![](/console.gif)
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer
File: 503177A5FC39DD005C41B770207D6705510713A8.cer (raw, json)
Hash identifier: rwLgrzGZFEZB+0KNN7Kh5MLnIVlajghAgXRI0yRpM8M=
Subject key identifier: 50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Certificate issuer: /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial: 389D3D3F447DB921F383D89DA3C871225762BF28
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 22 Jun 2024 02:46:20 +0000
Certificate not after: Sat 21 Jun 2025 02:51:20 +0000
Subordinate resources: IP: 2a12:dd47:8400::/45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:9d:3d:3f:44:7d:b9:21:f3:83:d8:9d:a3:c8:71:22:57:62:bf:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Validity
Not Before: Jun 22 02:46:20 2024 GMT
Not After : Jun 21 02:51:20 2025 GMT
Subject: CN=503177A5FC39DD005C41B770207D6705510713A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:de:18:83:6d:21:a9:e5:82:99:67:81:59:
59:f5:52:27:cf:d8:15:38:c7:b1:75:53:2f:19:2e:
88:87:7f:8c:9e:00:16:0f:d6:84:01:bf:4d:f2:d1:
0d:68:b0:58:c3:2c:84:d6:63:f7:84:38:8e:13:bd:
b3:11:e0:e6:17:59:2e:a6:70:67:53:e9:24:a1:93:
5d:52:70:83:a7:6e:a3:c2:b4:66:b0:20:e4:6c:42:
f4:54:03:d1:c1:54:e3:25:a2:39:50:67:b5:2a:8a:
c3:70:c6:4e:9d:b2:73:02:c1:02:5d:f8:b7:32:22:
ff:b9:05:91:48:e4:1f:5c:37:a0:2e:40:8c:85:28:
ef:df:cf:f1:40:1d:e3:83:f0:b3:0c:3f:15:12:bb:
fa:8b:47:e6:d1:c7:4a:ab:5b:c5:62:89:ef:35:61:
bf:94:58:80:10:a4:85:48:2d:48:dd:00:3d:ac:2d:
69:39:57:80:8d:92:43:5e:1e:47:92:76:0b:2c:4b:
68:fa:28:d5:14:08:9b:20:fc:93:04:3d:ef:c0:34:
20:9d:35:e6:16:c0:38:2e:4f:3d:80:a4:f7:29:fc:
9c:d9:65:57:2e:9b:e2:ce:df:28:6c:19:a9:12:8d:
17:92:f5:cf:e0:23:a7:a9:c0:c0:7c:cd:d8:cd:65:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8
X509v3 Authority Key Identifier:
keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8400::/45
Signature Algorithm: sha256WithRSAEncryption
2f:d0:c4:fc:b2:fb:f7:2b:90:3d:19:2b:3d:fd:88:c3:6d:50:
22:f0:5d:0c:a5:e0:44:ea:b1:99:d6:18:55:0f:15:c2:c0:49:
e5:dd:d2:dd:9f:9d:f5:70:98:48:a6:f8:72:3b:8e:dd:08:da:
43:68:ea:d4:bd:e7:79:2a:e3:ad:45:b0:8e:07:e5:10:fb:19:
fc:25:e7:de:12:d7:b0:23:27:93:dc:3c:29:c8:7b:c4:83:a4:
8a:f9:60:71:cc:d4:6c:9e:a7:9b:61:4d:40:7f:fc:e2:95:83:
87:9e:68:78:a7:da:9a:aa:b1:2d:f3:18:c4:0b:99:0e:49:f6:
77:d5:7e:60:1e:fe:21:7e:09:4c:bf:8e:18:55:fa:be:6e:ea:
14:4b:27:d5:2c:cf:0e:d5:bf:24:d4:c0:bc:e5:96:3d:c3:d7:
f4:d8:21:0d:44:70:2c:db:54:d8:34:21:de:32:4e:c5:97:87:
f3:31:3e:8c:7f:6c:55:ae:bc:ca:62:9f:c3:7a:46:63:2c:20:
c7:02:62:51:9c:a4:6a:93:41:e7:8b:15:bb:ea:63:30:c9:bd:
5a:e4:85:83:72:69:4c:87:1a:40:02:e2:6d:5e:7e:6c:0e:64:
7e:b5:4d:a8:19:62:b0:a5:31:69:52:ea:e0:a3:99:29:c5:ac:
fd:1d:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:01 2025 by rpki-client