Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/D75C25E8CA5C81B5D2D34651FD876F88BF4B9198.cer
File: D75C25E8CA5C81B5D2D34651FD876F88BF4B9198.cer (raw, json)
Hash identifier: uCfqR4pPzF043IjbR2L4D5Z1YSplGTLvpneQJSoK3TM=
Subject key identifier: D7:5C:25:E8:CA:5C:81:B5:D2:D3:46:51:FD:87:6F:88:BF:4B:91:98
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 73FE4FDA14E312D3F10859D8E02978F51652EBA1
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1b700b6f-3b01-4d91-82d9-7b8ed28cadd6/1/D75C25E8CA5C81B5D2D34651FD876F88BF4B9198.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1b700b6f-3b01-4d91-82d9-7b8ed28cadd6/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 22 Mar 2024 18:53:17 +0000
Certificate not after: Fri 21 Mar 2025 18:58:17 +0000
Subordinate resources: IP: 2a0a:6044:7c00::/40
IP: 2a0a:6044:8000::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fe:4f:da:14:e3:12:d3:f1:08:59:d8:e0:29:78:f5:16:52:eb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Mar 22 18:53:17 2024 GMT
Not After : Mar 21 18:58:17 2025 GMT
Subject: CN=D75C25E8CA5C81B5D2D34651FD876F88BF4B9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:c5:f7:3a:35:83:78:3a:4e:fc:41:3a:8a:
b1:c5:f6:d8:9a:76:96:b4:1b:7a:8b:48:6e:a3:d8:
a1:72:4d:2c:cd:cd:b3:78:06:41:0c:63:d6:31:7a:
cd:cb:b3:40:0f:58:f0:3c:5a:a8:20:36:6a:75:60:
1b:53:09:0a:16:dd:e3:73:af:78:9c:c7:73:09:3b:
2d:cc:6b:cb:59:0d:b2:7c:94:1c:c8:ad:87:93:82:
c9:94:c9:ff:b6:71:49:db:39:4e:28:87:1d:80:58:
fd:a3:cf:22:10:71:06:3a:7f:40:1c:b2:66:60:d6:
77:1d:09:f8:03:98:ce:7d:7b:9e:aa:3c:52:ac:80:
c2:b1:a7:3f:41:fd:65:c6:33:1b:df:e6:da:8d:76:
ff:a1:8e:9e:92:4d:a9:ae:d3:8c:3a:68:ba:91:a8:
54:1d:5a:fe:c0:8e:6e:30:30:1b:ef:43:ce:18:d0:
91:1a:e1:a7:79:8a:30:b9:7b:24:61:2e:55:58:3f:
8d:02:13:45:ee:ad:88:dd:87:3e:4f:55:26:eb:78:
87:92:e2:06:fc:81:68:8b:2d:9c:f6:e9:aa:77:98:
6c:cb:bd:b6:f9:69:be:cf:87:be:d6:bf:26:49:de:
5d:b4:29:98:90:56:1f:85:9b:a2:81:85:d5:db:d4:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:5C:25:E8:CA:5C:81:B5:D2:D3:46:51:FD:87:6F:88:BF:4B:91:98
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b700b6f-3b01-4d91-82d9-7b8ed28cadd6/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b700b6f-3b01-4d91-82d9-7b8ed28cadd6/1/D75C25E8CA5C81B5D2D34651FD876F88BF4B9198.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7c00::/40
2a0a:6044:8000::/36
Signature Algorithm: sha256WithRSAEncryption
39:f4:78:ef:f4:1d:9c:1f:7a:10:15:c5:3c:2c:63:65:f6:55:
d8:77:70:27:38:17:2a:4c:f3:b2:11:82:1b:b2:15:87:60:6d:
f9:ea:d5:84:cd:4f:6d:08:f9:10:ce:21:76:63:57:d5:42:09:
20:3e:94:c5:5b:4d:80:f0:b0:52:61:00:a8:bf:4f:7a:06:4f:
4b:56:e8:21:8a:d0:b6:d7:db:c7:e0:fa:7e:1c:b5:55:02:d8:
f9:13:89:0e:0b:ce:4b:96:31:87:62:c6:40:aa:ad:88:9a:00:
2e:d7:54:06:1b:e9:f2:bd:d5:73:08:1a:67:5d:7c:fd:c6:c7:
85:32:2b:78:fa:f2:4b:03:c7:c1:c2:09:85:3c:0a:ae:5c:88:
2d:be:df:55:05:a1:c1:b7:ef:73:ea:99:47:20:ee:d8:32:b3:
23:a1:7a:44:7f:c3:07:c9:86:42:05:21:3f:25:70:58:b6:29:
51:ca:87:a6:e2:f4:2d:64:fe:90:8b:09:83:b5:12:3d:57:62:
eb:d6:e1:10:84:49:5f:27:83:f0:b0:45:38:3e:f5:01:c6:87:
a2:01:94:9d:65:2f:64:9a:0c:c8:8e:00:44:80:b0:62:59:66:
c9:0c:e7:25:ea:4e:75:fa:7d:8a:be:21:a4:45:9d:b2:42:f1:
d2:5a:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:58:18 2025 by rpki-client