Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/967A5277304F0B129F1D579BC0BC6956F228A387.cer
File: 967A5277304F0B129F1D579BC0BC6956F228A387.cer (raw, json)
Hash identifier: bhjUVWIR8y5+nlqsE3RfJb8/TUmYjpWgOtxWw7Z9Sh4=
Subject key identifier: 96:7A:52:77:30:4F:0B:12:9F:1D:57:9B:C0:BC:69:56:F2:28:A3:87
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 42EEF8393180D62FEB2AD3AB42BAF248E0DA3CD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Manifest: rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/0/967A5277304F0B129F1D579BC0BC6956F228A387.mft
caRepository: rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/0
Notify URL: https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 23:54:09 +0000
Certificate not after: Sun 31 Dec 2023 23:59:09 +0000
Subordinate resources: IP: 103.68.109.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ee:f8:39:31:80:d6:2f:eb:2a:d3:ab:42:ba:f2:48:e0:da:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=967A5277304F0B129F1D579BC0BC6956F228A387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:67:7e:45:be:14:f5:57:17:51:32:91:be:
7b:e9:3a:8c:a4:27:d0:59:6f:cf:a4:9f:56:d9:54:
62:bb:63:7b:2d:75:86:ba:e8:46:34:40:d9:3b:3a:
df:86:f3:a5:71:c6:c7:cc:a4:83:7b:ca:d5:ee:48:
d5:c9:4c:12:20:c2:c5:89:10:51:dd:18:33:ea:7b:
31:58:4d:b5:cc:a6:14:41:d4:ec:cd:53:01:88:6e:
23:39:a2:8a:3f:f2:09:e3:8a:e4:34:7b:42:56:23:
5d:93:9b:69:4c:64:3e:89:88:a5:f1:cd:85:e0:ef:
6b:33:ac:f7:0c:13:02:24:1d:3d:84:9d:67:4c:b7:
77:b9:4f:88:73:1e:0b:c8:20:15:d1:8e:67:11:97:
2d:af:b3:cb:44:f1:91:31:90:6d:cf:c8:d5:6a:1b:
82:98:ad:42:c2:4e:52:c2:8d:90:99:97:14:44:d5:
1b:bd:32:63:a1:e3:67:46:c8:51:ef:cc:f6:d4:90:
d5:79:b5:0f:e4:f4:bb:01:a3:8c:66:aa:e8:fc:ae:
b6:1b:9e:58:b4:7b:0d:12:20:34:c9:84:b1:14:7b:
16:b0:cb:31:83:ae:dd:45:0b:eb:f7:30:79:f3:7e:
14:96:d2:f7:bd:45:75:6c:2b:11:2f:36:af:00:ec:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:7A:52:77:30:4F:0B:12:9F:1D:57:9B:C0:BC:69:56:F2:28:A3:87
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/0
RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/0/967A5277304F0B129F1D579BC0BC6956F228A387.mft
RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fb:d3:3d:1e:b3:f2:d4:9d:72:f7:68:86:53:58:7c:a1:75:
1a:f4:fc:88:d8:7d:bf:33:32:15:fc:c4:38:1d:be:a9:29:e2:
91:70:2f:4d:81:e8:b8:83:03:68:f4:e9:cb:6e:7a:6e:bf:c7:
b9:ae:bb:10:47:2c:6c:9a:0c:4a:95:fa:49:19:90:01:fc:50:
83:b2:ff:88:8e:ec:18:e0:5c:ff:e8:24:de:63:60:30:ec:84:
44:30:61:ad:79:46:63:58:85:98:3d:9c:23:9c:92:bf:15:16:
db:a8:54:b6:6f:a9:71:aa:10:36:09:d3:5d:43:de:20:50:30:
35:e2:25:a4:aa:1e:1b:ea:8c:5c:47:c4:78:ec:cf:31:2d:c4:
73:66:30:c9:92:92:d3:17:88:e2:b9:1b:9c:76:9d:db:c4:08:
a8:35:a1:84:27:d1:61:17:09:e1:bd:1b:92:f1:ef:fa:17:cf:
90:07:7c:9b:ec:f6:57:87:06:e5:ec:7e:36:41:1d:87:90:1c:
69:06:46:ba:ef:54:8e:c8:52:08:30:e7:30:a7:4d:d9:06:12:
06:78:6a:9f:2e:b0:b7:fe:a3:30:f3:93:9d:bf:07:64:9f:c7:
c0:cf:3d:3e:7b:f4:91:35:dd:47:67:37:a3:6a:f9:b9:a8:16:
58:6a:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org