Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
File: AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer (raw, json)
Hash identifier: mWHRYpby/Ivc+CT8B3HRk1enf8x9wHULUrlqRIbogb0=
Subject key identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 61DB44F75635457652643BCCEE626ECBF89F101E
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 24 May 2023 07:00:06 +0000
Certificate not after: Wed 22 May 2024 07:05:06 +0000
Subordinate resources: IP: 2a12:dd47:3300::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:db:44:f7:56:35:45:76:52:64:3b:cc:ee:62:6e:cb:f8:9f:10:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: May 24 07:00:06 2023 GMT
Not After : May 22 07:05:06 2024 GMT
Subject: CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:0a:1a:9f:16:1f:5e:ef:c5:85:a0:e2:34:
17:27:7d:de:11:4e:04:9a:b6:78:49:01:a9:fb:e0:
92:fc:ce:d4:c2:c0:22:46:9b:b1:31:e0:cb:83:ff:
10:ce:b1:6d:3a:84:cd:0f:75:b7:ff:7b:40:3c:0a:
56:25:b5:50:bd:8b:34:f2:2f:4f:dd:8a:6e:03:29:
56:a1:ec:c1:04:e4:47:70:7f:98:ac:6a:e0:f9:10:
f1:b0:0a:00:9a:39:82:10:96:2b:c9:1c:63:aa:30:
95:c8:80:3b:8f:83:58:61:7c:09:e4:1b:a1:02:b8:
3f:ce:99:fb:73:84:31:99:6f:9e:f7:d3:5d:6a:67:
28:1f:bd:ef:c2:88:b6:b7:3c:8b:bd:9e:5f:96:5a:
d7:be:6b:cc:61:f5:fe:2b:b9:88:d0:42:71:c5:f5:
bd:ad:e4:50:57:7a:03:54:07:ba:2e:11:4d:f5:f2:
f5:a8:b8:0c:dd:16:d9:8a:ac:28:14:42:fc:66:c5:
82:a8:b6:ff:f0:77:0c:9b:c3:d9:41:05:27:16:dd:
45:1c:87:9b:20:7c:aa:c2:36:20:44:fb:f5:c6:96:
ce:3f:09:a6:f8:7b:58:99:34:4e:9b:53:07:fe:58:
c1:74:0b:3f:78:71:f0:f0:83:71:55:e8:61:bd:03:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3300::/40
Signature Algorithm: sha256WithRSAEncryption
65:18:a2:8d:77:a3:ce:cb:6c:ef:a1:35:dc:a9:70:0f:83:a2:
a8:3c:5f:a5:95:f5:b0:e0:5e:fd:5b:73:c7:e4:88:a9:b8:d9:
40:a1:29:c3:91:2d:19:82:c1:a9:bb:9e:25:76:89:ee:f0:e7:
ea:0f:e7:a7:07:17:39:3c:1d:7a:e1:64:b5:57:64:e9:42:a6:
6d:67:a0:92:d7:e5:55:8f:af:db:91:1b:ec:c7:8a:64:59:11:
28:9a:4a:ed:61:50:ff:c5:89:8e:f3:57:bb:50:12:47:47:12:
9e:ce:b4:7a:a0:ea:1c:bd:6a:b1:2a:60:f8:97:7d:0e:84:09:
51:d7:fb:66:f8:12:5d:8e:d8:20:43:8f:73:04:d5:9b:9a:ac:
2b:e5:13:05:04:7a:dd:94:01:8c:86:8f:8e:23:5f:f3:c2:1f:
c7:82:7e:4c:b3:f8:22:af:bc:a3:48:f7:b7:c2:b5:0b:50:56:
10:4d:3d:18:f9:3a:62:c3:c0:69:ed:d7:00:87:29:fe:4c:54:
c7:c0:df:d2:63:9a:c9:17:60:88:aa:95:7f:fc:a1:73:74:96:
61:fe:3c:11:25:d2:da:c5:a8:a4:3f:cf:0b:34:84:0d:d9:36:
f9:7e:5d:b9:aa:cc:da:7a:d6:88:4a:d1:a5:f2:9b:de:fa:8c:
65:fe:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 25 23:34:46 2025 by rpki-client