Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/66950426E34C31CE2D1F2604E94F4D1A65D61995.cer
File: 66950426E34C31CE2D1F2604E94F4D1A65D61995.cer (raw, json)
Hash identifier: pEDsEdrIFOHAbl6vF9zRazMB2uC7y/gtUs0uSBmi3qY=
Subject key identifier: 66:95:04:26:E3:4C:31:CE:2D:1F:26:04:E9:4F:4D:1A:65:D6:19:95
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 479E23B21EECFC02C207DFF7A741A114EB4861EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/66950426E34C31CE2D1F2604E94F4D1A65D61995.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 09 Apr 2024 23:06:18 +0000
Certificate not after: Tue 08 Apr 2025 23:11:18 +0000
Subordinate resources: IP: 2a13:df80:7e00::/44
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:9e:23:b2:1e:ec:fc:02:c2:07:df:f7:a7:41:a1:14:eb:48:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Apr 9 23:06:18 2024 GMT
Not After : Apr 8 23:11:18 2025 GMT
Subject: CN=66950426E34C31CE2D1F2604E94F4D1A65D61995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:0d:7a:66:c0:a2:d2:90:69:18:a0:75:22:
64:b9:4c:89:5c:73:19:e2:85:3d:81:55:20:d0:66:
2c:a1:1c:97:48:fb:4c:87:55:0d:f9:83:5d:18:55:
fc:0f:1d:91:d0:1d:ea:fe:66:5a:3e:ca:54:d1:10:
c2:84:6f:87:8e:4b:26:39:d3:a4:aa:ef:2e:6c:20:
1f:61:52:f9:0b:c0:bb:30:80:47:cb:59:44:8d:5f:
ac:df:4d:9e:72:41:aa:8a:17:e7:63:82:26:d6:c6:
ae:7e:24:a5:41:83:68:ca:8c:fe:3c:44:e7:21:73:
93:89:12:92:d3:cd:5e:d2:4e:3c:79:b9:fb:e5:f7:
7b:29:7e:55:d7:8c:0b:55:4d:e4:07:8d:f1:47:ff:
af:fc:c2:63:63:5f:90:64:d7:fd:0a:92:03:ea:d6:
d7:4a:c4:4e:11:04:1e:3b:ed:98:16:2b:94:40:59:
3b:eb:56:c4:1f:65:a8:b9:de:fa:65:f1:cf:3d:8d:
a8:18:86:d8:d6:98:ce:6e:31:b6:be:43:ca:21:08:
7c:b3:30:d0:be:83:79:eb:20:21:7f:10:c9:d5:5c:
9b:22:76:e0:21:de:60:f1:0e:fa:e0:bd:67:cb:86:
bd:d5:0c:a6:c3:64:16:a7:e8:1c:43:b3:87:ad:7b:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
66:95:04:26:E3:4C:31:CE:2D:1F:26:04:E9:4F:4D:1A:65:D6:19:95
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/2/66950426E34C31CE2D1F2604E94F4D1A65D61995.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:7e00::/44
Signature Algorithm: sha256WithRSAEncryption
7c:10:72:69:78:81:0d:22:0a:4d:7a:d1:c6:a2:6d:7d:8a:e9:
b5:13:ae:8e:f4:7d:f1:c0:43:11:0f:99:8d:ff:f4:a1:a2:16:
f4:3c:81:1a:f0:8f:2a:56:09:1d:d4:3f:6d:60:42:01:fe:09:
fb:a8:0c:f1:6c:eb:e0:b4:f5:9d:f5:e3:64:0a:96:4d:5e:ff:
81:6d:02:ea:89:dc:c1:18:13:e8:30:ed:3b:43:68:65:47:3e:
e7:b2:f5:5d:3c:16:88:22:12:a3:41:9d:a5:f1:f9:2c:09:5e:
0d:a9:31:a9:06:ad:e8:36:c7:fc:9e:76:17:ed:6c:2b:59:b2:
2f:ca:ac:78:62:07:24:68:81:13:55:bc:56:af:1f:43:28:a5:
44:0c:b7:b6:5c:af:71:ed:a6:5c:5a:d1:85:75:82:58:7b:4f:
1c:00:51:85:43:d7:10:5f:f3:5d:2e:a7:50:43:06:f8:4e:a7:
30:e7:1f:3d:da:2f:44:ac:24:17:95:3e:ed:a8:d1:eb:14:a9:
d3:79:a4:11:f8:65:09:50:31:c7:e0:29:fe:af:b1:01:96:5f:
7a:c2:01:53:01:b8:83:82:68:2a:7a:01:a8:c8:fd:a0:78:b0:
5d:0d:e3:cd:5c:cb:38:80:66:6a:d2:7f:24:1a:93:ad:c2:4f:
d6:55:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 15:21:40 2024 by rpki-client on console-ams.rpki-client.org