Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer
File: 1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.cer (raw, json)
Hash identifier: etQ8mA5CViBL5Ua686IiG3Xeg/mE3515NuD2tm5/9sw=
Subject key identifier: 17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 0A44BC554535BDF0E85103E3036F8C30091D6026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 29 Feb 2024 01:30:44 +0000
Certificate not after: Thu 27 Feb 2025 01:35:44 +0000
Subordinate resources: IP: 2a13:df80:9d00::/40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:44:bc:55:45:35:bd:f0:e8:51:03:e3:03:6f:8c:30:09:1d:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Feb 29 01:30:44 2024 GMT
Not After : Feb 27 01:35:44 2025 GMT
Subject: CN=1775F6FE3E8D1497058AFC5AB91A070A2ECF027C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:ce:3d:e0:c2:fc:a2:02:89:b5:99:6c:04:
b5:52:cc:c6:e8:cc:5b:7c:fb:9b:0a:26:32:3c:19:
56:ac:d3:af:3a:f4:1c:f0:0a:fd:de:e3:d9:d8:57:
a2:c1:d3:15:c1:53:ac:53:05:01:f3:f4:b2:da:71:
05:8e:4b:3a:cc:dd:67:97:f9:27:8f:09:8c:fe:55:
ca:1f:32:50:dc:25:fb:27:63:99:f9:46:4d:ab:85:
4b:a4:cb:7e:c0:51:68:ed:1a:5b:34:95:39:4a:9d:
c4:9b:19:62:51:02:38:67:b3:40:ae:56:c8:24:9b:
d3:93:7d:bb:be:f3:94:f1:9c:ca:e1:4e:dc:98:87:
6c:6d:5b:f5:c6:31:56:62:ec:e0:8a:c5:8e:0b:36:
ce:08:ba:c4:67:8c:40:ba:fa:33:85:5c:99:50:86:
e2:a2:74:e7:1b:ea:27:23:cc:11:eb:ff:74:3b:7e:
f1:cf:44:60:15:b0:87:ff:9a:c8:de:27:52:c0:04:
f6:e9:7b:68:6e:e6:8a:4c:eb:26:b6:bb:00:23:56:
ab:07:85:ea:04:85:91:21:ba:b3:29:16:87:01:34:
fa:28:89:dc:1c:34:87:35:ac:bd:c2:4c:e2:37:a6:
e5:ad:62:dc:ea:95:d6:b2:71:e3:7c:7f:cc:92:d4:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
17:75:F6:FE:3E:8D:14:97:05:8A:FC:5A:B9:1A:07:0A:2E:CF:02:7C
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/2/1775F6FE3E8D1497058AFC5AB91A070A2ECF027C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:9d00::/40
Signature Algorithm: sha256WithRSAEncryption
30:64:a0:f1:25:cb:ca:a5:a0:9c:a7:42:cd:96:3b:5f:b5:b8:
05:0d:50:e5:db:5a:c4:a7:2f:a3:35:03:70:56:6e:cf:31:6f:
a5:9b:d4:33:fa:1b:13:cf:5a:00:66:6a:fd:a2:67:bf:05:0c:
11:f5:50:72:63:c0:80:78:c1:90:eb:7a:38:aa:52:01:bb:67:
11:55:8a:8a:04:cd:70:05:c5:1a:f0:30:47:c7:c3:6b:63:94:
3f:34:fd:fa:5e:73:a3:99:8a:26:b0:11:2e:93:87:9a:57:fa:
25:f9:d0:9c:31:73:e4:d2:0e:b9:2f:85:22:ab:82:ea:3a:a1:
be:ea:bf:37:36:6d:03:4c:b0:58:4a:88:79:a9:db:08:3b:53:
ba:e1:5f:9a:b1:b6:a0:f4:7c:5d:8e:99:5f:27:fd:74:ac:b4:
f6:8a:b8:ab:e9:b0:da:5c:02:cc:28:f7:3c:59:86:b1:36:5c:
4d:ba:32:95:8e:ae:41:40:e5:8b:6e:7f:3e:22:6c:d7:19:7b:
b6:65:b5:e9:54:04:c0:75:af:1e:5a:b9:43:26:bb:a8:b8:c0:
2a:cf:ff:69:a5:ff:3a:65:9b:99:ea:36:9e:78:a2:84:d3:9c:
b9:09:e5:8c:a8:70:79:64:a7:67:8f:01:98:d0:c3:21:c4:11:
87:b6:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 15:21:40 2024 by rpki-client on console-ams.rpki-client.org