Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
File: CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer (raw, json)
Hash identifier: EE2Qj9llkfmkXvWKLEZF0ewG5JYyHr4ocNMflGQSDCw=
Subject key identifier: CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 069D58D340EBF3B0766AB7D2CDA6DC619DDF223C
Authority info access: rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
caRepository: rsync://rpki.co/repo/AS203843/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 22 May 2023 21:43:44 +0000
Certificate not after: Mon 20 May 2024 21:48:44 +0000
Subordinate resources: IP: 2a12:dd47:8047::/48
IP: 2a12:dd47:80e4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9d:58:d3:40:eb:f3:b0:76:6a:b7:d2:cd:a6:dc:61:9d:df:22:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: May 22 21:43:44 2023 GMT
Not After : May 20 21:48:44 2024 GMT
Subject: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:b6:6f:b8:fb:f4:a3:d5:b9:5c:75:83:de:
78:b5:e1:2c:a6:88:ea:e1:b7:de:55:d5:96:bf:d2:
a3:ed:a9:98:33:ea:96:5d:9d:12:f8:13:cf:eb:43:
36:38:1c:c7:4a:90:e0:10:38:01:14:23:8c:76:1b:
83:00:20:e2:f7:1e:8a:03:20:1d:37:9a:15:66:4c:
52:2f:30:43:ff:ce:ad:82:85:03:37:68:ab:4a:fc:
43:5e:6b:7d:2a:b9:33:cd:cc:ee:24:e8:41:a7:53:
d8:91:29:94:78:4c:6b:45:70:78:3e:b3:b6:9a:ed:
d4:3e:e8:eb:83:f9:38:8e:1d:93:07:13:4c:88:3b:
ff:64:44:fb:26:66:71:3a:fa:be:c1:07:2a:61:98:
70:25:a1:f8:34:52:a7:b0:73:fe:f7:0f:9a:f1:05:
64:dd:f3:33:ab:87:10:d9:cc:9c:5f:80:2f:d5:0e:
b0:b7:be:ab:77:2a:01:5b:89:4b:45:2f:f1:19:7b:
38:d7:89:6f:0a:bd:1f:a8:75:11:37:6a:af:41:d2:
bc:e5:f8:47:da:61:cf:a2:23:31:ea:6c:05:6c:43:
06:9a:d7:01:41:bd:59:8c:f9:48:64:e3:15:4c:82:
c9:00:c6:4c:d1:64:5b:b0:df:cf:b1:b1:64:c3:cf:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS203843/0/
RPKI Manifest - URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8047::/48
2a12:dd47:80e4::/48
Signature Algorithm: sha256WithRSAEncryption
d2:2d:f2:1b:75:1b:2f:d1:62:ff:47:c2:97:05:c9:15:d4:b2:
6c:bb:6a:e3:e8:08:cd:84:a0:00:8a:ac:a8:49:4b:d1:6c:12:
e4:1f:55:6e:98:4b:62:43:3b:cd:12:e6:0a:01:ca:c1:b4:80:
53:2a:fb:f6:0d:50:ff:b0:dd:ee:40:c0:99:8a:67:41:31:ad:
74:c5:22:64:6b:33:4d:65:b0:dc:74:59:55:3a:19:06:66:30:
bd:1b:e8:a1:76:84:6a:c2:66:67:c1:b6:c6:30:0b:87:6d:ce:
ed:96:0a:58:f7:26:a5:f5:74:8f:4b:10:57:fe:8b:31:27:f9:
80:af:91:73:06:98:31:dc:90:3a:87:42:6a:f3:d8:50:2b:00:
de:8a:b2:ed:4b:2a:28:ad:72:e9:fd:9c:ff:86:64:e6:24:d0:
0b:0f:e6:20:9d:0d:a2:52:62:ee:b3:cf:92:f2:e7:14:26:07:
34:ac:9a:26:1e:53:8a:6e:d5:b7:93:2b:04:9b:25:e4:02:6a:
65:83:dc:a0:31:da:3c:37:7c:5a:57:56:0d:26:e8:a2:ad:00:
34:52:af:19:46:1c:b4:e2:dd:81:9f:f7:9d:07:95:c5:ec:01:
8a:4b:df:4d:f0:65:b4:85:27:ee:b6:78:73:6c:b5:01:27:b1:
b7:93:6f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 25 23:10:39 2025 by rpki-client