
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.cer
File: E472D821C14C9E0738F632D7A74DF516C446A5E2.cer (raw, json)
Hash identifier: 6QzeDJx0F0YovTdZ69xdjv1Kfw9WF9y8ImlHeUjuuGg=
Subject key identifier: E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 48550888B0420E438D3BAD8E9EB4F32970A0288A
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 30 Sep 2024 19:29:12 +0000
Certificate not after: Mon 29 Sep 2025 19:34:12 +0000
Subordinate resources: IP: 2a06:1281:7000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:55:08:88:b0:42:0e:43:8d:3b:ad:8e:9e:b4:f3:29:70:a0:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Sep 30 19:29:12 2024 GMT
Not After : Sep 29 19:34:12 2025 GMT
Subject: CN=E472D821C14C9E0738F632D7A74DF516C446A5E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:00:e5:09:42:2d:f7:da:cc:64:ff:22:1f:
9d:d5:a1:1d:74:9f:ac:ab:13:45:d0:10:b7:20:c0:
5b:e3:e1:4c:b6:3e:81:72:7d:34:c6:f9:82:1b:ac:
1a:96:05:91:f2:2c:59:ed:99:25:38:64:a3:35:51:
5c:6f:e0:6a:8b:34:21:3b:38:34:39:eb:f6:cb:67:
83:d0:81:6c:48:13:ce:78:ee:16:49:a3:b7:06:4d:
5b:d2:bd:89:08:f1:fd:ce:a4:d7:8e:eb:4f:c2:e3:
e0:7e:95:7e:97:ae:0a:fc:7f:ab:75:0b:2b:44:c0:
ce:f2:95:40:56:b0:92:99:74:fb:fa:a9:29:5c:03:
a3:23:1f:32:52:f1:5f:3f:75:03:36:2c:3f:f7:02:
c6:77:cb:c9:21:88:18:84:03:55:d1:47:2a:1f:24:
a5:23:53:b6:1f:08:f3:b4:43:49:3c:bd:aa:32:83:
0a:3a:fd:8a:a2:2a:52:a3:52:6b:29:86:5e:f2:1a:
ff:34:d6:ff:1d:93:6c:25:60:a5:a0:ef:22:1d:6d:
68:bd:d3:52:56:96:35:49:7d:b7:f3:05:3a:34:11:
d9:e0:c9:f9:16:24:d3:55:f3:11:bb:09:d7:fb:eb:
e6:ec:61:fa:23:6c:4e:ff:8b:ee:f7:be:b0:92:04:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E4:72:D8:21:C1:4C:9E:07:38:F6:32:D7:A7:4D:F5:16:C4:46:A5:E2
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/27e58e42-248e-4d88-a575-0b4696513001/0/E472D821C14C9E0738F632D7A74DF516C446A5E2.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:7000::/36
Signature Algorithm: sha256WithRSAEncryption
52:5f:c6:87:f1:9f:f8:ff:4f:39:85:0e:89:aa:66:1b:39:2c:
9a:38:35:fc:93:11:6d:90:b9:36:35:88:10:20:af:26:d5:7b:
61:14:f4:a3:97:89:ac:1b:1e:fe:76:f0:12:29:c3:85:1f:54:
a8:68:92:16:c5:0d:ae:b4:b7:50:e5:c7:4b:48:ec:8e:86:87:
e0:f9:d7:44:da:ad:ab:6a:94:89:51:31:ed:6d:fb:ae:65:46:
ed:99:03:8b:cf:9c:b9:c4:54:c0:e6:d2:3d:78:27:6d:af:38:
53:e8:06:84:ae:0e:56:55:5a:12:31:3f:b2:78:29:10:62:48:
8f:1e:d5:03:b9:e7:e1:96:49:2e:3f:90:e9:cc:20:fd:91:2e:
d2:83:c2:c6:84:2f:23:5e:9a:d0:2a:6c:29:aa:b8:8c:81:e0:
2d:f3:0d:7c:36:88:27:c9:1f:1e:37:68:2d:23:b4:47:2f:99:
2c:cf:9a:4f:1b:d1:3d:df:e6:86:64:17:ea:a9:2e:f7:ca:49:
9c:88:60:aa:fa:a3:54:1b:83:1a:ee:f9:87:98:6d:d1:b0:28:
00:de:f4:9f:fd:f6:96:db:c4:0f:7e:47:4e:ba:6f:c1:6a:e0:
88:94:4d:b1:ec:5c:c0:9d:60:0a:18:3d:20:4e:02:ae:ea:f8:
fa:4e:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:56 2025 by rpki-client