Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
File: FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer (raw, json)
Hash identifier: Qxnj1YNNfVJOs4fXyapjc6xW4rbLAdQHDna/ylmTxKE=
Subject key identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4ECB60BEDAD41D9E824CA61916AF0D08CEDF50E9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 25 May 2025 06:40:37 +0000
Certificate not after: Sun 24 May 2026 06:45:37 +0000
Subordinate resources: IP: 2a0a:6044:bc00::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:cb:60:be:da:d4:1d:9e:82:4c:a6:19:16:af:0d:08:ce:df:50:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: May 25 06:40:37 2025 GMT
Not After : May 24 06:45:37 2026 GMT
Subject: CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:c1:bf:1d:fa:10:83:fa:84:93:47:26:70:
aa:52:9a:e5:23:02:8b:a6:2a:b2:16:57:6d:ab:49:
03:41:cb:46:ab:19:a2:bc:3f:f7:75:b3:19:b7:e3:
44:fb:cf:1b:39:63:f0:e6:43:f4:8b:bc:81:d9:8a:
00:35:48:94:b0:94:e8:4a:f1:67:27:b4:b0:23:29:
7b:de:bd:55:ab:0f:c4:2d:47:22:d8:95:36:a0:6a:
b7:b9:e0:b9:fd:af:27:a5:1a:18:49:8b:f8:d1:24:
2f:12:c6:f8:df:35:fc:42:71:fd:7c:2f:d1:c8:dd:
92:cb:de:41:e1:97:b6:7e:c6:ff:e4:c8:9e:37:03:
89:e9:75:6b:e5:aa:5e:c8:4d:a2:f7:3f:0d:f7:e3:
b4:e5:d3:b5:fa:54:d4:20:6b:d3:b8:f8:8d:4e:1d:
7a:dc:27:3c:3c:7b:1e:73:a3:5f:13:84:38:39:eb:
b9:04:23:85:fc:b8:f9:c9:bc:ad:7f:79:34:5a:ad:
45:46:40:b5:41:0b:d7:fe:e5:8b:55:df:58:6d:21:
e2:fe:97:cf:71:63:fe:ac:1b:96:dc:51:42:1d:42:
dc:d2:68:f3:5b:be:a0:2c:d3:37:01:df:14:f8:11:
95:ec:7f:08:98:4f:54:67:6a:75:d4:b3:50:95:63:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bc00::/40
Signature Algorithm: sha256WithRSAEncryption
60:a9:0f:18:82:24:72:f3:23:73:ed:c0:38:9d:4b:99:0a:c9:
86:92:03:85:de:31:3c:45:fe:0e:12:1a:3b:f8:64:7e:7c:ea:
b4:74:fa:70:5b:24:df:95:8e:59:93:ca:9d:74:e6:97:e3:c7:
2a:4c:19:9b:07:fa:3c:db:f6:c7:6f:f7:ba:6d:b8:ad:3c:c4:
69:85:b4:0d:0a:63:d3:0c:01:53:7f:29:bc:8b:38:de:f0:99:
14:0a:c1:53:f8:51:b0:27:7b:48:a7:7a:18:b4:93:ba:b3:e5:
84:bb:f6:82:a0:59:99:0d:0d:6e:76:48:a7:bb:22:45:63:12:
e5:f6:f7:b5:f2:92:b6:78:a2:7a:8c:a7:5b:bc:da:3f:8d:24:
a1:4d:67:aa:cc:30:31:b4:c9:1d:54:04:8c:aa:2c:7c:2e:e5:
29:02:96:8d:28:83:9f:3f:d2:dc:f0:0e:bc:68:49:e6:dc:0a:
8f:fe:dd:6f:e1:d9:66:ef:19:fb:aa:6f:e3:e3:98:9a:fb:1b:
af:06:17:07:69:20:f6:9a:5f:22:2b:72:20:c2:34:6d:ee:58:
a4:06:76:b4:68:b5:c8:78:22:72:68:36:68:1b:b5:9b:17:0b:
13:97:24:2d:26:27:34:5c:ee:4d:80:41:3a:ee:44:a7:00:5d:
c7:94:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:54:10 2025 by rpki-client