Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
File: WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer (raw, json)
Hash identifier: 3X6Z4WI5moD+FO67uO+2RIBR+TIwrLMDO4PPjYmPVRc=
Subject key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747EC9BB51C823F66F22DFD5BA53A52
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.213.65.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ec:9b:b5:1c:82:3f:66:f2:2d:fd:5b:a5:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=594b79990f616a8344c860148fc922910e154dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:a1:36:e5:fd:cf:82:7a:43:51:78:a9:90:
96:65:ed:bb:5f:61:1c:37:91:97:72:bc:b9:58:13:
58:77:2d:22:6a:d2:ee:42:25:97:24:fc:fa:be:65:
f9:65:90:a9:41:0b:f3:47:77:25:ce:cb:ad:a6:3a:
5f:ba:70:c8:56:13:79:7e:ca:5a:8a:4a:19:84:61:
a3:ae:94:34:00:72:f6:fe:ae:6a:db:f0:8c:c1:b9:
0a:0b:58:bc:88:98:25:97:4c:63:40:bc:10:6d:d8:
ab:fa:7a:19:33:09:03:de:63:30:c3:9e:55:f5:d8:
58:5d:55:0c:4d:d2:07:5b:a4:1a:ab:fc:db:37:ed:
5e:27:a5:a7:a4:eb:f6:b8:06:64:2c:6c:09:47:90:
9f:74:95:da:dc:91:6e:6e:5c:9d:e9:72:18:96:b8:
f3:9c:97:19:86:b9:70:e5:43:55:82:6a:4e:7c:9c:
69:a5:1f:ce:60:3d:68:7d:e1:b7:ba:6b:44:98:34:
e3:32:c8:33:6a:79:5a:4c:72:cc:0e:d5:62:6a:f4:
c3:8e:ca:f4:5a:45:8a:0b:6b:42:3a:8c:15:8d:e7:
c0:66:5c:a5:59:16:63:62:ef:83:c0:c1:20:be:18:
80:cd:35:d0:3e:8e:a6:29:3e:8b:5c:81:b5:07:f3:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:52:e8:29:1d:db:27:68:7d:71:31:1b:9c:db:4a:1a:0c:09:
79:ae:2b:f6:f4:25:24:7e:a0:a9:69:da:ad:1c:5d:6b:d2:7f:
2c:29:db:22:b7:18:f8:77:4c:68:2f:5b:db:ea:ea:df:3f:60:
aa:23:1e:11:fc:29:3d:23:de:4f:4f:a7:78:27:0e:c2:50:bf:
17:79:8e:27:a2:21:e3:98:8b:49:bc:35:48:91:29:04:66:14:
be:d8:7f:a3:82:09:c7:e4:52:16:21:03:ee:75:e4:ee:de:e8:
32:ab:f3:fd:c4:25:99:66:09:bf:36:79:fa:c1:6c:7d:43:19:
c5:0c:d7:9d:10:49:60:1e:f2:c6:dc:6a:fe:3f:d4:6d:02:d9:
fa:81:d6:93:9f:5f:90:c1:d5:ee:5a:bc:45:ba:9c:04:2d:da:
9e:b6:ad:76:a8:a9:ad:62:29:84:fb:88:36:8a:ae:83:aa:0e:
9c:05:a8:2d:21:df:63:f2:1d:08:c0:fd:5b:5a:17:37:bc:41:
99:33:ef:c1:75:bc:11:f5:19:ea:78:fa:9f:3e:4b:7a:99:93:
73:7e:da:fb:79:2a:7e:16:4f:b9:b4:ee:bb:c8:56:6d:06:d9:
b1:31:5b:6d:2f:a4:e8:d5:6c:4a:4f:9c:75:54:1c:4d:8a:14:
2b:50:ef:7b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQnR+ybtRyCP2byLf1bpTpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTRiNzk5OTBmNjE2YTgzNDRjODYwMTQ4ZmM5MjI5MTBlMTU0ZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27OhNuX9z4J6Q1F4qZCWZe27X2Ec
N5GXcry5WBNYdy0iatLuQiWXJPz6vmX5ZZCpQQvzR3clzsutpjpfunDIVhN5fspa
ikoZhGGjrpQ0AHL2/q5q2/CMwbkKC1i8iJgll0xjQLwQbdir+noZMwkD3mMww55V
9dhYXVUMTdIHW6Qaq/zbN+1eJ6WnpOv2uAZkLGwJR5CfdJXa3JFublyd6XIYlrjz
nJcZhrlw5UNVgmpOfJxppR/OYD1ofeG3umtEmDTjMsgzanlaTHLMDtViavTDjsr0
WkWKC2tCOowVjefAZlylWRZjYu+DwMEgvhiAzTXQPo6mKT6LXIG1B/NARwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFlLeZkPYWqDRMhgFI/JIpEOFU2tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzI2NjQx
YS1iNGY5LTRmYmEtODY3ZC1mN2YzNjQ1Nzg3NGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMjY2NDFh
LWI0ZjktNGZiYS04NjdkLWY3ZjM2NDU3ODc0ZS8xL1dVdDVtUTloYW9ORXlHQVVq
OGtpa1E0VlRhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9VBMA0GCSqGSIb3DQEBCwUAA4IBAQCNUugp
HdsnaH1xMRuc20oaDAl5riv29CUkfqCpadqtHF1r0n8sKdsitxj4d0xoL1vb6urf
P2CqIx4R/Ck9I95PT6d4Jw7CUL8XeY4noiHjmItJvDVIkSkEZhS+2H+jggnH5FIW
IQPudeTu3ugyq/P9xCWZZgm/Nnn6wWx9QxnFDNedEElgHvLG3Gr+P9RtAtn6gdaT
n1+QwdXuWrxFupwELdqetq12qKmtYimE+4g2iq6Dqg6cBagtId9j8h0IwP1bWhc3
vEGZM+/BdbwR9RnqePqfPkt6mZNzftr7eSp+Fk+5tO67yFZtBtmxMVttL6To1WxK
T5x1VBxNihQrUO97
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:08 2025 by rpki-client on console.sobornost.net