Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/561FF8005C03415E4FBB365AC43A3BAA57B82416.cer
File: 561FF8005C03415E4FBB365AC43A3BAA57B82416.cer (raw, json)
Hash identifier: YYzsa0XGM8vQaZICKtaR23oZqlHf0NXLbapKO1gIhjo=
Subject key identifier: 56:1F:F8:00:5C:03:41:5E:4F:BB:36:5A:C4:3A:3B:AA:57:B8:24:16
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 173521705040EC3DE7A641C0FB2AF0E3B9AACB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/561FF8005C03415E4FBB365AC43A3BAA57B82416.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 14 Apr 2024 15:50:07 +0000
Certificate not after: Sun 13 Apr 2025 15:55:07 +0000
Subordinate resources: IP: 103.121.43.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:35:21:70:50:40:ec:3d:e7:a6:41:c0:fb:2a:f0:e3:b9:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Validity
Not Before: Apr 14 15:50:07 2024 GMT
Not After : Apr 13 15:55:07 2025 GMT
Subject: CN=561FF8005C03415E4FBB365AC43A3BAA57B82416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:6f:db:09:58:97:e2:b0:f1:48:65:ed:e6:
1b:d7:6f:a2:37:e4:1e:6e:e2:16:75:09:d4:7a:99:
28:08:e6:ec:da:71:1c:1f:30:02:77:ec:9a:d4:97:
b4:47:c4:fb:91:49:f4:25:bd:49:20:29:37:9a:ae:
7a:90:57:61:d2:0c:01:58:95:94:72:e2:d2:f1:19:
92:f0:86:07:0e:de:4d:19:1f:57:39:ff:a4:1a:87:
6b:56:b4:28:00:80:f3:e6:48:79:07:05:7f:ba:5a:
ab:e1:3e:52:ac:99:d5:e6:eb:8c:5c:de:5c:12:8b:
11:08:34:ca:43:14:cf:96:55:3b:51:a0:00:35:b7:
62:ac:ce:c9:a1:2e:5d:80:40:dc:f4:28:a6:8f:c1:
0d:28:c7:c8:87:6a:17:43:c3:db:a6:a7:5e:9a:69:
5b:84:cc:80:de:b0:dc:29:56:a7:bc:a8:9f:a9:9b:
b9:69:ac:2d:d5:31:14:d8:48:74:49:40:4c:f4:87:
9a:29:ba:e5:ea:c7:1a:d0:88:c1:c9:dc:d9:4c:f8:
d4:93:20:d3:af:27:94:33:9f:ac:e3:5f:d9:68:68:
b9:f4:33:ec:d5:f4:b3:49:c4:f7:cf:04:e3:b0:0b:
00:cc:c5:22:db:41:c5:8e:af:21:78:b3:29:3c:75:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
56:1F:F8:00:5C:03:41:5E:4F:BB:36:5A:C4:3A:3B:AA:57:B8:24:16
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/2/561FF8005C03415E4FBB365AC43A3BAA57B82416.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:80:7b:08:10:9f:39:b0:7f:17:d2:32:d3:42:57:bc:da:6e:
d5:31:db:9d:04:3b:37:08:ce:c3:38:f0:63:93:33:e1:58:e2:
12:03:e5:2f:aa:49:71:85:dd:b4:66:bb:91:cf:06:49:68:95:
06:af:1d:55:0a:0c:90:0c:f3:88:c9:53:94:ea:ea:7f:fc:ad:
4a:eb:23:62:17:8b:e1:5f:68:cb:d1:87:b1:da:59:e7:73:30:
72:02:db:1d:3e:e3:b3:60:c3:b3:3b:0a:d4:ed:12:b0:d8:b4:
4c:06:84:c1:2b:e3:d3:86:8a:6f:2b:ee:1c:b0:bb:73:82:81:
1e:df:95:ee:cc:9e:b2:ae:e9:19:53:78:ef:97:34:de:53:00:
6e:93:a7:25:69:14:58:ea:01:2a:4d:d8:c7:65:b2:78:c3:ef:
e9:21:4e:61:fa:37:ad:bc:d9:e2:1d:b8:50:1e:10:f3:17:73:
34:49:90:93:5c:a2:4b:38:45:84:78:38:c7:58:38:cd:de:bf:
b0:07:7a:b4:1c:21:70:e0:3d:39:13:00:5a:be:7c:4c:83:88:
42:3b:f7:c0:b9:32:3a:75:b2:5a:17:27:a3:40:4f:a9:9a:bd:
91:fe:91:ae:b1:b4:26:04:e9:2b:ca:f6:fc:5a:4e:ec:a1:bf:
5c:64:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:09:29 2024 by rpki-client on console-fra.rpki-client.org