Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
File: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer (raw, json)
Hash identifier: cI48rLorQhssMcdtpKGHk+lFHcSy0fs9VJ/FwiHT6P8=
Subject key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5334B006A6D0225A196CEFB9CA23EBD2C6876637
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 18 Mar 2025 03:25:07 +0000
Certificate not after: Tue 17 Mar 2026 03:30:07 +0000
Subordinate resources: IP: 2a0a:6044:7c00::/40
IP: 2a0a:6044:8000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:34:b0:06:a6:d0:22:5a:19:6c:ef:b9:ca:23:eb:d2:c6:87:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 18 03:25:07 2025 GMT
Not After : Mar 17 03:30:07 2026 GMT
Subject: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:97:07:06:45:33:24:dc:59:c0:5c:60:1d:
25:4c:08:41:79:bd:08:6f:67:ad:04:2d:eb:56:10:
12:ef:a2:6c:a9:56:a3:f1:30:fa:ab:4a:a4:03:79:
55:8d:60:55:2f:26:ca:11:01:6d:d3:6c:39:d6:39:
9d:c9:7e:53:5c:50:b0:d4:ae:43:57:86:42:a3:72:
aa:b3:80:ba:0f:49:7a:9c:f8:8b:1e:c5:4b:ef:c6:
84:85:df:94:97:12:d0:bd:55:17:58:72:c6:3e:d6:
a1:72:f9:d5:e7:d9:62:46:71:95:2f:0d:e8:82:a4:
1b:88:00:e3:29:da:98:24:51:0c:a8:ab:2a:01:60:
e2:74:8f:0f:e4:6d:2b:53:9a:2c:65:8c:c6:ba:7c:
38:7a:92:b0:87:3e:b5:d9:be:02:e2:56:cc:8b:9f:
80:5c:1f:f7:94:42:36:09:3d:94:67:1b:c5:c5:bf:
bf:fe:13:7b:23:b1:c4:15:bd:12:79:1a:1e:af:9c:
09:13:c9:a5:ef:6e:91:d0:74:0b:06:ef:fd:95:b3:
4e:5f:53:56:35:3b:b2:70:e3:4d:1e:19:d2:34:96:
c9:6d:7b:0c:6b:82:0b:6b:51:b6:3b:d1:60:33:2c:
cc:e8:36:07:2b:ea:4c:8e:42:45:9b:a1:cb:3b:9f:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7c00::/40
2a0a:6044:8000::/36
Signature Algorithm: sha256WithRSAEncryption
30:aa:3f:bb:c8:34:74:79:dc:37:da:ab:37:b9:27:ae:44:f5:
35:62:85:5d:28:43:81:fc:1b:72:72:9c:77:98:08:57:09:39:
a7:b4:3f:d7:73:ce:42:9b:78:90:cf:7e:52:13:e8:0b:d1:4f:
65:db:f3:d5:84:a2:a5:f0:f2:39:f7:1b:d6:fb:eb:f6:ef:c9:
60:59:a4:82:8f:01:11:3f:be:14:6d:4c:1a:07:13:2c:e0:7d:
2d:e0:07:32:07:b0:db:50:fe:09:dc:f3:a3:59:09:2a:fe:cb:
ce:90:fc:81:56:71:84:99:7a:61:42:29:5d:58:1b:c0:2d:e4:
9a:28:69:84:d8:f5:76:15:ec:19:45:87:29:de:11:dd:42:49:
6c:01:e8:f4:ee:74:5d:c2:a4:fa:c1:cd:e7:39:47:ca:ed:63:
6c:91:e7:05:e1:50:31:b3:53:9e:87:a7:fa:3a:f7:2f:d7:c4:
43:e9:4e:c4:62:a5:0f:af:bd:4d:7d:6e:ba:a9:eb:23:ce:02:
8a:06:58:fa:37:29:2e:db:34:c7:94:d1:34:97:a4:b1:24:1d:
e0:73:2e:06:4d:79:c9:ae:3e:d0:f2:fa:39:55:c2:b7:dc:ef:
1a:42:3a:64:08:3a:80:df:aa:05:04:56:b2:3f:73:cd:f2:27:
3a:48:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:58 2025 by rpki-client