Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
File:                     wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer (raw, json)
Hash identifier:          yuDJ8W50TnzkrSZdHPeTjdboTsUBj2WVOM7V45ydJYM=
Subject key identifier:   C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942521889155420047299D89191099EE3F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 03:49:02 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.93.181.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:88:91:55:42:00:47:29:9d:89:19:10:99:ee:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 03:49:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c29cc9d3c496f8a92204d40a665edf538190d539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:98:bd:ff:eb:ea:43:0a:66:20:75:49:4b:
                    d5:9e:de:e2:b8:77:df:e1:04:89:4b:c1:da:73:32:
                    59:7a:0c:f9:a9:12:b8:e7:52:49:a1:a9:a8:29:ad:
                    16:91:65:24:ec:f1:c4:a1:83:5e:41:94:ec:4c:54:
                    6d:43:6b:86:ba:7e:5f:a6:30:51:0a:cb:2e:14:a2:
                    2e:1c:06:1d:0a:18:34:25:ce:4b:83:49:35:50:a7:
                    9b:13:e4:97:31:ad:4f:ce:32:c6:51:f6:7f:b7:53:
                    70:35:b5:6b:6f:08:a0:ee:91:aa:c8:c6:70:03:9b:
                    e6:93:04:27:79:3a:a0:66:3d:ec:6f:a2:5b:72:ec:
                    2c:c0:f0:4c:e0:bb:b6:33:bc:65:b6:e3:ef:a3:65:
                    d8:e6:90:ee:a7:3b:bf:2f:62:9f:1a:8c:65:77:07:
                    f9:b0:93:cd:d1:1c:f1:c7:2c:5b:08:77:66:22:73:
                    49:da:c0:5c:cb:53:c6:38:30:36:82:f6:85:1e:fb:
                    54:b1:30:45:5d:ed:bc:9c:7a:a2:5d:7b:bd:21:67:
                    c2:29:42:12:f2:51:f7:3c:3b:1c:93:92:5e:48:84:
                    9c:3a:c8:9b:b9:f9:53:4c:3f:e9:d3:ef:8c:43:24:
                    8e:6c:37:e5:58:44:11:3c:23:d9:18:9d:ac:bd:70:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:cb:8b:dc:28:b0:e0:4e:6f:fd:42:0b:7b:3b:6c:38:32:16:
         fe:55:98:a0:82:d0:12:43:a9:5e:9f:8c:26:89:e9:ab:4c:15:
         15:f2:33:4b:cd:58:6c:07:c4:a3:20:40:81:b6:11:61:df:ae:
         55:26:90:22:bc:3d:56:05:1f:10:84:51:c2:e4:7e:69:39:37:
         a4:fa:43:64:61:04:72:d7:ea:0d:ad:cc:a4:26:22:0c:3f:80:
         61:71:9e:2d:32:81:d9:68:9c:02:f9:29:af:77:71:58:54:33:
         5d:60:5b:f5:8e:73:7c:24:76:03:7f:7e:03:e0:1d:27:e6:4f:
         40:d9:17:50:4a:65:8f:19:36:49:a3:74:be:cf:16:87:e1:eb:
         4e:83:87:10:ad:f7:fc:af:e1:3d:63:7f:dd:d2:47:ed:81:82:
         d6:11:aa:60:18:41:d1:ce:de:64:ce:47:96:07:e3:d4:ab:9b:
         5a:07:20:b3:0c:68:40:d3:00:9f:34:51:e7:3e:16:95:7c:86:
         84:de:17:bb:b8:01:6d:47:6a:7e:23:93:ee:69:26:a5:3b:6a:
         08:96:ec:24:9e:e2:b5:b2:10:d1:41:fe:f9:16:d7:9c:df:95:
         d5:d6:00:76:22:e9:02:bb:f5:64:b2:db:c5:07:be:cb:1b:de:
         a6:48:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:14 2025 by rpki-client on console.sobornost.net