Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer
File: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer (raw, json)
Hash identifier: cIpyuitNv7jB0MJCVBLOU5MXpLGZR1JM3fAn45WIj7k=
Subject key identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 6F751A28EF4F5622151070CA0AB68AB9882729E9
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 06 Oct 2024 11:32:20 +0000
Certificate not after: Sun 05 Oct 2025 11:37:20 +0000
Subordinate resources: IP: 2a07:54c7:4000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:75:1a:28:ef:4f:56:22:15:10:70:ca:0a:b6:8a:b9:88:27:29:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Oct 6 11:32:20 2024 GMT
Not After : Oct 5 11:37:20 2025 GMT
Subject: CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:95:03:21:87:28:7c:47:31:5a:83:23:c0:
f3:ee:58:a6:42:ee:52:34:48:8a:30:d2:4f:38:34:
97:43:00:8e:99:22:02:16:db:1e:36:73:cf:11:8b:
e7:c4:34:36:57:64:7f:a5:d8:1c:ab:6e:92:5c:b8:
43:6f:f1:75:d3:e4:4f:bd:aa:e7:d0:40:09:a8:ea:
23:be:60:2c:40:c7:a7:3b:b3:ac:b3:00:15:74:0b:
b9:57:7a:6d:85:79:80:18:06:92:fd:58:1a:e4:ff:
28:fe:f7:c0:52:28:18:98:ab:16:55:12:20:55:86:
2f:53:10:c5:89:55:b3:ea:6e:92:8c:d6:77:0b:0f:
e4:92:46:cf:78:d4:0f:04:97:35:16:a9:36:62:21:
e6:d6:10:d2:78:bb:0f:81:2b:09:24:ce:79:0f:36:
68:15:9e:6d:45:a8:25:88:e1:c5:68:cd:fe:6f:71:
e4:5c:4c:e9:d4:99:da:a9:eb:7f:81:12:d9:bc:0a:
d6:6a:a5:ad:e7:29:61:f7:73:ca:26:e8:92:1e:cf:
ec:e6:e2:fa:30:da:54:09:91:c5:c4:bd:70:ae:fc:
fe:8f:0f:75:60:70:86:dd:c4:2a:ac:ce:08:8d:7f:
0c:41:0c:6d:c0:58:10:75:9f:de:03:a6:84:a3:79:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c7:4000::/36
Signature Algorithm: sha256WithRSAEncryption
53:e3:b8:01:84:0b:01:f1:b3:79:35:88:71:dc:92:5a:7a:21:
b6:88:3c:27:94:f7:9a:0f:04:4d:a0:96:c8:ea:96:0e:27:a0:
3c:cc:c1:df:08:ef:9f:9b:a4:36:93:bf:8a:95:ad:68:1f:5a:
64:6d:a0:4f:80:ed:69:da:09:65:49:b7:0b:09:13:15:23:14:
8c:f4:e4:f4:7f:68:46:f7:14:45:de:ae:11:61:6e:b8:ad:cc:
d2:3f:b7:a8:4f:b4:bc:e1:d7:f6:96:f8:4e:b3:b1:ba:67:80:
58:0c:b3:3c:e1:48:e8:0a:04:90:e1:26:1b:43:e6:49:50:02:
71:60:38:2c:f3:ef:9f:1f:37:9f:c0:c7:3e:58:7e:19:9c:1d:
9c:ff:2c:e5:ed:44:7b:3e:a4:88:2d:f8:70:d1:f7:fe:99:a9:
d1:6e:7d:d3:86:a3:13:d7:0e:d7:68:30:4e:86:3f:dc:85:21:
9f:b6:b3:94:d0:fb:64:14:b3:0e:c1:57:4b:84:4d:be:dd:cd:
4c:ef:38:a5:76:b9:c0:5a:61:03:46:5f:26:ff:62:64:5f:1e:
ad:16:63:61:cc:60:1e:28:70:75:84:f6:aa:f2:cc:6c:2b:d2:
56:1b:fd:d8:7b:01:26:ff:31:d9:00:b7:ce:ab:54:7a:8c:3d:
96:ef:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:09:50 2025 by rpki-client