Certificate
$ rpki-client -vvf rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
File: 338A77CF88DD64F23FBC649EBD286448F9071586.cer (raw, json)
Hash identifier: NmP4EGIu1csN702nMYIKmQVJzqoaYI75xF4qa+sYM8M=
Subject key identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
Authority key identifier: 0D:42:73:D9:49:CE:57:1D:82:BC:05:0D:36:93:91:F4:AE:2C:B2:09
Certificate issuer: /CN=0D4273D949CE571D82BC050D369391F4AE2CB209
Certificate serial: 4679FB806093D301A7FA5FDE24E74838E416F9A1
Authority info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/0D4273D949CE571D82BC050D369391F4AE2CB209.cer
Manifest: rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.mft
caRepository: rsync://rpki.co/repo/AS945/12/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 22 May 2023 21:44:33 +0000
Certificate not after: Mon 20 May 2024 21:49:33 +0000
Subordinate resources: IP: 104.37.42.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:79:fb:80:60:93:d3:01:a7:fa:5f:de:24:e7:48:38:e4:16:f9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D4273D949CE571D82BC050D369391F4AE2CB209
Validity
Not Before: May 22 21:44:33 2023 GMT
Not After : May 20 21:49:33 2024 GMT
Subject: CN=338A77CF88DD64F23FBC649EBD286448F9071586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:16:86:ba:30:5e:24:a0:3e:dd:08:a3:f8:
09:04:90:ce:62:01:e7:ab:e5:00:b3:2a:7d:90:5c:
82:9f:4a:54:37:56:2c:fc:83:21:04:7d:f8:e7:31:
d1:83:81:03:5f:58:62:72:89:0f:7d:90:e8:2c:a3:
ab:10:de:10:5a:78:99:63:70:cc:ec:18:ce:50:db:
68:40:9d:a8:f8:8a:42:e9:b3:8f:57:8e:2d:ec:77:
16:49:60:df:7f:56:dd:2e:79:f1:01:88:61:be:aa:
6b:eb:b5:89:84:17:d7:91:93:9e:b9:cb:30:84:1c:
de:c6:77:a1:ec:e5:81:31:b4:57:19:0e:70:5e:4d:
4c:cc:b4:b7:a4:b8:e5:46:6e:38:2a:f3:48:eb:51:
a3:79:7d:6c:b5:31:42:5b:69:e1:81:3b:c1:8c:1e:
30:1d:31:fa:a2:75:42:ad:2b:85:06:33:0f:6d:6d:
00:fb:00:39:b5:00:03:04:33:af:30:8b:6f:e3:00:
52:8d:b2:37:ac:71:d9:80:bb:af:59:b1:4f:1b:aa:
dc:1b:2d:ff:19:57:ab:fe:df:d7:dc:78:47:ce:18:
f6:55:34:5b:8f:f2:85:fd:1d:6b:a8:ea:3a:e0:10:
b4:21:10:c2:1b:21:f0:cc:f1:80:c2:94:af:55:82:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
X509v3 Authority Key Identifier:
keyid:0D:42:73:D9:49:CE:57:1D:82:BC:05:0D:36:93:91:F4:AE:2C:B2:09
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/August/12/0D4273D949CE571D82BC050D369391F4AE2CB209.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/0D4273D949CE571D82BC050D369391F4AE2CB209.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS945/12/
RPKI Manifest - URI:rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.42.0/23
Signature Algorithm: sha256WithRSAEncryption
09:6c:10:6c:d4:a8:64:10:11:b3:e2:1b:2d:dd:07:ea:96:1d:
65:d0:5c:10:b3:fa:51:2d:fd:54:59:18:80:3d:c6:53:9e:05:
d5:82:0a:d8:98:1f:1c:60:7a:e4:55:b8:2c:60:81:8e:bc:6b:
22:61:3a:11:c1:9b:b7:3e:84:10:f4:8b:14:90:3a:04:67:8c:
e4:14:49:ae:0c:c7:92:a2:2e:a0:c0:e1:ef:ee:0b:4b:fb:eb:
96:cd:a9:57:50:03:83:1b:26:1c:fa:ec:58:8d:82:94:34:1c:
33:4a:64:ef:6d:63:55:09:15:55:66:d9:a2:0b:d6:46:25:b2:
fe:7f:cd:e0:07:db:5b:82:ba:1d:58:f4:1c:09:8d:d0:3b:6e:
3b:ab:9c:1a:db:91:93:88:cd:0a:8d:bc:2d:97:ab:cc:1f:32:
86:6d:b0:cd:b8:55:4f:54:4a:c2:22:52:cf:51:9b:b2:73:a8:
42:0c:52:e1:9f:11:8f:46:a3:ef:aa:7d:f0:62:f9:a8:a5:fa:
63:21:5f:c0:7c:20:f8:ba:fe:3e:b9:bb:03:86:65:ae:b6:2e:
d1:67:7a:b8:b8:66:82:21:12:91:54:9e:9a:03:ff:90:9c:6c:
bf:e9:7a:1e:a8:d9:33:17:e9:9c:38:14:15:84:25:f4:20:dc:
6a:91:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:10:48 2023 by rpki-client on console-fra.rpki-client.org