Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.cer
File: 7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.cer (raw, json)
Hash identifier: EBkYsjGK7rfo4SdSkI1tLW+1TOMVrX3yFmLYL2FgZ0E=
Subject key identifier: 7D:B2:24:DB:42:AC:0A:5F:6F:27:C8:E3:01:A2:35:6E:E4:8D:E3:3D
Authority key identifier: 74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
Certificate issuer: /CN=74b90a27d86f6a1914c261c21469df853e32beb5
Certificate serial: 30F41E6DA6B775C70FF98013E420742CEBF41FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 22 Apr 2023 02:27:37 +0000
Certificate not after: Sat 20 Apr 2024 02:32:37 +0000
Subordinate resources: IP: 2a13:df80:70::/44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f4:1e:6d:a6:b7:75:c7:0f:f9:80:13:e4:20:74:2c:eb:f4:1f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b90a27d86f6a1914c261c21469df853e32beb5
Validity
Not Before: Apr 22 02:27:37 2023 GMT
Not After : Apr 20 02:32:37 2024 GMT
Subject: CN=7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:01:cd:06:0b:12:65:89:6b:96:49:c3:36:
2b:bb:8f:f2:e9:2c:f7:1b:e6:d0:01:98:63:7e:77:
4b:11:31:ee:82:0f:09:89:46:67:63:26:d8:98:00:
af:6d:2b:9a:8c:05:c1:1a:12:b0:84:76:16:a2:4b:
4c:95:78:e1:f6:e2:87:ca:2c:05:ec:c2:65:ae:5d:
c3:03:35:7c:b3:da:d4:5e:90:2a:e4:2b:10:f3:83:
4e:ac:08:83:f0:f2:98:a2:a7:ed:f3:86:a1:a5:38:
7b:d9:bf:d6:0e:cf:82:8c:42:3c:59:b0:3c:6b:08:
3a:5a:be:83:ee:25:d3:39:d3:bd:61:72:99:74:0f:
af:55:7b:71:62:cc:22:bc:41:f5:67:5b:e5:d1:a9:
84:4a:7b:98:0d:70:5b:f4:77:2e:97:37:18:29:ed:
38:38:e9:22:0a:b8:dd:7e:fd:23:43:79:b8:36:a8:
26:95:a4:02:84:19:8c:60:b1:23:ae:32:00:d6:8c:
7e:70:5e:02:d3:ce:5d:85:af:92:17:ef:64:56:60:
1b:e3:a2:57:9b:89:1d:1a:18:e3:08:a3:c3:9e:38:
29:de:65:a5:af:d5:b8:69:02:52:b8:a2:4e:0b:4a:
da:57:6f:ef:0d:a6:a5:fc:56:5c:0c:8a:df:db:fb:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7D:B2:24:DB:42:AC:0A:5F:6F:27:C8:E3:01:A2:35:6E:E4:8D:E3:3D
X509v3 Authority Key Identifier:
keyid:74:B9:0A:27:D8:6F:6A:19:14:C2:61:C2:14:69:DF:85:3E:32:BE:B5
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/74B90A27D86F6A1914C261C21469DF853E32BEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLkKJ9hvahkUwmHCFGnfhT4yvrU.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d578953d-e6e9-4ffa-b5ac-ac97b5327f11/1/7DB224DB42AC0A5F6F27C8E301A2356EE48DE33D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:70::/44
Signature Algorithm: sha256WithRSAEncryption
04:0f:ea:8c:ff:83:66:f0:06:8b:a5:67:0e:54:6d:53:a8:78:
55:b3:64:57:1f:01:e5:97:bd:d2:bd:0e:0c:d3:99:33:f8:71:
76:2e:8c:7b:b9:c2:a9:b7:1d:88:5e:65:b4:d4:f6:52:3d:af:
3f:84:47:1e:6d:0e:2e:4c:f0:fc:19:b3:b7:ed:e7:30:a4:38:
b9:5b:cd:75:c3:12:7b:ac:d1:8b:11:19:3d:f7:b9:cc:14:e7:
95:e8:61:10:44:83:58:7b:6a:1a:07:85:79:6c:c3:1f:83:8d:
51:7e:c3:94:8b:96:2a:40:35:4b:68:99:1c:21:6d:cb:07:06:
09:2b:14:8f:76:49:1f:6e:fc:7b:9a:ef:9d:57:2c:81:8f:ec:
8f:b6:88:19:29:67:4c:19:46:fc:7a:6e:2b:95:93:aa:7e:67:
32:e8:4b:b1:68:86:49:a0:08:8d:4d:5e:47:fb:91:d8:7a:cb:
90:14:63:67:64:d1:63:80:23:48:fe:77:ef:04:39:8a:66:19:
24:d1:f0:b4:7f:0e:7f:82:76:65:52:94:24:ad:11:41:f4:9b:
8d:ad:26:d8:db:62:5a:0e:a2:da:f9:1d:4c:16:47:ae:01:f9:
8e:03:2a:30:b9:ca:4d:18:a7:3a:69:a8:e7:53:4a:d7:51:a1:
40:b2:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:42:11 2025 by rpki-client