Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4e3uRiX802tWgFQnEKXicsg6_8.cer
File: i4e3uRiX802tWgFQnEKXicsg6_8.cer (raw, json)
Hash identifier: vZsiDL8zXs8/igmgOTHmFyqWS3HQp3g35F1hkEHF6/Q=
Subject key identifier: 8B:87:B7:B9:18:97:F3:4D:AD:5A:01:50:9C:42:97:89:CB:20:EB:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01841D05F09CB24BE2DACB54FA6EBFC305CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-2/0/8B87B7B91897F34DAD5A01509C429789CB20EBFF.mft
caRepository: rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-2/0
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Fri 28 Oct 2022 05:17:19 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.8.203.0/24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:05:f0:9c:b2:4b:e2:da:cb:54:fa:6e:bf:c3:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 28 05:17:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b87b7b91897f34dad5a01509c429789cb20ebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:2d:01:82:5f:97:39:4f:3f:94:da:42:f5:
cf:06:af:08:a1:2d:57:db:65:8a:6d:b1:e1:47:41:
6c:56:28:d3:fe:f6:f3:6f:fa:a7:7a:0e:cb:b5:9a:
5b:5f:4c:fb:5a:5f:74:ff:5d:e6:b2:41:11:9d:35:
a3:d3:96:ad:f4:a1:fa:4c:c3:49:e8:30:47:35:ee:
79:5b:70:e8:d7:e0:96:3f:57:25:fa:a1:98:93:4c:
a7:c7:2a:f5:de:e5:d9:c8:2e:d1:c5:3d:f1:0c:05:
cf:5d:67:07:4b:7b:d3:47:3a:cc:88:5a:e8:cb:12:
3c:56:84:65:15:c8:2b:d9:44:7e:6b:e2:c1:e9:97:
d7:1e:69:b9:b2:c7:16:9f:6d:7b:92:aa:d9:be:8c:
4c:35:92:92:6e:01:49:38:63:f7:a8:eb:46:70:48:
ea:24:c1:b0:7f:0f:34:c0:87:67:ff:73:68:45:0f:
99:f0:e6:a5:5f:00:49:2c:6d:d9:23:e2:25:9b:38:
e3:dd:8f:65:14:d4:51:cb:9e:62:75:48:8a:ce:d6:
08:1c:70:9b:e5:8b:1c:29:4a:c4:8e:88:b0:c0:1b:
34:04:3e:ed:f9:9e:87:e6:cc:38:4d:21:1c:e3:7e:
db:e8:8b:f2:50:27:4a:e4:a1:de:1f:30:8a:23:fc:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:B7:B9:18:97:F3:4D:AD:5A:01:50:9C:42:97:89:CB:20:EB:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-2/0
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-2/0/8B87B7B91897F34DAD5A01509C429789CB20EBFF.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ba:53:2c:5a:7c:21:31:ba:80:c4:c1:a1:23:3d:48:bd:e4:
a2:a7:1c:e3:a4:2c:a8:09:e0:9e:a0:82:22:da:bd:ae:02:6b:
60:7a:ab:0f:15:20:58:32:c2:19:44:72:c4:49:9f:92:69:b3:
f4:a0:9e:fd:3d:ed:4d:e3:5f:c3:66:ae:ae:b3:10:d9:38:ff:
01:a6:aa:90:b4:f4:54:dd:2e:c9:4c:b8:0f:fc:92:e1:81:dd:
46:a7:f1:30:00:50:b5:37:cb:81:79:a0:e0:73:84:2e:8b:c4:
ef:d0:f8:38:19:13:a4:4a:6d:7e:61:86:2c:b6:16:d1:e2:73:
60:65:98:86:ea:59:a3:9f:69:4d:74:4b:87:38:06:19:7d:d2:
ae:0d:c7:26:a7:1d:af:b7:a1:0c:eb:5c:8c:02:d0:95:b3:17:
d7:a9:17:32:86:7a:4e:20:8e:bc:a7:1f:fa:88:b2:94:b7:75:
9e:22:e4:e3:c4:9a:1a:e7:06:ad:79:11:48:b8:67:f4:96:29:
e6:6e:c3:b1:35:26:0a:4e:3f:1d:d4:a9:70:75:a5:cc:dc:98:
31:db:f4:dc:86:a5:15:8a:81:40:57:e5:f5:cd:17:97:34:0d:
d8:59:ae:14:1e:7d:9d:d5:96:ae:86:b3:1e:7b:c8:ea:30:d3:
b0:74:7d:c5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAYQdBfCcskvi2stU+m6/wwXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMDI4MDUxNzE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yjg3YjdiOTE4OTdmMzRkYWQ1YTAxNTA5YzQyOTc4OWNiMjBlYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbgtAYJflzlPP5TaQvXPBq8IoS1X
22WKbbHhR0FsVijT/vbzb/qneg7LtZpbX0z7Wl90/13mskERnTWj05at9KH6TMNJ
6DBHNe55W3Do1+CWP1cl+qGYk0ynxyr13uXZyC7RxT3xDAXPXWcHS3vTRzrMiFro
yxI8VoRlFcgr2UR+a+LB6ZfXHmm5sscWn217kqrZvoxMNZKSbgFJOGP3qOtGcEjq
JMGwfw80wIdn/3NoRQ+Z8OalXwBJLG3ZI+Ilmzjj3Y9lFNRRy55idUiKztYIHHCb
5YscKUrEjoiwwBs0BD7t+Z6H5sw4TSEc437b6IvyUCdK5KHeHzCKI/yd8QIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFIuHt7kYl/NNrVoBUJxCl4nLIOv/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggErBggrBgEFBQcBCwSCAR0wggEZMFUGCCsGAQUFBzAFhkly
c3luYzovL3IubWFnZWxsYW4uaXB4by5jb20vcmVwby83YmJhYTVkMC1hNTBjLTQx
NzgtODU3My04MDQ1MDQ4YjdiYzMtMi8wMIGCBggrBgEFBQcwCoZ2cnN5bmM6Ly9y
Lm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2JiYWE1ZDAtYTUwYy00MTc4LTg1NzMt
ODA0NTA0OGI3YmMzLTIvMC84Qjg3QjdCOTE4OTdGMzREQUQ1QTAxNTA5QzQyOTc4
OUNCMjBFQkZGLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6Ly9tYWdlbGxhbi5pcHhv
LmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5
bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3
RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBCMswDQYJKoZIhvcNAQELBQAD
ggEBAKC6UyxafCExuoDEwaEjPUi95KKnHOOkLKgJ4J6ggiLava4Ca2B6qw8VIFgy
whlEcsRJn5Jps/Sgnv097U3jX8Nmrq6zENk4/wGmqpC09FTdLslMuA/8kuGB3Uan
8TAAULU3y4F5oOBzhC6LxO/Q+DgZE6RKbX5hhiy2FtHic2BlmIbqWaOfaU10S4c4
Bhl90q4NxyanHa+3oQzrXIwC0JWzF9epFzKGek4gjrynH/qIspS3dZ4i5OPEmhrn
Bq15EUi4Z/SWKeZuw7E1JgpOPx3UqXB1pczcmDHb9NyGpRWKgUBX5fXNF5c0DdhZ
rhQefZ3Vlq6Gsx57yOow07B0fcU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:38 2024 by rpki-client on console-fra.rpki-client.org