Certificate
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/E41BCEA352405B7C6BE2D2B77E3632961599906B.cer
File: E41BCEA352405B7C6BE2D2B77E3632961599906B.cer (raw, json)
Hash identifier: 0IEDZ6pcYpAnSWRrXBMIoWkU5znA9TVnMiZKIWhzwq8=
Subject key identifier: E4:1B:CE:A3:52:40:5B:7C:6B:E2:D2:B7:7E:36:32:96:15:99:90:6B
Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Certificate serial: 6180F13F9418802B0B4AE2914B1D32760734FC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Manifest: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/2/E41BCEA352405B7C6BE2D2B77E3632961599906B.mft
caRepository: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/2/
Notify URL: https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
Certificate not before: Mon 10 Jun 2024 10:35:30 +0000
Certificate not after: Mon 09 Jun 2025 10:40:30 +0000
Subordinate resources: IP: 2a04:b905::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:80:f1:3f:94:18:80:2b:0b:4a:e2:91:4b:1d:32:76:07:34:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4
Validity
Not Before: Jun 10 10:35:30 2024 GMT
Not After : Jun 9 10:40:30 2025 GMT
Subject: CN=E41BCEA352405B7C6BE2D2B77E3632961599906B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:c9:f4:54:e6:2a:ff:29:62:85:5d:46:ea:
44:f7:2b:ac:c6:5a:04:c6:54:5f:42:2c:49:85:91:
b8:ff:fa:4e:d8:40:ee:8d:4f:0d:c4:aa:51:e4:55:
1a:b9:0c:ad:94:62:22:25:68:f4:c6:b0:fe:53:29:
01:96:f2:16:28:ba:11:7e:52:fc:28:b8:99:83:16:
b8:68:2d:1d:60:d2:de:a1:b8:78:3e:8e:25:02:b7:
46:97:b2:0c:c3:95:6e:ec:bf:7c:2b:04:34:15:fe:
14:91:05:fc:8a:02:c4:44:04:e6:4f:69:71:cc:59:
ea:52:4e:59:e3:ad:6d:4d:c9:10:e4:0c:aa:db:ea:
0d:fc:e8:b2:9e:8a:95:aa:be:9c:92:04:df:21:f7:
bf:83:b7:38:56:6d:f6:7a:55:f2:47:0d:b8:7c:fa:
fb:aa:24:0d:d6:d5:d0:5f:c5:f4:4a:9d:0e:76:2c:
a1:e3:99:85:2e:d2:01:77:a2:11:f3:b0:ca:26:7e:
78:a4:93:d4:95:66:f7:1f:b3:07:58:18:fd:1b:76:
31:cd:55:c8:fc:cf:79:ed:98:f6:c7:fb:f3:9c:4a:
ca:06:76:c2:29:9f:44:57:92:6f:6b:f1:b6:6e:a5:
ed:67:1b:eb:c6:79:34:ad:83:32:99:d2:04:c6:ed:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E4:1B:CE:A3:52:40:5B:7C:6B:E2:D2:B7:7E:36:32:96:15:99:90:6B
X509v3 Authority Key Identifier:
keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer
Subject Information Access:
CA Repository - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/2/
RPKI Manifest - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/2/E41BCEA352405B7C6BE2D2B77E3632961599906B.mft
RPKI Notify - URI:https://rov-measurements.nlnetlabs.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b905::/32
Signature Algorithm: sha256WithRSAEncryption
6c:94:d3:9a:95:76:34:4c:a8:43:4f:a9:b0:8b:8a:71:ae:d5:
5d:42:1c:4d:fd:28:cc:bd:3d:c1:1d:9d:d2:da:f2:09:9d:3e:
3e:6c:6f:b2:fe:c3:55:92:d3:1f:f2:e2:be:86:6d:ec:54:96:
a1:98:33:8d:7b:1a:88:41:c3:13:ca:3f:ec:64:6f:3b:2e:09:
a8:bc:60:29:58:44:10:ba:1a:90:43:72:81:70:7e:e1:6c:39:
29:9e:d4:db:e2:c3:94:ea:61:c7:0f:e2:8f:72:00:3d:79:94:
b6:d8:b2:10:6b:db:7f:f8:b4:0d:91:6f:d6:05:0f:af:b4:da:
04:fc:0e:fe:a1:b7:db:13:e2:ad:06:9e:ef:7c:6f:04:8e:f3:
1c:55:2c:4a:3c:21:88:cd:66:80:bc:7b:87:08:83:33:3c:9f:
3e:f2:ca:a8:95:3b:f3:60:0f:ff:ab:57:5a:49:0a:63:46:1d:
d0:37:de:8a:53:e0:c8:52:31:67:64:16:25:13:ae:88:74:7f:
3c:6b:e0:dc:cf:db:e3:8f:a3:33:8a:97:11:5b:4e:82:d8:2a:
ae:3c:bb:51:60:92:7f:3c:7a:92:17:a2:d0:54:2d:83:de:fd:
4d:6b:61:22:ee:7d:02:8f:f4:72:78:3e:10:16:6f:36:3f:30:
a5:08:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:38:51 2025 by rpki-client