Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.cer
File: D3A0F880745420FB2B86A2D1C198849D8B7C676C.cer (raw, json)
Hash identifier: +2rbyWk1MYflPpmBVIc2zsO3EFQqyPg9kjeStLK9Sc4=
Subject key identifier: D3:A0:F8:80:74:54:20:FB:2B:86:A2:D1:C1:98:84:9D:8B:7C:67:6C
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Certificate issuer: /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial: 5E1C3AAB2453629DD2CA969001E4758199EC1DBF
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 28 Mar 2024 15:06:42 +0000
Certificate not after: Thu 27 Mar 2025 15:11:42 +0000
Subordinate resources: IP: 2a06:1283:b400::/38
IP: 2a06:1283:d800::/38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1c:3a:ab:24:53:62:9d:d2:ca:96:90:01:e4:75:81:99:ec:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
Validity
Not Before: Mar 28 15:06:42 2024 GMT
Not After : Mar 27 15:11:42 2025 GMT
Subject: CN=D3A0F880745420FB2B86A2D1C198849D8B7C676C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:58:d2:2f:fd:41:14:77:55:fd:41:e7:09:
c1:70:51:d3:6c:e2:fb:e8:eb:1b:50:02:2b:19:60:
5a:26:71:8c:cf:77:06:0a:ca:c5:28:36:3f:d2:4f:
1f:25:a5:e8:41:3f:5b:c3:05:50:ed:ec:97:4a:39:
66:20:0a:85:2c:60:dc:3a:6a:05:ae:39:38:a7:c2:
40:a4:aa:c9:8b:fe:f4:9b:1b:31:44:eb:21:b1:f7:
7d:60:71:4a:97:2e:f2:34:1d:b4:b1:1c:97:bb:86:
28:b1:da:7b:ff:a0:61:4d:8c:cb:c5:3f:06:16:db:
47:88:84:13:e0:41:db:0c:c5:90:cc:8d:ac:e3:39:
db:d5:40:a3:28:88:e2:b1:f9:8a:b1:71:0c:77:32:
fb:01:90:49:95:c9:13:71:19:3b:06:70:ee:0d:84:
9b:1f:ce:b2:ee:ca:2c:b3:9a:3f:7e:78:7d:01:37:
90:24:bd:74:ef:74:b7:41:b9:b1:15:60:ef:a8:15:
2c:ab:37:3e:6a:eb:fc:22:5b:e3:dd:3a:da:e4:5c:
0a:51:85:d5:2a:76:6a:1c:59:3d:cf:ea:ec:e9:42:
63:c9:52:b5:60:01:b1:b2:bd:db:21:11:c0:e8:55:
0c:87:92:e2:87:0e:b0:b9:58:a3:27:d0:07:91:e4:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:A0:F8:80:74:54:20:FB:2B:86:A2:D1:C1:98:84:9D:8B:7C:67:6C
X509v3 Authority Key Identifier:
keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/2/D3A0F880745420FB2B86A2D1C198849D8B7C676C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:b400::/38
2a06:1283:d800::/38
Signature Algorithm: sha256WithRSAEncryption
74:86:be:a5:c8:24:c6:d1:59:71:31:10:b3:63:1c:16:35:d2:
0d:f5:34:fb:f3:27:f5:fd:2a:7c:8c:cb:1b:fd:fc:b9:af:c4:
9a:3b:ef:b7:b7:44:c1:7c:7c:43:a0:0d:21:18:2c:56:05:83:
55:e9:df:40:b3:0f:42:ea:5e:57:8c:3d:10:fa:92:a3:ec:b9:
eb:bc:9a:0e:5e:21:2b:ba:4c:86:42:57:83:b4:63:f1:06:f6:
08:05:fd:cd:37:4b:5e:62:e2:f2:0e:e2:2f:20:c9:be:d2:04:
6b:f7:b0:d5:f0:13:7d:17:d1:c2:22:ff:79:8a:5a:83:0d:9b:
ad:aa:30:a4:e2:c5:e7:e5:13:74:e6:7c:43:7e:87:12:09:05:
a9:7c:ad:e4:6c:d3:a1:06:7d:01:19:67:74:dc:1a:22:65:fa:
a1:52:be:72:c9:97:4a:12:f2:e7:f2:59:59:8b:75:8e:f1:ae:
f8:c2:fe:f3:61:a8:85:eb:45:f2:3f:90:32:9a:1f:6b:72:2e:
82:ad:9f:ae:f1:d2:bc:79:fd:7b:04:28:90:80:d7:a5:3a:22:
f4:d1:f0:9f:db:1d:6b:9c:9e:41:16:eb:ff:cf:dd:79:02:e0:
d2:9a:ee:ad:3c:df:26:44:52:4c:e4:42:bb:8e:e6:8d:d7:9c:
fb:b4:4e:65
-----BEGIN CERTIFICATE-----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Generated at Mon Apr 29 22:25:50 2024 by rpki-client on console-fra.rpki-client.org