![](/console.gif)
Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
File: 40C513034911811188EE6887BB01091E1FE7EE0D.cer (raw, json)
Hash identifier: V+RHtFGz4W54klJhX4WRqCC/qiJ0NQ5MLppsJdX3Pxc=
Subject key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 25FF80C9FDDAD630711B0664C68BD021675681AB
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
caRepository: rsync://rpki.co/repo/Simple/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Wed 25 Oct 2023 02:21:35 +0000
Certificate not after: Wed 23 Oct 2024 02:26:35 +0000
Subordinate resources: IP: 2a12:dd46:1000::/36
IP: 2a12:dd47:f200::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ff:80:c9:fd:da:d6:30:71:1b:06:64:c6:8b:d0:21:67:56:81:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 25 02:21:35 2023 GMT
Not After : Oct 23 02:26:35 2024 GMT
Subject: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f1:44:a3:16:26:5c:f9:49:43:8d:1f:51:77:
03:e6:ca:57:b7:ca:f3:7c:09:8e:28:f6:83:96:8b:
ad:0e:22:f1:6f:23:d9:9d:97:d4:a5:6f:68:24:82:
65:db:c2:86:c0:4f:6d:89:97:23:16:bd:31:32:32:
3e:f1:e1:be:d4:20:af:0e:88:e9:8c:b5:64:fb:32:
0f:8a:08:be:ff:ef:9b:dc:e2:48:97:aa:7a:71:88:
9d:1b:27:ea:93:51:69:11:b0:90:53:8a:e4:7e:f7:
f5:bb:7c:e5:17:dd:cf:1e:de:b3:0d:5b:53:69:2b:
a9:fe:d5:cd:47:f2:51:46:fa:0a:59:60:3d:e9:d6:
9f:e6:fa:f2:37:57:7c:27:25:2e:4a:f8:cc:4e:12:
73:63:f6:79:bb:3d:35:66:15:1b:53:5b:a8:32:ac:
e2:7b:fa:ae:ee:3a:b4:99:a1:1d:c1:df:d2:2b:29:
2c:09:cc:df:e3:6f:f2:b7:0b:7b:1b:cf:31:a5:fd:
04:a8:0e:50:71:e1:9f:9a:78:56:80:02:af:e6:72:
c5:17:9c:bc:7d:99:3d:99:6d:19:cf:99:df:e2:f7:
bf:5c:73:21:83:f6:8b:98:f9:6c:7d:00:d8:d2:e7:
44:b3:b0:0f:72:41:a7:3b:7e:8c:fe:cd:9f:75:e3:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Simple/1/
RPKI Manifest - URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd46:1000::/36
2a12:dd47:f200::/40
Signature Algorithm: sha256WithRSAEncryption
0b:69:b8:ab:77:63:e8:40:b3:7e:8d:33:c4:dc:cd:5d:96:3c:
c2:02:b7:95:8b:8d:ab:0b:01:b8:b9:28:51:74:43:07:53:ad:
01:4b:d8:e1:00:7c:c3:5a:b8:fe:88:73:f9:fd:4b:71:6b:2e:
fc:d3:dc:49:ff:eb:3d:a0:2d:c8:b7:cf:ab:10:94:ad:8a:59:
5e:0f:ba:ec:a6:9e:c6:82:2d:13:d1:4b:32:4f:31:6e:ab:c2:
66:e7:1c:41:3d:04:a1:34:53:55:8b:53:c0:c0:b3:75:1a:34:
3e:ac:c8:8a:92:bb:d5:35:e4:1e:69:22:39:cf:d6:bc:cd:99:
46:b6:f8:3d:dc:a6:1b:2d:95:a5:87:45:13:04:58:67:5d:38:
e0:65:10:27:79:d2:67:3d:5c:fd:99:e5:99:36:ab:61:e2:7a:
ec:ec:e4:0c:7c:59:a3:ec:52:60:c8:1d:e3:48:97:92:ff:ed:
8e:f4:bb:89:a9:67:6d:c0:a3:a7:9f:d0:b4:8b:34:68:9d:ad:
a0:0d:2f:04:cb:13:72:a0:75:46:a4:37:de:21:c5:73:d4:a2:
f7:50:5a:d6:95:81:1d:9e:b2:4a:6b:50:63:27:bc:6c:4f:63:
1e:e1:3b:ac:4e:f4:3e:36:b0:83:d5:80:a6:52:8e:15:3d:6b:
cc:25:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:53 2025 by rpki-client