Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer
File: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer (raw, json)
Hash identifier: ACTQaQSWdUgPhSDs47QiZSCgU6rFrRr/WfiwZrTcP5o=
Subject key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 4CB7E85F02B9D328AF42B9E2FF24E290E0280AAA
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 11 Apr 2025 01:16:08 +0000
Certificate not after: Fri 10 Apr 2026 01:21:08 +0000
Subordinate resources: IP: 2a0a:6044:7c00::/40
IP: 2a0a:6044:8000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b7:e8:5f:02:b9:d3:28:af:42:b9:e2:ff:24:e2:90:e0:28:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Apr 11 01:16:08 2025 GMT
Not After : Apr 10 01:21:08 2026 GMT
Subject: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:97:07:06:45:33:24:dc:59:c0:5c:60:1d:
25:4c:08:41:79:bd:08:6f:67:ad:04:2d:eb:56:10:
12:ef:a2:6c:a9:56:a3:f1:30:fa:ab:4a:a4:03:79:
55:8d:60:55:2f:26:ca:11:01:6d:d3:6c:39:d6:39:
9d:c9:7e:53:5c:50:b0:d4:ae:43:57:86:42:a3:72:
aa:b3:80:ba:0f:49:7a:9c:f8:8b:1e:c5:4b:ef:c6:
84:85:df:94:97:12:d0:bd:55:17:58:72:c6:3e:d6:
a1:72:f9:d5:e7:d9:62:46:71:95:2f:0d:e8:82:a4:
1b:88:00:e3:29:da:98:24:51:0c:a8:ab:2a:01:60:
e2:74:8f:0f:e4:6d:2b:53:9a:2c:65:8c:c6:ba:7c:
38:7a:92:b0:87:3e:b5:d9:be:02:e2:56:cc:8b:9f:
80:5c:1f:f7:94:42:36:09:3d:94:67:1b:c5:c5:bf:
bf:fe:13:7b:23:b1:c4:15:bd:12:79:1a:1e:af:9c:
09:13:c9:a5:ef:6e:91:d0:74:0b:06:ef:fd:95:b3:
4e:5f:53:56:35:3b:b2:70:e3:4d:1e:19:d2:34:96:
c9:6d:7b:0c:6b:82:0b:6b:51:b6:3b:d1:60:33:2c:
cc:e8:36:07:2b:ea:4c:8e:42:45:9b:a1:cb:3b:9f:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7c00::/40
2a0a:6044:8000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:3f:a6:e1:55:bc:41:88:da:74:c8:7b:09:9c:68:b4:bc:d5:
3c:4c:86:f6:44:95:c3:db:97:ff:c4:04:ff:86:49:b3:b6:60:
25:24:c0:8e:9a:cf:83:77:99:d0:cb:b1:69:2b:4c:63:16:b9:
a6:d2:15:24:bc:fb:e5:fa:e4:d4:49:da:e3:7d:0d:67:0f:b1:
36:3c:15:30:cb:12:71:16:63:0d:7f:45:d1:b0:ee:94:3f:57:
4f:3c:62:f1:bd:42:f7:ed:54:2a:66:bf:16:dd:8a:d7:41:b5:
1a:63:26:d0:7c:33:73:2e:83:23:69:60:e1:8f:46:f3:fc:7a:
59:96:4f:c0:fd:c1:72:83:a0:fd:25:24:4d:79:a5:ac:e7:b0:
50:de:d4:c2:bd:73:6c:cd:18:71:16:14:0f:98:29:9b:bd:35:
e7:cb:60:6a:fa:3a:a1:7a:6f:4b:db:55:20:fc:cc:1f:86:9f:
f6:d1:80:fa:d2:68:9d:8b:7a:cd:5a:b6:2f:25:40:f7:7c:0a:
de:65:96:f7:3b:30:fc:95:d1:a5:60:49:18:22:c3:f3:93:97:
19:41:77:c8:53:64:25:33:35:39:4d:bb:3d:cf:a0:cc:8a:e5:
a6:d4:26:94:90:18:55:d7:72:3a:04:08:58:17:c9:51:b9:f6:
02:74:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net