Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer (raw, json)
Hash identifier: unIW/6FQ5YVSNnLosWBPHQbqDvkggHN4wrVcYYiQnZg=
Subject key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 33B469D26D84B13780E0152E662CB91C0DD53D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 25 Mar 2025 02:40:12 +0000
Certificate not after: Tue 24 Mar 2026 02:45:12 +0000
Subordinate resources: IP: 2a14:7580:a00::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b4:69:d2:6d:84:b1:37:80:e0:15:2e:66:2c:b9:1c:0d:d5:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 25 02:40:12 2025 GMT
Not After : Mar 24 02:45:12 2026 GMT
Subject: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:10:7d:a6:15:25:d1:26:9e:a1:1d:a9:5b:
0f:cc:9d:ee:04:83:a8:71:e1:06:0b:9e:c4:15:43:
a6:fe:73:b0:7e:c3:57:25:f8:e7:2a:81:74:8e:95:
da:79:8e:3e:14:d7:8d:a2:a4:b8:8f:ed:e0:c8:07:
5d:17:6f:66:05:ea:7a:6c:44:85:ae:98:41:ce:85:
06:60:03:92:2e:0c:d2:a0:3e:f9:c2:39:6e:b9:05:
89:35:61:d4:d6:8f:4a:ad:66:67:db:5d:6d:bd:88:
b5:45:8d:2b:58:d7:25:2d:9e:f4:90:3d:26:35:1b:
00:58:d6:98:ff:93:f3:92:91:c3:d4:1e:6b:71:8b:
61:30:3d:53:4a:7e:88:42:fa:cc:d9:10:34:3e:3a:
a7:52:2b:0f:3d:53:d5:a2:da:33:08:fb:2d:69:3b:
0f:c9:43:53:fd:29:ef:76:bb:d3:28:d8:ac:97:72:
81:f7:98:31:55:d6:e3:4f:89:a7:df:e9:01:91:2d:
39:16:2d:67:fd:aa:d8:ad:65:67:83:a2:75:5e:00:
c2:fa:2d:b1:1d:e8:80:57:55:fb:00:db:dc:8a:ef:
4d:74:11:e1:a2:ac:a4:e4:36:a0:cb:9c:d6:60:7e:
ff:1c:c5:62:04:7a:0a:27:e6:13:2b:97:81:4d:e6:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:a00::/40
Signature Algorithm: sha256WithRSAEncryption
45:eb:04:3f:84:51:44:50:52:24:85:06:d2:c2:d6:71:d0:8b:
a5:4e:66:c1:bf:32:fd:18:c9:22:7e:a6:62:b9:ab:02:c0:42:
c7:42:0d:e3:e8:81:31:a7:35:3c:47:dc:09:ea:b1:68:41:61:
a5:c2:13:ce:af:80:e2:2f:36:10:ba:aa:ff:56:4d:a5:b8:06:
18:49:10:5c:a6:92:14:ef:41:b8:23:d7:6e:bf:62:20:56:2d:
03:90:2c:58:ad:07:a4:54:54:aa:bf:08:86:07:ee:eb:8a:0b:
f7:bc:38:90:db:fc:1a:fd:e7:f7:05:7b:d2:02:bf:a3:84:ae:
aa:98:04:5f:e2:be:bf:bd:26:ae:27:a9:4c:44:ab:1a:95:bc:
a1:34:30:f0:80:66:91:3c:67:62:ea:82:7b:10:b7:88:a4:da:
c3:ea:de:6b:66:a5:4c:d9:03:b2:33:5b:56:9f:f4:db:5f:ce:
ec:7d:1f:7d:e8:3b:1f:e7:c9:0e:46:d7:d8:25:24:c6:61:7e:
54:61:dc:af:ad:27:84:54:fb:29:66:b9:b0:9e:8d:61:c1:52:
b9:05:15:c6:5e:6b:02:b6:77:67:d6:5b:99:dc:f5:76:9b:e1:
36:0a:56:1e:7e:52:f5:67:48:62:40:3c:84:24:37:f9:66:a7:
6d:02:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:05 2025 by rpki-client