Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/62DFE0F943896C6926C6A58A5CA112539167FA66.cer
File: 62DFE0F943896C6926C6A58A5CA112539167FA66.cer (raw, json)
Hash identifier: RRbKTaskB9QWFq5UvuH4Y3noYd9VcSDib8jzTvH4Je0=
Subject key identifier: 62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 13B48F022AB6AC09E79D8D1AE3427B17B94B9E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 10 Apr 2024 16:24:17 +0000
Certificate not after: Wed 09 Apr 2025 16:29:17 +0000
Subordinate resources: IP: 2a13:df80:5700:: -- 2a13:df80:58ff:ffff:ffff:ffff:ffff:ffff
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b4:8f:02:2a:b6:ac:09:e7:9d:8d:1a:e3:42:7b:17:b9:4b:9e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Apr 10 16:24:17 2024 GMT
Not After : Apr 9 16:29:17 2025 GMT
Subject: CN=62DFE0F943896C6926C6A58A5CA112539167FA66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:95:e7:3a:9e:ba:ab:01:df:60:da:23:1a:
cd:8d:d6:88:ab:5c:02:98:5a:8e:fe:a3:53:f9:20:
d1:7f:78:e6:67:77:fe:8f:e5:72:80:a6:36:80:71:
ca:73:ad:28:61:1a:1a:bd:86:e2:3e:5d:f8:32:a5:
b8:70:17:68:7a:54:b1:fa:81:23:8d:86:08:e7:83:
81:a9:9c:ad:81:d2:4f:cb:fc:74:59:75:b3:bb:02:
dd:80:ca:cf:54:bf:ca:6b:0f:e7:42:fc:f6:e0:80:
ee:84:4c:31:26:5f:dc:98:a1:3c:0b:32:cd:64:48:
c0:d1:59:6e:30:51:36:ff:03:65:63:80:17:92:2f:
4d:9c:64:28:f5:d8:d5:b9:ae:9e:1b:ed:31:a1:fc:
73:b4:7a:ac:cb:b2:d0:3c:cd:ed:11:9e:ac:15:7c:
e3:b2:2e:3d:fb:f0:d0:f8:6f:83:aa:8d:47:ca:48:
78:59:b3:73:65:28:9e:b3:e2:b4:2f:e0:32:c2:a0:
82:8e:f0:c3:11:34:31:1a:be:88:b5:9a:b6:32:1a:
d1:61:03:b7:6c:9b:1d:58:87:55:62:da:a7:6f:b7:
c1:09:89:87:e3:c9:51:45:70:9b:89:cc:28:e4:5b:
3d:3f:05:eb:62:5f:e2:4c:50:1c:d7:84:09:9a:35:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:DF:E0:F9:43:89:6C:69:26:C6:A5:8A:5C:A1:12:53:91:67:FA:66
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/1/62DFE0F943896C6926C6A58A5CA112539167FA66.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:5700::-2a13:df80:58ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:c8:49:1b:ab:1b:e1:45:58:90:54:d0:14:60:b1:49:0c:c2:
1b:53:8a:29:20:20:a6:9e:4e:85:c0:45:07:d9:32:76:6b:35:
0c:9b:ee:a0:7b:d0:5a:09:3e:8f:8b:89:59:f2:9f:72:bc:94:
c5:8f:b4:03:8a:5f:8e:cf:74:5a:84:09:03:41:2d:f4:cc:39:
d0:83:2a:ec:d3:32:04:c6:3a:13:fb:9b:12:4b:cf:71:ab:5b:
15:8e:71:11:e6:6c:37:1e:51:34:65:5c:69:f2:d5:2a:3a:27:
8c:33:67:f3:c1:db:85:36:e7:65:6b:31:e8:23:bd:d4:53:91:
47:18:df:aa:f1:8b:99:2d:9b:1a:85:af:68:68:47:a4:99:37:
e8:3c:23:a4:6d:1b:c2:dc:09:8f:ee:a4:c2:e7:da:d7:08:1e:
d2:c6:26:36:2b:fe:fe:2f:23:e3:1a:6e:74:a9:1a:d0:4d:aa:
46:db:bd:0a:3b:c6:87:50:db:c7:1f:8c:68:7c:4c:5e:fd:cb:
f8:62:bd:14:c7:37:be:b6:1d:30:5d:dd:9e:fe:3d:b6:ee:b0:
82:fc:1a:f5:40:86:3b:9c:e0:8d:b9:e9:48:10:87:68:18:0f:
ce:ce:6d:22:e4:7e:25:6e:42:89:e2:53:e5:a7:3c:c9:f2:f8:
d0:b3:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:53 2024 by rpki-client on console-ams.rpki-client.org