Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer (raw, json)
Hash identifier: xOIGbrYE1SYTCgBvYm4didUKwLkQFVjlYU5Rx7uv6TM=
Subject key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5220579C195DC39E7CBBB339122988CCE30BAC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 13 Mar 2025 06:27:41 +0000
Certificate not after: Thu 12 Mar 2026 06:32:41 +0000
Subordinate resources: IP: 2a14:7580:4000::/36
IP: 2a14:7580:6000::/36
IP: 2a14:7580:8000::/36
IP: 2a14:7580:f300::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:20:57:9c:19:5d:c3:9e:7c:bb:b3:39:12:29:88:cc:e3:0b:ac:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 13 06:27:41 2025 GMT
Not After : Mar 12 06:32:41 2026 GMT
Subject: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:75:cb:9b:50:1c:89:9c:a5:fd:9d:b5:ed:
4b:9c:f5:6d:86:32:6f:43:cb:f0:00:91:83:b8:6c:
6e:48:e4:2e:e5:ad:e0:e7:05:0b:c6:76:6d:ff:29:
af:70:82:c4:b2:e9:ee:e1:eb:30:6a:17:e5:0d:cb:
c7:21:ef:b1:b8:d4:aa:16:0c:dd:14:b2:e5:61:66:
59:40:20:9c:fa:31:06:c9:b5:bc:21:ce:89:a5:a3:
c5:11:ea:12:92:98:2e:5c:c9:2e:d4:4e:a0:ad:53:
4c:50:88:f6:11:c5:db:4e:eb:d1:8e:be:ae:05:b1:
76:b9:ae:fe:7c:a8:15:9f:ba:5b:f9:08:b8:98:2b:
8b:94:81:dd:66:25:2f:37:38:92:e3:c4:05:7e:c8:
3f:67:24:01:76:c7:0e:9d:84:48:6a:bf:fa:f9:7a:
6e:86:c6:d9:1c:fe:d8:46:cb:cf:d3:d1:4d:15:7b:
d4:fa:bb:50:25:27:3c:07:91:ac:59:4c:47:1f:08:
92:4a:92:f1:47:d7:c3:52:5b:0d:c3:40:bb:6d:3b:
0e:08:a8:30:fd:a0:9b:81:2f:7e:f0:f3:85:de:0d:
61:72:a6:4b:ad:4e:4b:1c:65:62:88:0e:00:fa:96:
7e:ee:f7:a5:13:9b:e5:80:66:44:be:95:8c:6c:93:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:4000::/36
2a14:7580:6000::/36
2a14:7580:8000::/36
2a14:7580:f300::/40
Signature Algorithm: sha256WithRSAEncryption
38:31:ff:7b:4a:b4:12:d9:42:b7:63:5f:51:b0:e6:8a:be:dd:
ab:08:68:11:c0:32:83:5a:b7:f9:12:df:cf:3c:e2:54:fc:5a:
55:5a:8d:5e:ca:16:4a:48:98:57:37:8d:f6:06:aa:38:19:48:
c0:62:90:cb:4b:80:d7:40:26:5a:94:8b:50:13:44:c0:fe:7c:
d3:9f:69:f3:3c:b7:9b:f9:29:a3:14:ad:a0:f4:7d:15:0f:0c:
bd:b0:4a:3d:e5:b0:e1:1a:56:0e:07:7b:08:30:71:40:86:86:
cd:25:f5:09:80:05:a1:33:b5:b3:cb:e2:63:c8:b4:0e:50:13:
5b:e9:be:bd:f1:4c:24:de:9b:0d:db:8c:8b:9f:0c:ad:b2:11:
a4:3f:28:6e:14:e3:2f:23:04:6e:9a:0b:35:05:cd:a7:0c:57:
1f:36:74:8e:8e:0b:ef:1d:50:17:e9:e4:87:b0:64:cc:b5:e5:
56:f2:65:88:f2:4f:33:89:29:e8:e5:f5:78:32:7c:56:b5:f4:
1b:89:55:92:08:ba:bc:8e:ed:cb:39:9b:55:af:ac:1a:9f:53:
e5:60:c0:cf:79:5c:f0:12:2f:9c:e5:a2:06:de:d7:eb:18:80:
df:ab:7b:73:0b:7d:f7:7c:87:0b:da:66:4a:92:5a:15:67:b7:
4b:e1:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:47 2025 by rpki-client