Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer
File: E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.cer (raw, json)
Hash identifier: P2eh8cJW4Rdo9h94sxh9k56/tOgLSpg5+Ea3Iioi6l8=
Subject key identifier: E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 1537261A881FA93FCD2C32C8A35C72C7673B1260
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 14 Dec 2024 12:18:36 +0000
Certificate not after: Sat 13 Dec 2025 12:23:36 +0000
Subordinate resources: IP: 2a0b:4e07:3000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:37:26:1a:88:1f:a9:3f:cd:2c:32:c8:a3:5c:72:c7:67:3b:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Dec 14 12:18:36 2024 GMT
Not After : Dec 13 12:23:36 2025 GMT
Subject: CN=E8C9690FAC27EA3A350216F536D777F5F3E6DC0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:85:a7:a9:47:bd:34:a1:e6:34:69:5f:23:
c3:ae:9e:db:79:8d:64:a4:a8:fd:47:8e:08:b1:a7:
8b:1e:4f:b8:96:96:13:9e:7f:1e:0e:8a:be:f5:55:
15:9a:6f:e8:f3:36:4a:7a:b9:fa:88:a5:78:0e:2f:
5e:d4:c2:98:b1:81:68:5c:0b:22:04:ea:a8:00:59:
8c:37:e4:42:b7:01:38:ec:51:72:7b:16:c7:7c:5a:
39:c8:23:16:48:11:5b:e6:c0:cd:c4:e9:aa:7c:92:
8f:73:ad:17:ca:e8:a3:76:b1:46:d2:ca:6c:5f:8e:
7a:74:ea:ff:56:c3:ff:70:c2:d5:95:b9:d3:d3:dd:
21:5b:38:0d:85:e7:22:9b:05:37:4b:7e:32:b1:fe:
ab:1a:f2:6f:c3:76:da:44:4b:2a:4a:2c:b5:24:0f:
75:e6:9e:3f:da:3c:36:6b:1d:9f:04:ab:c8:f4:b4:
64:82:ba:31:34:a7:7e:7a:fd:ee:04:75:b9:c5:8c:
d6:cd:5f:95:e1:1c:7b:d4:b9:28:96:ca:f2:9b:81:
91:79:ee:a2:0d:36:75:38:56:2c:5f:91:51:16:68:
d5:75:76:62:50:44:4c:4e:a7:4c:36:c8:9f:64:4e:
95:49:ae:b0:4d:b5:aa:99:29:32:25:8f:8d:53:ba:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E8:C9:69:0F:AC:27:EA:3A:35:02:16:F5:36:D7:77:F5:F3:E6:DC:0F
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/1/E8C9690FAC27EA3A350216F536D777F5F3E6DC0F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:3000::/36
Signature Algorithm: sha256WithRSAEncryption
75:e8:e2:06:a7:22:92:23:10:17:ba:0a:be:88:0d:27:21:94:
89:5f:c6:a3:0b:38:a7:50:5c:12:b0:4a:f5:b7:23:ad:82:fa:
b2:68:66:1a:8e:a7:7f:87:f6:82:e1:fc:8e:82:01:38:e8:5b:
eb:36:dd:21:46:a3:64:eb:2a:49:52:96:8e:b2:51:c4:81:b2:
3a:3b:b6:30:f1:52:80:20:7b:c6:ab:45:23:2b:f8:57:a0:5d:
72:5e:9e:e7:81:1d:44:9b:29:7e:32:fb:59:ba:20:b3:82:41:
11:e9:a9:e5:68:f8:e0:35:35:15:12:45:fe:a9:cf:e1:97:f1:
25:5a:8b:ea:36:6b:9f:0f:eb:46:1a:3c:08:52:c0:d6:57:b3:
20:6e:f8:52:21:7c:b0:b5:36:34:d4:49:4f:53:40:92:a2:c0:
8a:50:86:6e:d9:3f:e6:6d:b3:97:c7:0b:84:6c:0a:1d:9f:f0:
0f:7d:1c:8e:5a:1b:88:6a:fc:5f:17:c5:e8:f8:3e:50:b1:55:
46:aa:a1:b3:19:a9:2e:b8:ff:bb:18:b5:db:cb:f4:9c:23:e2:
50:9d:b6:ce:52:70:08:b0:dc:f2:5d:d0:a4:34:0f:9d:24:72:
61:fa:9f:f0:70:17:8b:01:b5:3c:a8:c6:c5:20:24:33:63:e8:
de:2d:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:55 2025 by rpki-client