Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer
File: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer (raw, json)
Hash identifier: uD6ik/pDPVIzWzxYbppjAeqECv6Qm0VPv5HXQ0GEUaQ=
Subject key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 6E51EAABB310553F59CCE5067370213880520839
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 27 May 2025 19:32:36 +0000
Certificate not after: Tue 26 May 2026 19:37:36 +0000
Subordinate resources: IP: 2a05:dfc3:fd40::/44
IP: 2a09:54c7:1000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:51:ea:ab:b3:10:55:3f:59:cc:e5:06:73:70:21:38:80:52:08:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 27 19:32:36 2025 GMT
Not After : May 26 19:37:36 2026 GMT
Subject: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:36:94:9b:d0:8b:3f:1a:23:b4:c8:e4:c5:
11:ff:f9:e9:55:8e:4d:37:3a:1a:de:51:e5:73:e0:
db:7d:17:63:2c:34:f0:f8:af:26:b3:4a:32:36:03:
c4:68:80:80:08:b6:7e:76:8d:68:93:c2:c2:f9:cc:
75:39:6b:ac:74:1b:44:41:c2:ab:ee:8b:8e:d3:d3:
07:81:d4:20:77:de:ac:ea:bd:69:f5:39:a6:9a:0f:
26:3c:ad:12:96:3b:c1:c8:e4:64:da:af:1f:08:62:
54:55:07:78:1a:f6:21:67:79:ce:6f:b2:26:28:74:
d0:5c:76:aa:cd:fa:d0:04:9d:74:52:c2:4a:f5:64:
37:1a:f4:a2:5e:ea:1a:67:f7:d9:28:91:64:45:ec:
81:d7:b9:08:3a:18:0d:47:f0:d8:92:b4:3c:8f:fe:
95:a9:56:18:df:f7:0d:71:11:ee:8c:04:c3:4a:db:
a8:8d:49:86:2c:0e:fb:85:e7:0a:96:3b:b1:29:6b:
9b:04:3b:e4:b0:22:0f:b1:ad:06:fd:7c:f7:57:58:
b3:e1:ca:86:3c:1f:34:96:cf:35:05:3a:2f:23:16:
f7:a4:e4:64:e9:cb:17:4a:8f:7d:10:64:d7:dc:3e:
6f:2e:87:a7:5b:d4:f3:e5:5d:05:03:dc:15:54:c1:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fd40::/44
2a09:54c7:1000::/36
Signature Algorithm: sha256WithRSAEncryption
41:2c:89:a8:cf:cb:3e:f9:58:98:14:94:0b:57:2b:c6:25:fc:
bb:7a:45:da:ce:3b:95:c6:80:94:06:4f:77:09:f5:bb:c3:12:
50:06:b1:80:aa:50:7b:9b:84:9a:01:f7:33:1f:2d:be:f0:b1:
59:77:22:9a:38:5b:c1:13:a6:fe:8d:8b:8a:0a:20:34:76:fb:
79:d3:17:4c:dc:51:b8:61:ae:82:ef:7b:b9:92:12:a3:65:8f:
cd:48:83:4d:42:5d:b3:7a:f9:96:d0:de:a9:92:ad:72:a5:a9:
c0:41:7e:f9:71:2d:1c:66:77:dd:5a:23:2c:1d:58:fc:03:64:
86:97:53:93:a2:3f:3e:4a:6f:e0:f6:4e:5d:92:b0:79:02:88:
74:99:8c:88:a1:5d:b9:c5:cc:1d:06:d4:5f:41:07:42:a9:da:
56:76:02:ad:3f:16:75:ef:94:2a:6f:5c:08:96:d0:00:76:2b:
ff:52:96:77:a9:9f:3f:ac:fb:fc:b4:ca:fe:a4:90:6c:6b:56:
37:72:cd:49:74:dd:db:6b:70:87:28:d4:ba:34:d6:40:67:07:
eb:26:be:6d:c6:a1:32:d1:ea:c4:40:45:9c:9b:ce:54:af:5c:
dc:5f:7b:ec:49:8c:d7:cd:32:39:11:c2:8a:9a:27:25:42:26:
0c:7d:2d:ea
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgIUblHqq7MQVT9ZzOUGc3AhOIBSCDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTA1MjcxOTMyMzZaFw0yNjA1MjYxOTM3MzZaMDMxMTAvBgNV
BAMTKDNGMEQ1Qzk4OUQwNkRFRTRDRUY3M0I3NjQyM0Y3RDFCMjQ4MzA1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvTaUm9CLPxojtMjkxRH/+elV
jk03OhreUeVz4Nt9F2MsNPD4ryazSjI2A8RogIAItn52jWiTwsL5zHU5a6x0G0RB
wqvui47T0weB1CB33qzqvWn1OaaaDyY8rRKWO8HI5GTarx8IYlRVB3ga9iFnec5v
siYodNBcdqrN+tAEnXRSwkr1ZDca9KJe6hpn99kokWRF7IHXuQg6GA1H8NiStDyP
/pWpVhjf9w1xEe6MBMNK26iNSYYsDvuF5wqWO7Epa5sEO+SwIg+xrQb9fPdXWLPh
yoY8HzSWzzUFOi8jFvek5GTpyxdKj30QZNfcPm8uh6db1PPlXQUD3BVUwVCxAgMB
AAGjggMcMIIDGDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/DVyYnQbe5M73
O3ZCP30bJIMFyjAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5
ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy
OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC
NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1N2EyLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9jZjgxZTIzNS04MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIv
MS8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0MjNGN0QxQjI0ODMwNUNBLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH
AQcBAf8EGzAZMBcEAgACMBEDBwQqBd/D/UADBgQqCVTHEDANBgkqhkiG9w0BAQsF
AAOCAQEAQSyJqM/LPvlYmBSUC1crxiX8u3pF2s47lcaAlAZPdwn1u8MSUAaxgKpQ
e5uEmgH3Mx8tvvCxWXcimjhbwROm/o2LigogNHb7edMXTNxRuGGugu97uZISo2WP
zUiDTUJds3r5ltDeqZKtcqWpwEF++XEtHGZ33VojLB1Y/ANkhpdTk6I/Pkpv4PZO
XZKweQKIdJmMiKFducXMHQbUX0EHQqnaVnYCrT8Wde+UKm9cCJbQAHYr/1KWd6mf
P6z7/LTK/qSQbGtWN3LNSXTd22twhyjUujTWQGcH6ya+bcahMtHqxEBFnJvOVK9c
3F977EmM180yORHCiponJUImDH0t6g==
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:08 2025 by rpki-client