Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.cer
File: 3509F37A88DA7D8DF5D8355261259C1D418E541C.cer (raw, json)
Hash identifier: Gw7RIAS0jFltnYb2DhnPaRKjOHY24yMIe496AeAGWAA=
Subject key identifier: 35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 071863282C42B8502D0DB10AEE7ECC0BEED21149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 20 Mar 2025 08:59:57 +0000
Certificate not after: Thu 19 Mar 2026 09:04:57 +0000
Subordinate resources: IP: 2a14:7581:6000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:18:63:28:2c:42:b8:50:2d:0d:b1:0a:ee:7e:cc:0b:ee:d2:11:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 20 08:59:57 2025 GMT
Not After : Mar 19 09:04:57 2026 GMT
Subject: CN=3509F37A88DA7D8DF5D8355261259C1D418E541C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:c8:3e:59:5b:09:fb:53:46:ee:18:ee:09:
3f:81:0e:29:9a:a2:06:97:94:ee:3a:ae:42:93:9c:
68:df:e2:93:bf:d9:5f:b6:f2:39:3c:39:29:6d:7d:
96:6c:a7:27:da:88:90:a7:8c:59:03:f3:72:16:0e:
40:2e:98:2b:4d:eb:b6:ee:1b:62:4c:de:4f:28:44:
69:69:b3:81:11:4b:6f:87:ab:22:53:53:6a:6a:b0:
41:97:3c:ea:d8:86:cb:1b:29:f2:7c:9f:5f:5a:af:
32:12:91:47:8e:d3:d5:d9:88:64:fd:2b:2e:b7:f3:
c4:2a:f2:3c:14:ab:a2:9c:27:9e:ba:70:6d:02:f0:
7e:c7:81:ec:4d:6d:15:29:b4:49:58:fb:5e:12:da:
84:19:5d:ee:7e:35:a8:44:f3:c9:dd:c0:d1:58:35:
f1:23:c8:cd:c7:8d:f0:39:d4:e8:75:77:23:af:ea:
9d:e3:b8:c2:98:c9:00:8e:8f:74:0a:03:dd:8f:cb:
6c:ac:a6:82:dd:44:ae:51:78:cb:d1:12:bd:db:f5:
3c:81:19:00:13:c5:cc:57:80:2a:4b:ff:f8:00:f8:
fa:f4:04:9b:b0:45:8a:00:73:9f:4b:fa:95:31:66:
0a:f2:5b:b0:bf:c5:ff:be:9f:1d:47:53:09:3f:15:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
35:09:F3:7A:88:DA:7D:8D:F5:D8:35:52:61:25:9C:1D:41:8E:54:1C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/0/3509F37A88DA7D8DF5D8355261259C1D418E541C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:6000::/36
Signature Algorithm: sha256WithRSAEncryption
60:c7:96:98:8e:24:f7:25:9b:c0:15:c6:b1:0d:87:7e:8f:7f:
26:6b:20:b9:1f:88:8e:4a:c8:f6:1a:28:ea:a9:f6:25:8e:53:
a2:ff:e5:7f:45:66:84:d8:1e:7a:fd:48:c6:df:55:8c:15:8f:
5e:44:7a:ac:23:7f:5d:8f:cd:35:e0:a2:6c:18:f9:6d:b1:91:
f6:5e:6f:4a:4e:8f:70:f9:ae:04:a1:f7:32:a8:66:3c:48:da:
b4:a9:1e:40:16:44:52:98:ee:a4:03:97:cc:f2:55:fe:d4:34:
f1:1b:79:54:93:eb:40:72:67:13:7f:2d:da:8c:de:73:1b:c7:
e7:13:3d:94:8b:23:04:bc:b9:a8:ab:b7:f3:79:33:32:c5:13:
d9:31:35:d2:7c:15:38:17:c1:8e:a3:8d:0f:6b:a5:1e:a2:98:
11:65:4b:d4:d8:cd:4e:43:68:9f:04:26:8d:24:6e:f1:43:20:
d7:fd:74:88:b2:38:79:87:7f:85:57:08:36:6c:c2:de:2c:b1:
b4:28:a8:07:c9:47:6c:1d:71:36:f2:e4:28:31:a8:d7:c4:98:
09:ef:de:b9:41:bd:d2:d8:d0:32:c1:37:e8:f0:76:39:25:f4:
ec:15:93:b7:a7:9b:d7:79:91:f8:0b:bc:5c:a2:85:58:d2:e4:
5d:34:c9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:11 2025 by rpki-client