Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer
File: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer (raw, json)
Hash identifier: 52XGL5lwTxPgOjSczpDW7ve1A97ibTaIJ9Kverg3qsU=
Subject key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5B633DA30D452FEE9B9EBE8B888F98B4CC1D2354
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 11 Feb 2025 16:39:52 +0000
Certificate not after: Tue 10 Feb 2026 16:44:52 +0000
Subordinate resources: IP: 2a09:54c7::/32
IP: 2a0a:6044:6400::/40
IP: 2a0a:6044:aa10::/48
IP: 2a0a:6044:c110::/44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:63:3d:a3:0d:45:2f:ee:9b:9e:be:8b:88:8f:98:b4:cc:1d:23:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Feb 11 16:39:52 2025 GMT
Not After : Feb 10 16:44:52 2026 GMT
Subject: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:34:f5:ce:aa:18:0b:61:d0:ae:eb:69:62:
21:21:8f:9b:21:41:cb:77:67:3d:72:bc:63:60:4f:
3d:21:97:ee:2a:b8:bb:8d:e9:05:5a:d4:57:16:7a:
43:00:7e:c4:79:52:c0:e5:63:80:7f:97:9a:d6:a9:
dc:8a:80:4e:d3:20:35:e0:0d:d2:3c:1f:a3:de:63:
fc:4b:72:33:d4:04:83:f5:0b:b8:9d:ea:81:3b:8d:
db:63:29:77:40:c2:16:ee:e8:03:c7:e9:71:2f:8d:
92:14:62:e1:ae:f4:dd:85:0a:4e:f6:f2:7f:48:9b:
5b:ea:b9:1d:18:ed:10:fb:7c:34:69:39:a0:c3:eb:
5f:c0:b9:78:67:fd:b3:16:9e:e2:96:0e:7b:ea:da:
6b:12:9c:c2:02:de:af:37:af:54:cd:0d:e7:a4:2a:
30:0a:3e:2a:c9:90:f5:63:cf:8a:97:c1:d5:7d:d2:
97:7d:d8:84:fd:6d:1e:d5:bc:b2:e2:ab:00:62:ef:
ae:1a:0b:a9:88:6f:56:4f:b0:dc:e2:2a:c7:e1:ac:
aa:c2:85:a9:c0:03:66:17:6f:5e:eb:1a:be:64:3e:
b2:15:d4:fc:27:5b:8a:2c:f3:7b:5e:e1:4c:ca:b4:
10:78:2b:77:3c:ee:80:26:3d:a0:e4:f7:6d:d6:0f:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7::/32
2a0a:6044:6400::/40
2a0a:6044:aa10::/48
2a0a:6044:c110::/44
Signature Algorithm: sha256WithRSAEncryption
98:9d:9c:3d:a3:ad:05:96:50:b8:06:d0:c8:90:25:74:06:b6:
dd:f8:73:d5:c8:3f:6e:85:99:2d:73:ed:18:6a:05:f5:14:ec:
aa:a4:2b:57:e7:ba:0d:93:53:48:50:42:04:26:6c:ed:50:a0:
96:f3:b9:fe:71:5b:52:42:86:b7:f5:a4:4c:d9:44:77:c4:65:
f0:d9:5e:f2:61:c9:6f:e3:ec:ac:53:b8:7a:00:fa:e6:85:d1:
81:88:a4:d5:79:16:94:67:9d:aa:93:57:90:a0:3e:e1:03:28:
3f:c8:cc:fb:9e:ef:58:87:dd:1d:da:8b:d7:d2:ce:36:76:6c:
7b:09:09:56:0e:3c:68:41:a6:f6:30:e7:1d:b2:23:b4:12:c9:
66:db:08:49:45:32:b8:82:4c:7b:ef:3b:a0:34:f8:23:72:9e:
dd:f6:cd:a4:e1:10:a7:c5:93:45:a4:63:24:d8:bb:49:39:7b:
3c:83:9b:46:71:20:85:4a:da:cc:a3:a0:75:85:3d:fb:ca:6d:
b7:f1:e6:43:91:57:55:f1:12:3e:31:cb:9d:14:26:17:3b:82:
61:11:29:c0:f5:cc:cb:ce:93:f6:8d:eb:ad:c7:79:a7:7a:19:
20:1d:7c:a4:a4:41:b4:6a:cc:af:73:56:49:a7:3d:56:c6:2c:
2c:96:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:15 2025 by rpki-client