Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.cer
File: 96495E25A01953ACA1A500125DE32FD2CAD7B989.cer (raw, json)
Hash identifier: 5ncnbjbdm+X5NWrNP1AnvUa5Gi+jOgc9KAHQIprabFQ=
Subject key identifier: 96:49:5E:25:A0:19:53:AC:A1:A5:00:12:5D:E3:2F:D2:CA:D7:B9:89
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 775CF7E941EC247535E07ACA9A1964898A1423F4
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rpki.co/repo/Mlgt/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.mft
caRepository: rsync://rpki.co/repo/Mlgt/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 22 May 2023 21:45:59 +0000
Certificate not after: Mon 20 May 2024 21:50:59 +0000
Subordinate resources: IP: 2a12:dd47:3f00::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5c:f7:e9:41:ec:24:75:35:e0:7a:ca:9a:19:64:89:8a:14:23:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: May 22 21:45:59 2023 GMT
Not After : May 20 21:50:59 2024 GMT
Subject: CN=96495E25A01953ACA1A500125DE32FD2CAD7B989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:99:02:bd:94:fc:0a:7a:6a:5e:4e:41:f1:
78:6d:21:f9:2c:fb:c5:6a:8f:b0:82:d2:80:e8:3a:
50:5e:a2:fc:03:f2:a2:80:f8:3b:73:41:5c:da:11:
12:5c:fe:0e:5f:7a:e5:01:5a:d1:1a:8e:d4:05:5a:
76:73:59:58:27:c9:70:dd:ff:27:d7:8d:59:fd:90:
52:cd:04:45:99:07:26:87:97:10:1b:d8:e5:c6:9c:
f4:f8:cb:95:35:47:57:65:b3:0b:7c:46:6a:0f:91:
51:34:88:da:eb:a8:f6:5d:6a:4f:22:02:10:d3:a4:
7b:30:b0:36:fb:2e:db:25:6a:b1:85:a3:07:28:41:
35:8d:80:eb:f2:1e:d9:14:55:eb:2a:c8:fc:28:dd:
a9:31:ce:b0:b6:c7:c0:6a:10:38:e4:20:e5:f1:79:
2f:c4:54:7f:ad:4b:58:00:0f:7a:62:c9:cc:1b:7a:
f8:5d:5e:10:6d:fc:a1:37:d0:e8:91:7b:63:3d:fa:
ce:d4:36:fe:1d:e0:89:c3:ed:34:f2:c3:d3:47:bf:
c1:b6:79:47:ac:c2:d7:65:0e:ea:1a:ad:cc:1b:76:
69:9d:27:db:d8:13:e1:39:97:cb:b7:fa:99:75:0a:
18:9c:55:46:0c:1f:e8:8f:98:ea:0b:21:8c:59:90:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:49:5E:25:A0:19:53:AC:A1:A5:00:12:5D:E3:2F:D2:CA:D7:B9:89
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Mlgt/1/
RPKI Manifest - URI:rsync://rpki.co/repo/Mlgt/1/96495E25A01953ACA1A500125DE32FD2CAD7B989.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3f00::/40
Signature Algorithm: sha256WithRSAEncryption
25:b5:9d:1b:7a:a8:fc:35:87:2f:5b:83:e1:69:8c:01:ee:69:
f0:14:53:ab:24:03:62:d9:6a:93:8b:28:88:bf:f1:4a:85:5c:
5f:c7:71:55:67:f5:4e:e8:67:50:9e:24:51:29:fe:43:b7:47:
70:bb:74:6f:b0:48:97:25:0d:ac:be:05:31:9a:a5:00:21:f5:
86:48:bb:14:ad:f1:de:f3:ad:8f:c0:8b:8c:27:84:ac:8f:43:
ca:4a:e3:c2:2b:32:a9:2b:d0:33:3b:41:5a:29:ea:3e:b2:f6:
0a:ab:31:39:dd:28:71:2f:95:f6:e6:7c:09:ac:0a:98:02:9a:
c9:7f:36:72:ff:ec:37:ba:44:ce:8d:75:ca:5f:18:8a:ad:ab:
d3:4b:47:bb:41:37:93:8e:ba:e6:02:4e:bc:ac:87:8c:b7:8e:
6e:4b:b9:a0:7b:25:dd:c4:10:00:7a:02:62:f7:87:e9:61:cb:
11:85:e1:7a:27:3f:0d:7b:11:6c:83:00:e1:35:d7:05:97:1b:
76:7e:95:bc:77:31:4e:08:c6:ba:a7:77:c2:42:88:c9:62:3c:
79:96:27:fb:c4:87:8f:29:83:c0:b1:47:2d:38:dc:64:fc:e2:
20:63:ce:5e:fc:78:d4:c0:fc:3c:de:c4:74:0f:d6:91:28:bc:
ca:d3:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 26 01:17:36 2025 by rpki-client