Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
File: 4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer (raw, json)
Hash identifier: 9jvyjG8+3umixrPaKVyFjWx24DB4la/LK7wbj0k9lNY=
Subject key identifier: 4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 25B6D0801B08AF79437ED4A7DB90B067564DA193
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 26 Jan 2025 12:18:43 +0000
Certificate not after: Sun 25 Jan 2026 12:23:43 +0000
Subordinate resources: IP: 2a09:54c7::/32
IP: 2a0a:6044:6400::/40
IP: 2a0a:6044:aa10::/48
IP: 2a0a:6044:c110::/44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b6:d0:80:1b:08:af:79:43:7e:d4:a7:db:90:b0:67:56:4d:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jan 26 12:18:43 2025 GMT
Not After : Jan 25 12:23:43 2026 GMT
Subject: CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:01:d0:88:d8:c0:b3:8d:b2:6c:94:42:fc:
b0:67:cd:a2:79:e3:40:6e:4e:6a:4c:26:73:eb:35:
05:86:61:1c:ed:f0:26:7f:ec:68:6b:86:a4:bd:7c:
0a:ee:00:d4:d2:4d:1a:ee:4b:4c:39:89:8a:17:8a:
1a:8a:ea:07:65:1e:1a:1c:c8:53:38:e6:93:a7:e8:
1a:5f:22:11:0f:95:ef:2b:54:62:fe:c6:cd:a2:da:
bd:7d:8f:ce:d0:1e:72:c2:f2:da:2c:cd:da:e9:d4:
e3:c9:07:4f:61:43:bb:2f:7f:e2:8a:e3:13:8d:90:
3b:0c:0f:08:c3:cf:c1:47:91:05:d0:5d:9c:f3:74:
1d:62:71:ab:3d:8f:96:73:9a:2e:00:3a:1d:ec:c0:
9c:60:e3:1a:d2:64:91:f2:bf:bc:62:e4:fb:c5:2d:
5b:ba:f7:fe:a1:79:8b:47:51:fa:b7:52:42:c7:57:
4b:03:05:9a:b4:ca:89:0d:ad:32:0d:a0:3f:da:92:
1e:93:25:ea:14:d8:78:07:c1:4f:2f:ef:9b:9b:79:
3d:7c:3b:81:e6:a5:27:72:1d:ea:b7:98:c7:fd:57:
fa:db:91:04:6b:e0:57:a9:3c:4f:e4:af:5c:18:96:
eb:0d:03:14:74:12:6d:d9:71:17:a8:93:3c:62:b9:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7::/32
2a0a:6044:6400::/40
2a0a:6044:aa10::/48
2a0a:6044:c110::/44
Signature Algorithm: sha256WithRSAEncryption
71:47:2f:15:9b:3c:43:28:df:24:3b:bc:98:33:b8:b0:75:43:
85:a0:5a:f6:fa:ae:5a:ef:2b:90:db:c9:17:62:de:75:a8:de:
55:df:14:0f:2f:33:05:22:e8:84:06:c8:b6:13:38:f2:e1:be:
2f:80:2d:01:7c:b3:68:1d:0e:92:48:3d:fe:a7:e5:12:ed:e6:
90:b8:60:0c:c7:2d:36:9d:34:e7:47:c0:97:e0:cc:c2:04:1e:
ea:43:39:42:6f:94:93:f8:1b:f9:de:5d:74:05:8d:50:33:af:
db:5b:28:52:65:22:1d:e0:e4:36:82:e0:08:d1:35:df:75:d0:
a5:4a:f3:2a:ee:42:4d:5f:8c:ab:7d:f2:f0:1e:26:62:ba:c2:
38:7b:24:79:5e:33:8b:b1:b3:76:66:db:29:64:40:b7:30:1f:
94:b9:9c:c2:cb:95:1b:fb:00:f0:71:61:73:87:bf:64:bb:e6:
ea:11:a2:59:a2:20:8b:6d:9e:e6:91:76:c9:36:d1:f5:39:92:
5d:27:46:0f:5a:01:9d:9d:ba:e0:ff:ac:45:05:16:6b:78:27:
26:16:d3:43:5a:46:7d:af:5e:da:96:98:07:53:44:64:93:f3:
c6:32:47:f1:e8:1e:e6:61:24:35:cf:eb:22:50:51:a0:21:09:
80:90:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:31 2025 by rpki-client