:ca:
91:4e:5a:44:fe:17:c5:17:4d:bd:9c:ef:7e:e0:08:47:14:7d:
18:b8:bd:fa:d7:8b:00:cf:53:eb:b2:bf:6a:22:79:62:71:d6:
98:f8:80:43:d6:11:78:f9:09:2f:49:1b:95:5c:d5:ba:74:fc:
2c:59:35:70:7e:6b:4c:f5:dc:e1:ce:b9:bc:b9:0f:a2:8f:68:
d3:e3:48:1b:a3:36:71:dd:30:9f:fb:f2:af:db:bd:45:6d:a1:
30:07:b9:5b:ec:49:2d:f6:ed:23:05:97:00:9b:7d:81:08:9c:
52:9d:fe:67:57:98:e4:f0:0c:e1:3c:15:8d:90:ed:9f:ba:55:
c9:89:ed:7f:44:3c:dc:71:a0:3d:23:25:ad:c5:0e:d8:19:cc:
1c:43:3a:ad:e4:45:53:60:99:67:97:49:c6:08:c6:f0:c1:9b:
a4:91:17:c7:94:f5:d5:c8:81:52:4f:bf:74:a5:01:44:ee:d4:
e8:de:94:72:e6:e0:24:1f:6b:1b:59:d5:71:e7:28:5d:60:b7:
98:b3:3f:01:01:26:10:e7:5d:fa:2f:76:92:c7:30:24:05:25:
18:14:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:19 2025 by rpki-client