Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/F42DD866D1ED93308763875100791B0AA79AA33E.cer
File: F42DD866D1ED93308763875100791B0AA79AA33E.cer (raw, json)
Hash identifier: r3hy7u9DSOSVHnrBJ9NBr19jE1qVjTO7+WQnnO6e7j0=
Subject key identifier: F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 6AD34123DEC943BC8E523AABAA92F8563EBABDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 14 Nov 2023 01:55:16 +0000
Certificate not after: Tue 12 Nov 2024 02:00:16 +0000
Subordinate resources: IP: 2a13:df80:3806::/48
IP: 2a13:df80:8880::/44
IP: 2a13:df80:e800::/38
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d3:41:23:de:c9:43:bc:8e:52:3a:ab:aa:92:f8:56:3e:ba:bd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Nov 14 01:55:16 2023 GMT
Not After : Nov 12 02:00:16 2024 GMT
Subject: CN=F42DD866D1ED93308763875100791B0AA79AA33E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:48:fc:b8:cf:90:62:eb:fe:62:ae:b4:c0:
51:c6:89:5f:9f:02:db:12:d1:c9:fa:d3:c8:88:93:
fa:a9:0f:c4:9c:a2:b0:33:e2:e0:df:54:7a:f0:4b:
36:0a:92:36:6e:be:1f:1d:dc:42:4f:c6:22:f3:8d:
64:aa:a5:47:6e:dc:12:75:31:5a:93:77:1a:85:11:
4b:c9:f0:a6:21:a9:80:10:7f:cc:4d:1c:e6:57:da:
ba:a8:89:43:24:78:4e:6d:1a:25:6b:5e:d6:47:cc:
d7:9e:28:e0:72:7f:d7:b7:01:cb:5f:25:2e:b2:80:
6f:8b:32:eb:a8:29:6f:2d:33:dd:b2:18:3e:0e:dc:
13:6f:82:67:93:84:64:05:a3:b4:c9:d3:24:43:48:
65:63:38:c7:21:05:63:24:b4:d4:ff:64:4d:a9:d0:
02:b5:5e:a7:96:cf:aa:4c:ec:c7:3d:c2:f4:64:8d:
2e:6e:1a:ba:55:ff:1a:a2:2a:fb:22:dc:ae:53:c7:
3d:52:a6:a5:d9:02:41:22:cb:5a:46:5a:a6:89:89:
ba:34:87:21:98:68:70:35:22:4f:f2:0d:12:25:0c:
b9:de:19:5b:26:94:79:c6:fc:15:ce:98:66:bc:ed:
f6:f9:8e:fc:5a:d1:39:e9:80:f1:9c:a2:b4:8f:07:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:2D:D8:66:D1:ED:93:30:87:63:87:51:00:79:1B:0A:A7:9A:A3:3E
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/2/F42DD866D1ED93308763875100791B0AA79AA33E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:3806::/48
2a13:df80:8880::/44
2a13:df80:e800::/38
Signature Algorithm: sha256WithRSAEncryption
4b:a4:1e:1d:74:06:58:65:a5:10:5a:50:61:83:88:b6:cf:a4:
c9:a7:b1:43:0a:d3:31:ec:4a:8b:d3:67:b9:53:10:eb:98:73:
c0:81:ba:d7:01:a3:90:64:4e:6f:bc:00:2f:7f:af:2d:fe:11:
3b:2f:94:04:56:57:9c:9a:79:8b:eb:6a:e1:1a:6b:05:53:a9:
95:cf:8d:31:fe:10:d2:58:41:e0:20:11:42:06:af:e1:d2:3b:
da:7d:82:ab:cc:74:0e:a4:d8:b9:ae:87:5b:53:3b:41:4b:f1:
28:56:a4:2e:91:6c:6d:be:1e:4d:ea:9f:9c:62:3d:12:e6:7d:
e9:35:e0:dc:11:e0:9c:2c:cf:1c:5f:c3:1e:c2:ff:f4:88:ed:
81:bc:31:de:84:80:ec:21:9f:a1:ac:23:2c:1c:b2:23:67:c9:
0e:66:b3:b6:da:ce:38:20:30:5b:fc:2b:5f:b1:03:89:62:a9:
ea:66:d5:a6:17:58:36:5f:10:1c:a3:e5:32:0a:fd:7b:c0:b0:
27:a9:e9:92:68:44:53:39:68:37:fc:2e:5c:be:9a:05:c7:53:
94:8f:2f:c6:fe:a8:2d:05:bd:8f:ea:5b:f5:30:cb:49:66:1d:
f6:2d:57:cb:a7:d3:de:2c:28:42:12:3a:74:80:8f:59:87:4c:
97:49:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:01:40 2024 by rpki-client on console-fra.rpki-client.org