Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer
File: 4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.cer (raw, json)
Hash identifier: mw53IDJPCc+K/oxIW5mTszVwSpEUMBkU5tR6qrgYHAA=
Subject key identifier: 4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 5E41712751AA3C9F357012E90847FAF933D26AB4
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 16 Dec 2024 16:24:14 +0000
Certificate not after: Mon 15 Dec 2025 16:29:14 +0000
Subordinate resources: IP: 2a09:54c7::/32
IP: 2a0a:6044:6400::/40
IP: 2a0a:6044:aa10::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:41:71:27:51:aa:3c:9f:35:70:12:e9:08:47:fa:f9:33:d2:6a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 16 16:24:14 2024 GMT
Not After : Dec 15 16:29:14 2025 GMT
Subject: CN=4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:01:d0:88:d8:c0:b3:8d:b2:6c:94:42:fc:
b0:67:cd:a2:79:e3:40:6e:4e:6a:4c:26:73:eb:35:
05:86:61:1c:ed:f0:26:7f:ec:68:6b:86:a4:bd:7c:
0a:ee:00:d4:d2:4d:1a:ee:4b:4c:39:89:8a:17:8a:
1a:8a:ea:07:65:1e:1a:1c:c8:53:38:e6:93:a7:e8:
1a:5f:22:11:0f:95:ef:2b:54:62:fe:c6:cd:a2:da:
bd:7d:8f:ce:d0:1e:72:c2:f2:da:2c:cd:da:e9:d4:
e3:c9:07:4f:61:43:bb:2f:7f:e2:8a:e3:13:8d:90:
3b:0c:0f:08:c3:cf:c1:47:91:05:d0:5d:9c:f3:74:
1d:62:71:ab:3d:8f:96:73:9a:2e:00:3a:1d:ec:c0:
9c:60:e3:1a:d2:64:91:f2:bf:bc:62:e4:fb:c5:2d:
5b:ba:f7:fe:a1:79:8b:47:51:fa:b7:52:42:c7:57:
4b:03:05:9a:b4:ca:89:0d:ad:32:0d:a0:3f:da:92:
1e:93:25:ea:14:d8:78:07:c1:4f:2f:ef:9b:9b:79:
3d:7c:3b:81:e6:a5:27:72:1d:ea:b7:98:c7:fd:57:
fa:db:91:04:6b:e0:57:a9:3c:4f:e4:af:5c:18:96:
eb:0d:03:14:74:12:6d:d9:71:17:a8:93:3c:62:b9:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
4D:E3:64:B9:A3:AF:54:1F:AC:1C:0C:0F:A7:08:FF:7E:8E:80:24:B6
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/2/4DE364B9A3AF541FAC1C0C0FA708FF7E8E8024B6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7::/32
2a0a:6044:6400::/40
2a0a:6044:aa10::/48
Signature Algorithm: sha256WithRSAEncryption
02:ae:8e:96:30:2a:e6:94:a6:a9:ba:cc:0b:35:20:09:3c:85:
ce:83:be:78:8f:1c:99:d5:2c:68:57:07:13:58:41:79:27:23:
43:73:dc:55:35:cc:57:ec:57:41:ff:28:6c:d4:f3:1c:d0:a9:
a6:b4:f0:ab:47:16:ec:36:62:47:16:b9:64:73:0b:1e:61:96:
01:90:5e:94:c3:5f:d1:35:7e:d7:7a:92:fe:a8:83:51:c3:27:
6c:c6:93:2e:c7:98:a9:d3:7a:15:be:18:eb:ab:d2:73:2f:31:
0b:5d:3b:a1:9b:fa:e8:e6:8e:2d:03:ae:57:ed:0e:23:43:4f:
d1:72:76:35:58:c7:62:18:1c:a9:50:3c:08:bf:19:d4:8a:00:
64:22:16:fc:87:ee:80:d5:64:6a:26:ce:ac:42:a3:61:f1:e8:
0f:86:54:f0:ae:1a:5c:58:1b:db:e3:9c:aa:3f:56:25:fb:1d:
5b:33:fd:de:47:1e:d4:f3:cf:e0:2f:30:7e:02:a2:13:33:79:
f4:89:db:f3:3a:cb:80:66:ba:16:3f:15:7e:98:e0:1f:9a:b7:
ca:18:a6:63:92:5d:13:b5:0d:68:c6:2c:44:30:bb:b1:5d:57:
d3:3e:0d:4e:9a:50:cc:b5:5a:d5:49:83:49:92:0b:4a:90:58:
e9:0b:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:50 2025 by rpki-client on console.sobornost.net