Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer
File: 6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.cer (raw, json)
Hash identifier: xMC2WSUh/MP9Bwfjv8PnDHjm3Bo8G0WlyJRuANuWMWI=
Subject key identifier: 6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 7EED7DDEBCB0C4785916810B09F660735F01652E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.mft
caRepository: rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Wed 01 Dec 2021 07:48:03 +0000
Certificate not after: Thu 01 Dec 2022 07:53:03 +0000
Subordinate resources: IP: 103.247.8.0/22
IP: 2001:df0:27b::/48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ed:7d:de:bc:b0:c4:78:59:16:81:0b:09:f6:60:73:5f:01:65:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 1 07:48:03 2021 GMT
Not After : Dec 1 07:53:03 2022 GMT
Subject: CN=6DD3E1860BFDEC3D3695C7B9DCCEE54287308546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:3d:92:65:ac:51:b9:79:7b:f3:94:bd:bd:
1d:9c:83:7e:d1:a3:8d:a3:3d:31:d8:98:09:ad:c2:
7b:85:33:21:9c:ef:c2:7d:ee:71:9a:4f:dd:a0:04:
1a:e7:2f:a1:56:39:ec:1e:a6:4d:b9:b8:4a:e2:cc:
54:d1:ad:3d:47:10:f8:81:1c:33:d5:c0:61:36:e4:
f2:f0:40:cb:6d:20:55:8f:02:2e:b4:c3:d5:2f:74:
bf:f1:7b:bf:1a:21:38:f4:13:6b:8a:50:17:ca:25:
37:71:a3:16:d8:ce:ba:de:57:4b:a0:ca:9a:45:80:
c7:a3:2e:01:08:5c:1e:a0:27:c2:c6:4a:44:13:48:
21:fb:46:4d:70:81:f8:f9:d0:c0:d3:2d:99:aa:36:
86:d7:25:4f:94:05:71:12:2e:70:10:bd:0c:22:c1:
e8:9d:d0:8b:7d:7a:22:00:3c:50:84:e2:1b:18:92:
d6:0a:f2:78:88:f7:5d:52:cd:8b:45:67:c3:08:e0:
1a:08:2c:67:10:8f:73:d4:26:ae:95:e3:54:6c:1e:
fd:0e:66:12:67:a9:55:9b:78:f7:8f:44:9f:bf:15:
db:f4:95:94:d2:87:09:1e:1d:03:0f:6a:14:14:4a:
7d:fe:71:97:c7:e7:89:4d:02:d2:21:08:86:d7:1c:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6D:D3:E1:86:0B:FD:EC:3D:36:95:C7:B9:DC:CE:E5:42:87:30:85:46
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/48623960-4163-4ccb-9f0d-89c6ca0c92c2/0/6DD3E1860BFDEC3D3695C7B9DCCEE54287308546.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.8.0/22
IPv6:
2001:df0:27b::/48
Signature Algorithm: sha256WithRSAEncryption
6a:12:b6:05:22:5b:69:9f:15:e7:71:84:33:89:2c:8d:a7:58:
4f:f6:a2:5d:b6:d8:0b:d1:65:8c:14:30:02:15:bd:f8:3c:6b:
34:fd:73:04:5f:f0:71:5e:4b:b6:9f:2c:fe:be:aa:fb:88:2b:
4d:01:cc:41:54:9c:f8:de:96:42:17:aa:4f:83:22:4a:10:d6:
4f:fd:30:6c:9d:66:65:ce:98:17:34:30:a0:24:5d:3b:e0:80:
9b:c2:d2:e9:2b:fb:13:d3:85:55:bb:5f:9e:da:58:ff:c3:15:
11:b4:a4:8f:1c:16:92:b2:8d:8d:8d:11:ec:d4:c4:ec:8b:28:
13:70:01:41:76:ae:c5:fb:df:38:41:03:11:b8:b0:64:e0:d1:
7e:f0:e6:c4:4b:14:3c:f6:0d:f6:06:9d:f2:e6:3b:36:27:99:
50:83:b4:84:e5:1a:b5:81:b7:c3:1a:ed:93:86:de:4b:03:a6:
ad:f0:7a:1b:6b:d5:e0:ff:53:70:1f:75:d4:eb:0c:81:18:aa:
a9:ce:20:e6:d6:14:32:0f:e5:f7:93:3e:b5:99:a4:44:d1:fb:
27:c3:3d:01:b1:3c:c2:e1:4b:1f:f3:46:cc:f6:db:3e:9c:af:
33:be:9b:01:fb:52:86:c9:64:80:e4:1e:6d:f8:01:e9:3d:7b:
73:fe:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org