Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
File: A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer (raw, json)
Hash identifier: 5UMQU8DdsSo++Do/PB9sdSJ/7AJGlgGhj11woeB4Dzg=
Subject key identifier: A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 34652AA6F59AC3701C3CDF7AC9A2ADE0D618F0E3
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
caRepository: rsync://rpki.co/repo/Riffi/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 22 May 2023 21:46:21 +0000
Certificate not after: Mon 20 May 2024 21:51:21 +0000
Subordinate resources: IP: 2a12:dd47:8046::/48
IP: 2a12:dd47:8700::/40
IP: 2a12:dd47:d000::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:65:2a:a6:f5:9a:c3:70:1c:3c:df:7a:c9:a2:ad:e0:d6:18:f0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: May 22 21:46:21 2023 GMT
Not After : May 20 21:51:21 2024 GMT
Subject: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:1d:ca:f2:de:9a:52:4a:9e:8b:ba:56:16:
ad:7e:f7:6a:54:42:38:0f:1c:a7:55:89:d1:76:bb:
20:65:eb:8d:a3:3e:52:f0:7c:8c:3e:3d:05:4a:88:
ce:e3:85:01:64:7d:ab:52:b6:17:32:e5:80:cb:9a:
d3:d8:21:f3:77:7b:ab:55:10:ba:5a:95:1a:d9:cc:
79:c2:06:d1:7d:f9:b1:b1:29:62:a3:15:6b:a3:2c:
91:98:16:6d:a5:1e:fe:62:78:54:4c:0a:fe:78:ff:
12:21:1c:aa:23:20:e7:16:52:e1:ea:4f:0c:88:2b:
5e:eb:44:8d:25:58:e1:ca:2f:de:9f:9f:d2:92:77:
51:38:b6:fd:91:4f:65:ca:8c:22:dc:b5:f0:e4:b3:
ea:7f:c4:a2:f4:99:e2:b7:28:32:16:0a:37:c0:00:
cc:df:80:52:08:bb:73:82:21:4e:03:f9:39:c6:60:
ff:a1:b2:84:a0:21:db:c1:82:f5:78:5b:a4:47:01:
ab:ef:75:4e:b8:e1:ec:a9:f2:8f:27:43:ed:8e:82:
c7:d0:48:07:87:b5:32:56:51:93:48:6b:ce:c0:3a:
15:73:89:bd:39:18:f0:e7:1e:11:4d:1b:7b:1c:e1:
6b:4c:d0:2a:73:d3:86:1b:db:fb:11:15:fa:34:5f:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Riffi/1/
RPKI Manifest - URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8046::/48
2a12:dd47:8700::/40
2a12:dd47:d000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:85:3a:99:fc:b5:b4:15:7e:60:dc:59:d7:bb:04:bc:df:5c:
ea:08:23:bc:79:e5:3a:83:51:16:1c:1f:a7:0b:45:65:a3:8d:
a9:ad:a4:c0:fb:dc:ca:28:b0:e3:aa:40:e2:08:8f:de:9d:78:
5c:e0:c6:5d:16:85:0a:55:ad:5f:59:19:3f:37:30:ec:69:24:
c4:0b:82:e1:d4:6a:f7:37:11:3a:9a:22:32:2a:b4:a1:b6:47:
ee:c0:f3:c1:04:be:64:88:0d:a9:3d:68:94:88:5b:7b:ec:f7:
1b:b1:56:43:45:22:75:fa:1d:69:3f:61:4e:b9:7b:20:ce:a1:
78:84:3a:cf:6d:d7:4a:08:12:ba:0b:a6:9e:f8:fb:50:95:e8:
1e:d7:75:6e:c2:27:70:e4:67:ed:ad:c7:96:c1:b0:d6:64:8e:
09:f5:da:6f:c8:f5:b9:c4:7c:d7:ed:0a:cb:d8:8b:9a:44:53:
ed:c8:71:34:ad:97:5e:b4:dc:7c:7a:91:ee:91:7f:6f:16:f3:
b9:8c:80:ed:bf:44:88:14:30:34:94:d3:19:62:54:fd:7e:f9:
70:cb:1a:3a:23:bf:4f:12:db:3f:35:c1:6a:26:e5:d7:59:9d:
cd:c1:e7:6e:38:cb:6e:a8:ce:5e:6d:ee:bb:ff:67:fb:63:81:
6f:22:1e:70
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUNGUqpvWaw3AcPN96yaKt4NYY8OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzA1MjIyMTQ2MjFaFw0yNDA1MjAyMTUxMjFaMDMxMTAvBgNV
BAMTKEE3REJEREU0NUI5QkVEOUMxN0NCMjBGMkFFMjlFQzcwM0M4NkExMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlR3K8t6aUkqei7pWFq1+92pU
QjgPHKdVidF2uyBl642jPlLwfIw+PQVKiM7jhQFkfatSthcy5YDLmtPYIfN3e6tV
ELpalRrZzHnCBtF9+bGxKWKjFWujLJGYFm2lHv5ieFRMCv54/xIhHKojIOcWUuHq
TwyIK17rRI0lWOHKL96fn9KSd1E4tv2RT2XKjCLctfDks+p/xKL0meK3KDIWCjfA
AMzfgFIIu3OCIU4D+TnGYP+hsoSgIdvBgvV4W6RHAavvdU644eyp8o8nQ+2OgsfQ
SAeHtTJWUZNIa87AOhVzib05GPDnHhFNG3sc4WtM0Cpz04Yb2/sRFfo0X6YPAgMB
AAGjggJEMIICQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSn293kW5vtnBfL
IPKuKexwPIahNjAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG
M0U2LmNybDBmBggrBgEFBQcBAQRaMFgwVgYIKwYBBQUHMAKGSnJzeW5jOi8vcnBr
aS5jby9yZXBvL0F1Z3VzdC81LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzND
MDVCRkQ5OUYzRTYuY2VyMIHKBggrBgEFBQcBCwSBvTCBujApBggrBgEFBQcwBYYd
cnN5bmM6Ly9ycGtpLmNvL3JlcG8vUmlmZmkvMS8wVQYIKwYBBQUHMAqGSXJzeW5j
Oi8vcnBraS5jby9yZXBvL1JpZmZpLzEvQTdEQkRERTQ1QjlCRUQ5QzE3Q0IyMEYy
QUUyOUVDNzAzQzg2QTEzNi5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5y
cGtpLmNvL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcAKhLdR4BGAwYAKhLd
R4cDBgAqEt1H0DANBgkqhkiG9w0BAQsFAAOCAQEAn4U6mfy1tBV+YNxZ17sEvN9c
6ggjvHnlOoNRFhwfpwtFZaONqa2kwPvcyiiw46pA4giP3p14XODGXRaFClWtX1kZ
Pzcw7GkkxAuC4dRq9zcROpoiMiq0obZH7sDzwQS+ZIgNqT1olIhbe+z3G7FWQ0Ui
dfodaT9hTrl7IM6heIQ6z23XSggSugumnvj7UJXoHtd1bsIncORn7a3HlsGw1mSO
CfXab8j1ucR81+0Ky9iLmkRT7chxNK2XXrTcfHqR7pF/bxbzuYyA7b9EiBQwNJTT
GWJU/X75cMsaOiO/TxLbPzXBaibl11mdzcHnbjjLbqjOXm3uu/9n+2OBbyIecA==
-----END CERTIFICATE-----
Generated at Mon May 26 01:05:16 2025 by rpki-client