Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rbf0QlPFf_087Vjug10cIZ8ifWw.cer
File: Rbf0QlPFf_087Vjug10cIZ8ifWw.cer (raw, json)
Hash identifier: PXdBkgPH9t3IRP1Nq19u8Men0Fj09z5Oiv5JMHM0igc=
Subject key identifier: 45:B7:F4:42:53:C5:7F:FD:3C:ED:58:EE:83:5D:1C:21:9F:22:7D:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186020C8BC77AFE4110F00A93B9D9634125
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/Rbf0QlPFf_087Vjug10cIZ8ifWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 30 Jan 2023 09:40:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 88.218.35.0/24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:0c:8b:c7:7a:fe:41:10:f0:0a:93:b9:d9:63:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 09:40:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45b7f44253c57ffd3ced58ee835d1c219f227d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:1f:26:6d:98:70:ae:a8:6e:24:24:82:7e:
55:ff:64:fa:80:31:05:38:7b:df:ab:e5:51:60:aa:
55:9a:70:20:84:39:1b:33:1d:42:53:24:54:c5:4d:
78:c3:61:79:bd:6d:95:55:2e:33:94:5c:9a:10:28:
db:9c:f4:6d:97:d6:bf:b9:72:46:44:6a:e5:2b:b9:
b5:91:9d:55:31:b7:a4:ae:0a:09:b9:bd:3d:83:6b:
76:0f:c2:de:99:00:5f:e6:ff:a5:15:b0:e0:2d:a7:
81:f3:aa:7c:bf:52:70:1c:77:de:ff:8e:96:6d:c8:
29:a4:5a:f8:d2:f8:8e:c0:25:d0:d5:de:c4:e6:d7:
1e:c4:f4:80:e6:94:b8:35:8f:41:5d:c5:89:84:a0:
02:5c:73:ae:6c:32:d0:88:2b:ad:8e:ba:d6:3e:cd:
0e:70:29:ad:15:86:04:cc:36:f3:2a:1f:c7:e4:7f:
91:f3:5b:04:04:45:29:f3:72:b4:d5:da:43:61:76:
55:11:ed:75:37:91:23:27:f8:27:3f:54:fc:39:75:
be:99:19:8e:de:ac:88:01:39:2c:06:57:e6:0c:75:
aa:48:8d:e6:16:a6:87:f5:a1:69:40:8e:6d:d0:2e:
2e:d0:9a:ad:c0:e7:1c:bb:cb:6f:93:e2:f9:a8:11:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B7:F4:42:53:C5:7F:FD:3C:ED:58:EE:83:5D:1C:21:9F:22:7D:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/Rbf0QlPFf_087Vjug10cIZ8ifWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.35.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5c:46:47:dd:6c:da:8d:2f:83:ba:fc:f7:22:0c:8f:b6:59:
c1:ed:f1:e6:68:0a:5b:66:ba:f8:12:be:20:b0:10:fb:aa:84:
b4:15:90:19:9b:4e:4a:66:17:74:06:0c:b7:67:5e:86:ab:a3:
3e:c6:fc:a1:f6:96:93:2d:39:f4:0d:12:85:61:28:60:3b:31:
1c:31:6c:d3:c3:15:f1:83:47:66:e3:ab:7c:7a:47:b9:48:2c:
db:7f:a0:56:53:e2:80:34:7c:8d:d8:e7:93:45:f9:6a:91:99:
6e:ad:75:ab:ed:05:35:58:61:13:cd:bb:41:af:69:d9:77:e6:
40:ad:76:68:97:01:2b:4f:1e:f5:c8:aa:7b:e7:fb:ab:47:4d:
bf:cf:3c:99:de:20:9e:04:64:a3:4d:17:81:f4:eb:12:40:68:
20:af:1b:7c:fe:36:71:33:fe:39:15:9b:8a:31:c8:3a:48:cc:
50:99:c2:74:6f:73:a8:da:18:aa:c1:47:ac:75:10:a9:77:f8:
48:d2:58:ce:6d:f9:92:da:55:8b:70:12:ce:76:e6:62:8e:f8:
fb:b9:04:fb:7d:57:12:69:da:a4:f0:01:9c:78:73:62:9c:e7:
1b:4a:fb:cc:89:f3:ed:06:a2:2e:d5:a4:df:49:d8:16:38:93:
05:4c:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-fra.rpki-client.org