Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
File: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer (raw, json)
Hash identifier: O4zeXQR7slhXG9GAsPTaUqJWU3YIpfzxvkbKlukdBJU=
Subject key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6D58FECA02D8ED53CA9DB6B19C9F675E20D0DB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 22 Jan 2025 00:29:07 +0000
Certificate not after: Wed 21 Jan 2026 00:34:07 +0000
Subordinate resources: IP: 2a14:7581:2000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:58:fe:ca:02:d8:ed:53:ca:9d:b6:b1:9c:9f:67:5e:20:d0:db:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jan 22 00:29:07 2025 GMT
Not After : Jan 21 00:34:07 2026 GMT
Subject: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:14:95:df:7a:7b:29:4d:3c:8f:ce:ff:f1:
00:61:61:3f:cb:03:96:f6:66:8d:4d:7d:ba:81:b7:
01:6c:32:db:4c:02:dd:a7:93:41:c5:d7:8e:e5:af:
e9:54:22:8d:95:bf:87:c5:ad:f9:27:31:37:a1:2d:
a7:10:25:9b:84:91:33:1c:25:f1:69:3e:7c:ec:ba:
78:06:f2:da:b7:26:49:94:88:d1:a0:70:b3:fa:80:
6b:35:29:df:43:38:78:2f:81:20:fe:d5:fd:50:17:
ab:44:2d:10:0a:05:97:75:1e:0c:77:81:86:3a:a8:
52:7d:0e:4d:b0:47:1b:37:6b:ea:18:0a:b2:31:66:
f9:43:0e:da:97:03:f2:b2:55:33:18:93:ba:70:fd:
db:f3:c9:18:0b:1f:4d:c7:22:2a:32:9b:2a:ab:2d:
83:89:b4:6f:51:cd:d5:fa:d4:0f:41:85:0f:46:4b:
64:e0:53:39:aa:66:4e:3e:ae:f6:1d:9d:70:57:16:
2c:1e:c8:04:3e:4c:5d:3d:03:7e:4e:fb:33:17:32:
a3:a8:c6:fb:bf:72:92:a5:3a:61:ba:93:be:84:44:
3f:1e:fd:d5:7d:d9:41:13:03:18:22:f2:e3:2b:28:
fc:cc:7b:cc:42:3a:49:d4:55:b6:23:4a:09:13:10:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:2000::/36
Signature Algorithm: sha256WithRSAEncryption
1a:c0:0b:61:65:8d:19:20:b1:e9:39:a4:a0:d2:26:31:af:ff:
eb:f4:09:2c:e6:13:3d:a7:db:fb:77:a2:bd:b9:82:91:d5:4f:
f0:f2:8c:06:f1:b1:90:f8:c5:2e:57:ab:f7:af:28:d3:59:7c:
3f:8d:ae:ce:d4:d5:8f:f2:8e:bc:37:f4:63:9d:90:53:80:6a:
a1:38:78:65:38:c5:ba:82:5d:5b:45:70:af:81:3b:6f:4d:24:
f2:5b:6e:93:ae:7c:fb:39:d6:93:a9:b4:3b:a9:78:90:04:30:
03:61:5b:fe:29:2f:5e:ba:6d:2e:ee:d1:e8:f3:9c:91:28:51:
73:9a:a3:9e:20:d7:79:da:d0:0b:79:fd:27:b0:de:9d:57:9e:
b1:57:e8:0d:cc:bc:bc:43:5c:3b:13:79:f0:19:40:e1:dd:de:
67:87:5e:54:8b:b6:4b:dd:5f:e7:bc:92:64:04:1a:8f:7c:cc:
d2:6f:04:62:1e:7f:77:86:9b:e2:8d:71:a7:ce:00:96:c1:01:
6b:af:6f:02:66:7f:6d:76:cc:25:80:02:69:ec:03:31:a7:9d:
55:8d:cf:2b:ba:b1:c1:3b:d2:33:02:fc:0a:15:29:7d:78:b8:
db:8c:1a:8a:1a:56:66:b6:37:7d:2b:4c:7d:fc:df:89:58:3f:
7a:46:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:37 2025 by rpki-client