Certificate
$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/2A35A42C4E280493D11A6BA8DA69A3C0188DF0B5.cer
File: 2A35A42C4E280493D11A6BA8DA69A3C0188DF0B5.cer (raw, json)
Hash identifier: Rz3yolzjfC2rrA6vtDb94ab1VjpKEAxZHPR9XwI0IJc=
Subject key identifier: 2A:35:A4:2C:4E:28:04:93:D1:1A:6B:A8:DA:69:A3:C0:18:8D:F0:B5
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Certificate issuer: /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial: 53A415A15A663D39D667E3ACF91C3C2FA94B2ECD
Authority info access: rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Manifest: rsync://rpki.netiface.net/repo/20plays/0/2A35A42C4E280493D11A6BA8DA69A3C0188DF0B5.mft
caRepository: rsync://rpki.netiface.net/repo/20plays/0/
Notify URL: https://rpki.netiface.net/rrdp/notification.xml
Certificate not before: Mon 08 Jan 2024 20:54:33 +0000
Certificate not after: Mon 06 Jan 2025 20:59:33 +0000
Subordinate resources: IP: 2a13:df87:2d00::/40
IP: 2a13:df87:b610::/44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a4:15:a1:5a:66:3d:39:d6:67:e3:ac:f9:1c:3c:2f:a9:4b:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Validity
Not Before: Jan 8 20:54:33 2024 GMT
Not After : Jan 6 20:59:33 2025 GMT
Subject: CN=2A35A42C4E280493D11A6BA8DA69A3C0188DF0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:59:c4:aa:75:3b:93:cc:ed:9c:0f:c7:5b:
24:72:eb:92:7e:fb:c0:58:ea:d6:e9:65:38:8e:3a:
f0:42:7c:0f:75:49:cf:9d:61:f3:39:4d:ad:1f:71:
00:a8:5b:ea:f5:0b:c3:db:e9:ea:e4:81:f9:a4:60:
c4:b8:3d:3c:9b:41:31:fd:85:60:c7:3a:b2:67:ed:
db:a5:69:d4:de:d4:c0:98:94:52:82:ea:e5:20:ee:
24:bd:26:30:ff:c0:a4:9e:fd:64:9b:9e:7e:86:b4:
77:c1:88:96:68:c6:5e:c9:8e:5b:8e:61:0b:e6:2f:
17:bd:27:c3:14:44:77:bf:d1:ad:9a:fa:ea:0d:ba:
37:a2:ca:28:b1:7b:b8:c4:51:26:fa:32:a6:6d:6c:
ef:e3:80:44:46:20:2e:fb:2e:2a:26:f4:d3:ea:de:
c8:91:75:c4:9a:f6:84:b0:9f:14:12:81:ae:23:63:
91:05:5e:c1:d3:c7:a0:60:46:81:5a:0f:dd:7c:ba:
27:4a:b8:a6:e8:f8:dd:9d:04:08:76:d5:38:9b:6e:
ac:db:cd:98:62:80:ca:fd:5d:40:01:90:c2:90:5c:
a3:a2:36:b8:b4:55:c3:ef:69:05:f3:04:a6:f5:da:
56:49:bf:fd:17:1a:2a:d7:fd:ad:f1:e8:47:bc:fe:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:35:A4:2C:4E:28:04:93:D1:1A:6B:A8:DA:69:A3:C0:18:8D:F0:B5
X509v3 Authority Key Identifier:
keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.netiface.net/repo/20plays/0/
RPKI Manifest - URI:rsync://rpki.netiface.net/repo/20plays/0/2A35A42C4E280493D11A6BA8DA69A3C0188DF0B5.mft
RPKI Notify - URI:https://rpki.netiface.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:2d00::/40
2a13:df87:b610::/44
Signature Algorithm: sha256WithRSAEncryption
00:f4:c0:9c:97:78:80:be:6c:7b:a8:94:16:5a:15:0e:39:e6:
84:1a:7e:de:2e:74:a8:7e:8e:16:f8:93:fc:9b:68:79:24:5b:
2b:ef:24:9d:f8:9b:bd:e0:e2:fd:cc:21:1f:a1:ab:8d:53:bd:
3d:ca:c1:a3:57:37:41:1e:2e:df:cb:7a:13:fa:89:8c:62:92:
9e:cf:f2:c6:9b:19:ff:ac:3d:40:fe:b2:7e:a2:61:0b:d1:08:
8a:e0:c2:5b:56:9e:01:47:91:16:bd:b1:9b:5c:fe:b7:18:26:
01:10:b2:e9:b3:2b:79:ed:98:30:11:23:d7:bd:8f:24:bd:06:
3f:7f:80:f6:58:d0:a9:1c:b3:5e:fc:42:e0:93:31:43:2e:33:
ec:8a:d7:57:cd:f5:b6:11:28:c5:9f:46:84:39:de:98:10:06:
84:09:f0:ae:86:ad:ef:8c:c9:fd:1d:b8:6f:c4:7e:ad:e4:89:
82:e4:95:f3:3c:75:ec:76:e5:f4:5f:7e:a6:35:5a:3b:1a:d2:
69:f0:57:91:e1:78:31:b0:d2:b3:11:1b:ae:1e:99:4c:e2:23:
10:69:3d:99:f0:20:e8:2f:2b:d7:b1:86:44:54:05:b9:fa:33:
4c:2c:ee:65:81:9f:45:f5:5d:a0:f5:43:df:7a:07:a4:b2:77:
74:10:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 16:12:44 2024 by rpki-client on console-fra.rpki-client.org