![](/console.gif)
Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
File: 51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer (raw, json)
Hash identifier: /1Q6+092fqcDu/dKpNzE6mkMCyU/l5hhquYHU79H1Ok=
Subject key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 4991FB518E3E097E2D0094440F1CE70CF44518F1
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
caRepository: rsync://rpki.co/repo/Pong/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Tue 23 Apr 2024 02:59:18 +0000
Certificate not after: Tue 22 Apr 2025 03:04:18 +0000
Subordinate resources: IP: 2a12:dd47:5200::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:91:fb:51:8e:3e:09:7e:2d:00:94:44:0f:1c:e7:0c:f4:45:18:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 23 02:59:18 2024 GMT
Not After : Apr 22 03:04:18 2025 GMT
Subject: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:d1:1a:f0:73:a2:c9:ad:20:f6:c4:5c:86:
51:f1:f0:10:0c:d9:27:73:c5:38:9d:d1:22:2f:0d:
c5:db:ba:a1:df:50:8e:3e:a7:9e:4c:4a:61:ef:35:
77:d3:19:16:51:07:33:97:af:c5:fe:e6:04:0b:2d:
39:a8:01:84:8d:0f:b5:f0:34:17:61:70:cd:8a:1f:
b8:cb:5e:85:9b:73:40:7e:2e:97:c3:5a:bd:7a:3c:
b4:57:94:c3:1f:0c:09:bd:38:e7:5c:1b:2e:85:a3:
26:59:0c:65:29:1c:c0:eb:be:a2:db:88:ae:23:75:
8e:32:bb:21:d8:1f:92:34:93:e3:1b:91:4d:e4:9c:
72:1b:43:38:27:0c:89:a6:b4:7e:64:40:59:28:c9:
9e:29:cb:8a:a1:6c:dc:a7:8c:28:44:bb:21:a8:09:
3b:32:eb:f0:a6:9b:f4:57:5c:e6:80:ed:ba:28:e5:
b1:d3:15:b6:94:f0:6c:cf:48:7a:bc:89:19:d4:b4:
ab:e9:44:84:30:8d:92:51:56:bc:e4:66:ae:9e:57:
ec:a1:71:bb:ab:f8:62:72:66:49:3b:9d:0d:fd:74:
1f:34:e8:e5:59:08:32:06:3d:c6:aa:ac:2e:78:06:
d9:2e:41:a0:50:4a:ba:cd:ec:5c:55:0a:79:05:ea:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Pong/1/
RPKI Manifest - URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:5200::/40
Signature Algorithm: sha256WithRSAEncryption
40:b2:bc:ac:c5:4d:d7:ee:13:b0:4f:42:a5:e2:60:aa:c9:1e:
5a:17:12:40:1c:57:c1:d0:8e:5b:17:de:e2:88:57:80:65:ae:
89:3a:2e:4d:4a:f1:90:19:55:49:91:94:f1:bf:43:c4:e0:ae:
56:11:0b:9f:64:af:87:46:a2:b6:7a:8d:c1:f3:ac:61:36:4b:
4f:4a:ed:b6:dd:fb:47:c8:a4:c3:96:45:99:5b:2e:50:2f:08:
9b:97:cf:ff:cd:7d:29:39:5f:78:bb:82:ab:f9:7f:11:30:c2:
24:46:86:24:d5:92:57:b0:5c:16:3a:95:73:81:21:61:53:35:
32:a9:62:f9:e7:b8:ed:90:50:04:9c:4a:01:78:e2:80:37:53:
9c:71:74:2d:07:00:88:af:f0:bf:0d:79:13:c8:5e:44:b7:a2:
fb:29:19:5b:2e:0b:8b:22:e2:74:8a:03:1a:f1:8b:b8:4e:69:
7f:38:9e:ca:64:23:45:ec:db:cb:06:90:94:fc:be:19:e1:26:
f7:03:7a:22:50:59:fe:f4:f9:3e:ef:f7:38:f9:a4:c1:dc:c1:
58:e6:f9:29:d2:49:53:2e:fd:be:11:b3:f0:a8:c6:48:63:e4:
79:e4:64:c0:1d:70:7c:ad:27:b9:ae:ee:c0:a6:ad:aa:82:bb:
b7:94:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:28 2025 by rpki-client