Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.cer
File: D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.cer (raw, json)
Hash identifier: m1hvJ1+DTaaIwGFIs9JzyI5nUysnneIsu9uw/lj8X/M=
Subject key identifier: D3:A3:D8:EF:7F:C4:8B:73:BF:AD:33:2A:34:76:A7:01:0F:22:0B:EF
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 018B38209AE219522610593180186820B3CCD142
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 20 Dec 2024 09:20:19 +0000
Certificate not after: Fri 19 Dec 2025 09:25:19 +0000
Subordinate resources: IP: 2a0b:4e07:1000::/37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:20:9a:e2:19:52:26:10:59:31:80:18:68:20:b3:cc:d1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Dec 20 09:20:19 2024 GMT
Not After : Dec 19 09:25:19 2025 GMT
Subject: CN=D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:62:e9:82:c1:ff:58:4f:e9:61:16:90:e0:
63:4f:33:b3:97:36:3f:e9:8b:77:d3:25:45:c5:12:
44:2e:d4:d6:ee:1f:c5:1d:62:c7:13:f2:a0:c4:40:
34:2b:51:24:d2:a0:bd:00:89:c6:b4:c5:81:b1:64:
fc:5b:7f:44:54:e5:b7:47:42:34:ae:e8:0f:ed:0c:
12:bc:87:96:82:57:57:03:e2:5b:05:ef:26:b6:1a:
41:8b:15:b8:74:06:82:39:ce:bc:d1:14:01:59:59:
34:5a:70:74:26:a7:65:f6:65:2a:6c:cb:3c:a2:0d:
0b:17:a2:10:2b:a3:0c:eb:e8:d7:27:f0:9c:be:9b:
08:9d:d4:ac:26:fb:56:48:96:1b:33:5f:16:50:18:
f4:6d:21:dc:e3:12:0c:5b:d7:e1:24:7c:c9:39:fa:
ac:14:38:14:15:35:b3:27:c3:b8:c2:67:3d:c9:58:
38:25:c7:df:00:48:68:21:1a:b9:d5:bc:a9:b8:2e:
8f:18:22:72:b8:ca:2f:04:df:3f:07:20:89:46:49:
a2:58:59:81:52:7c:44:b5:69:0c:a8:bc:e7:e6:d4:
e3:da:cd:df:f5:96:ad:dc:9c:32:99:a9:cc:bd:2c:
89:2b:92:70:2a:8c:23:33:ed:e3:45:52:39:f8:c0:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:A3:D8:EF:7F:C4:8B:73:BF:AD:33:2A:34:76:A7:01:0F:22:0B:EF
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/1/D3A3D8EF7FC48B73BFAD332A3476A7010F220BEF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:1000::/37
Signature Algorithm: sha256WithRSAEncryption
21:91:69:d5:91:b4:c9:40:79:f5:01:cf:14:d0:0f:ea:31:16:
58:39:07:01:f1:bc:81:f2:8c:ba:86:90:8d:71:03:fa:bd:d0:
ca:9a:19:54:2a:f3:70:5f:76:e5:ea:7f:84:e7:10:b0:4b:8d:
c0:6c:42:cb:fb:dc:e4:b1:5c:36:ed:bb:fc:78:d7:8a:6a:42:
24:dd:d0:d8:dd:91:12:e2:ee:e2:5b:17:7e:cb:17:d8:07:11:
ee:e9:01:5a:58:38:b9:4c:9a:f7:74:f7:83:f5:cf:19:fe:d8:
bd:73:50:97:a9:bf:cb:64:b1:9f:48:81:c8:cd:1a:d9:6a:63:
71:d3:b0:83:6f:2d:95:9f:c1:39:03:91:b3:49:d4:e8:a5:d7:
ab:ff:fd:36:76:83:ae:5e:98:7f:03:27:6e:2e:96:f8:d0:54:
6a:1e:da:12:18:55:c2:77:f5:24:d2:f1:b8:a5:36:ef:e6:cc:
a3:f0:96:e8:a5:a1:23:19:69:31:cd:02:ef:72:a6:54:17:e5:
a8:99:02:a7:e9:d5:2f:a3:02:56:f5:4f:bd:1d:e6:62:79:ab:
6f:a0:97:b8:29:0b:a6:12:5b:72:9c:40:74:d7:28:c7:f4:ae:
26:2d:d5:5c:93:fe:cc:79:fe:0f:81:b8:8f:3e:69:65:94:4e:
61:70:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:35 2025 by rpki-client