Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer
File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer (raw, json)
Hash identifier: B+41PLrkwfjyF57fgbMZbvBHQtzxrH3ubMQVM9DmTio=
Subject key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 5BB4E2039928AFCFC2004EC2CD9E1CB185EDBE6F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Manifest: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft
caRepository: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Mon 29 Jul 2024 15:54:04 +0000
Certificate not after: Mon 28 Jul 2025 15:59:04 +0000
Subordinate resources: IP: 160.22.12.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b4:e2:03:99:28:af:cf:c2:00:4e:c2:cd:9e:1c:b1:85:ed:be:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 29 15:54:04 2024 GMT
Not After : Jul 28 15:59:04 2025 GMT
Subject: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:59:ff:f8:7b:d8:46:2c:e6:94:df:c4:a2:
2d:42:eb:98:41:68:02:7f:08:8b:50:c6:d1:74:58:
c6:ee:8e:d7:b0:be:15:fc:6b:78:75:1f:f4:18:fa:
18:71:08:4c:cd:38:ff:93:84:d6:5d:fb:93:0d:37:
b2:d7:47:4b:74:c8:3a:44:13:19:93:99:e1:3f:aa:
35:e8:3a:50:9f:29:ce:43:28:83:49:2d:f3:39:94:
b9:2a:09:58:46:4e:09:28:41:ab:4d:e2:8d:f4:02:
1d:7d:8b:f0:e6:c5:a4:49:d7:24:60:67:89:af:ed:
3e:a7:2c:5b:04:01:20:aa:4c:2f:7b:ef:d1:aa:63:
97:00:61:36:98:5c:e1:7e:80:8f:ae:12:f2:03:fb:
cd:85:52:48:14:5b:f1:b0:73:7d:f4:2c:69:a1:b5:
28:ca:6d:c5:05:c0:97:4e:24:99:06:8a:d7:08:8b:
7a:19:54:10:21:62:b4:a0:c5:ee:59:fb:b8:4f:e5:
fd:cf:f0:bd:13:5d:92:09:d8:a2:db:cf:b7:00:76:
50:27:e5:6d:c7:09:31:6b:8b:50:32:68:5c:ab:c7:
1f:80:e2:2c:af:68:e6:5d:e9:9f:89:aa:a7:63:fa:
de:a9:a4:13:5c:4d:a8:34:7f:0e:d6:71:ee:80:c5:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.12.0/23
Signature Algorithm: sha256WithRSAEncryption
91:69:6c:26:61:36:ca:71:73:8d:ba:7b:9f:c2:a0:16:8f:18:
c3:6d:f1:e6:f3:68:22:75:d0:ea:f6:13:84:3f:31:c4:98:8e:
00:b9:20:6a:aa:7c:30:44:a2:1d:8c:78:b3:2c:c9:b1:7b:61:
12:dd:f8:ab:e0:fd:2c:68:f3:b6:8d:4f:8f:72:54:00:91:00:
1e:00:4e:fb:3f:0d:47:ff:4e:9b:05:0f:6b:84:fa:40:d0:b5:
8b:8b:d0:c9:a7:24:15:79:98:06:e0:95:14:54:9f:da:d2:53:
ec:d1:0f:36:24:31:9f:ad:b6:87:40:8c:62:ff:36:bb:a3:a2:
28:04:9a:c4:20:06:a7:49:a1:57:f4:c0:e2:81:a3:f4:ea:50:
b1:a5:0a:12:4b:81:12:70:29:d6:a7:dc:77:27:f7:22:c9:36:
9b:1f:4a:11:98:54:1f:79:ca:bd:92:e3:12:4f:d1:5d:a2:3f:
ab:00:ae:f5:17:e3:1f:51:bb:0c:75:cf:9e:37:7e:9f:63:f8:
59:9a:35:17:cd:0b:e8:17:ba:1d:e4:17:28:ca:d1:a5:b9:c9:
c2:c2:7b:ae:c8:dd:9e:58:e3:31:49:47:91:5c:2c:2f:b7:a1:
b3:17:c2:9e:01:29:a2:cc:f4:71:51:4a:c8:b6:5f:a8:77:ec:
28:cb:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:47:06 2025 by rpki-client