Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
File: 0E357DDA04B8107626124F52CFC2439B76D85AF9.cer (raw, json)
Hash identifier: b9d/ZWhy0vO95j6EN2Iikzef0bKApx/1in2lhohhvkc=
Subject key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0603F15EDF52FBE56527E1709C11A2A772833520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Manifest: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
caRepository: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0
Notify URL: https://cloudie.rpki.app/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 23:54:26 +0000
Certificate not after: Sun 31 Dec 2023 23:59:26 +0000
Subordinate resources: IP: 2a0a:6040::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:03:f1:5e:df:52:fb:e5:65:27:e1:70:9c:11:a2:a7:72:83:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:d7:da:1e:01:22:cc:94:62:74:eb:6b:30:
38:a6:b8:d4:f1:bf:c5:3d:6b:d9:72:06:75:ce:3a:
ab:6f:23:a8:b9:af:cd:80:ad:79:ad:13:b1:f4:52:
1c:9a:5a:49:d2:fc:56:a5:d0:ad:87:54:35:03:f0:
55:bb:c4:43:f5:82:31:25:69:36:ed:2c:36:0e:c7:
49:38:01:ff:54:a8:f5:1e:51:ac:b8:f1:e7:5d:53:
4a:6f:7b:9f:22:34:c0:ad:6f:e7:16:41:57:04:27:
06:14:fb:5d:1b:c0:53:a0:ce:4a:59:d5:ee:73:7b:
2c:7c:4b:fb:7c:23:18:61:56:ff:e4:d6:b0:25:d6:
9e:44:85:07:14:56:07:b6:c6:5a:2b:52:76:4c:47:
3d:9e:60:62:c1:30:68:20:38:16:eb:6b:95:04:e4:
cf:62:87:de:26:34:53:46:fd:1c:2b:ed:0b:ae:5d:
75:9b:c6:0a:0a:47:cb:95:8b:67:57:b1:d2:17:93:
18:bf:79:85:3e:71:94:57:da:b5:08:1a:7f:c6:d5:
81:d8:3a:a4:90:24:5c:30:35:f9:e7:31:6d:c6:c6:
23:a6:ca:7b:ef:cf:2f:70:cb:4c:71:1f:9c:71:31:
c8:ac:a7:e0:07:43:8f:37:9e:71:06:98:c1:10:34:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
CA Repository - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0
RPKI Manifest - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
RPKI Notify - URI:https://cloudie.rpki.app/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040::/32
Signature Algorithm: sha256WithRSAEncryption
96:5d:a7:10:7e:f3:01:21:b3:01:1b:ad:d3:b9:aa:8f:a3:35:
db:4a:97:20:34:30:3e:f2:00:3b:11:3e:68:3d:c9:82:58:fd:
17:b7:fc:58:b6:2c:53:fa:84:ea:fa:19:91:0b:d3:01:19:cb:
00:2c:46:9e:b7:8a:79:90:ec:93:44:5b:3b:5e:27:bd:db:f8:
c1:e9:5d:75:0d:ef:9d:34:69:85:ef:41:e3:fd:7d:c0:3a:8c:
64:c9:7a:c4:8a:2f:e3:fb:8d:74:af:b6:48:ab:b2:06:ca:81:
5e:86:e0:72:a9:8c:22:e7:91:39:75:3b:74:f5:65:63:26:f8:
e6:d0:24:6c:89:02:28:10:69:59:f8:38:d7:45:6e:aa:d9:7f:
96:09:60:f1:c7:d4:52:f6:07:a7:48:3c:b3:f1:3f:01:bc:cc:
48:03:3d:d7:3b:27:9a:40:24:d4:c6:d0:e7:94:d9:ae:f7:a0:
94:92:7a:d2:6e:7c:be:50:0a:4a:48:51:52:58:41:33:ff:e2:
fe:23:85:3c:72:b0:6b:33:b5:72:49:63:ce:2e:c5:8c:dd:ca:
0a:bc:0f:16:d7:16:17:c7:21:5c:e9:6d:e7:7c:69:e0:49:b5:
a2:5f:b5:04:3d:ec:30:e9:47:98:21:76:76:7a:cd:3b:d5:16:
cb:73:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org