
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer
File: 1BD68BB33CF4B2C0746A88537A13578C0074B4E6.cer (raw, json)
Hash identifier: d/uxGdcOAvhrtOmU2YA5M30lY3cps8lqWFjI8/KrM/w=
Subject key identifier: 1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial: 1844CC09FAFF0477DC533167FEB302CEB791B564
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 22 Feb 2025 16:30:57 +0000
Certificate not after: Sat 21 Feb 2026 16:35:57 +0000
Subordinate resources: IP: 2a0b:4e07:6000::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:44:cc:09:fa:ff:04:77:dc:53:31:67:fe:b3:02:ce:b7:91:b5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Validity
Not Before: Feb 22 16:30:57 2025 GMT
Not After : Feb 21 16:35:57 2026 GMT
Subject: CN=1BD68BB33CF4B2C0746A88537A13578C0074B4E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:9c:7e:72:66:39:80:7e:ef:4a:e3:2b:d6:
0a:e8:0a:71:41:51:aa:10:4e:71:12:10:d0:ea:63:
a6:ba:00:ea:07:26:3a:f2:2e:04:b6:7c:53:48:f6:
ab:8b:a1:ae:f4:bb:96:32:df:07:f0:e2:a5:5b:8a:
a6:1b:78:b0:f0:8b:c3:f9:a1:52:83:d2:89:b0:b8:
e0:9a:71:d2:c5:ed:2d:b3:12:57:18:05:c6:2b:ed:
98:82:db:f1:12:89:91:88:c8:46:7b:cd:63:fc:95:
af:70:36:07:56:a1:2a:06:65:3d:8f:73:0e:98:24:
56:e3:5b:21:6c:66:ac:3f:25:48:ee:11:b8:0c:1a:
20:0b:1e:19:db:5e:79:9b:ee:92:d8:7b:20:f1:8e:
8a:5d:9c:bd:9c:4e:d7:3c:e3:e1:d7:b5:53:71:94:
ee:66:60:e5:6c:a5:05:bc:a6:b5:6d:7a:f7:25:f4:
ef:bf:5d:06:4c:57:de:ca:84:88:4c:7d:91:ba:ea:
d7:58:62:d0:78:e6:98:12:86:20:10:f7:c9:12:1d:
bb:38:0a:fa:3c:84:8c:39:cd:93:4f:ce:16:e0:4b:
ff:3f:49:58:c1:f4:97:e3:ed:df:91:4f:05:98:c7:
46:74:69:4a:7a:e9:10:50:96:8a:36:e0:53:80:53:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1B:D6:8B:B3:3C:F4:B2:C0:74:6A:88:53:7A:13:57:8C:00:74:B4:E6
X509v3 Authority Key Identifier:
keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/1/1BD68BB33CF4B2C0746A88537A13578C0074B4E6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:6000::/40
Signature Algorithm: sha256WithRSAEncryption
96:be:9d:4a:3c:e4:44:2d:2b:77:fa:99:f4:90:b6:c1:b3:8f:
0b:79:53:3e:21:f0:d9:93:3e:82:d3:4b:df:72:c4:ae:94:a4:
34:2a:5a:64:fd:c4:b9:0a:d7:bc:57:a9:05:11:ec:11:4b:e2:
c3:88:05:e9:a8:99:86:72:c7:04:41:c1:b1:23:2e:47:ca:18:
8a:54:f3:e0:71:64:b8:71:64:59:a3:bf:e7:ca:e3:83:ee:4f:
a6:3b:23:38:83:43:89:78:e5:d3:f2:34:14:84:63:a1:bb:7e:
bb:50:3e:ef:7e:bd:41:f4:50:ca:65:c2:36:60:5c:d0:67:82:
c3:27:f1:18:81:2b:18:e8:1a:c1:79:f8:1e:27:62:34:76:36:
c8:c3:57:82:3f:55:62:ca:b1:37:ee:68:03:80:26:1f:8e:d3:
24:02:35:d9:fe:49:a0:6d:26:57:97:8e:bf:65:be:b1:7d:ee:
09:a8:78:be:c8:78:75:dd:b8:12:e5:6a:48:2a:0a:1c:69:f5:
9a:9e:ea:3f:a6:63:97:e4:9a:0b:e3:fb:43:26:59:76:8e:34:
d7:65:c9:a0:d3:30:0b:19:a9:5b:61:0c:4a:0a:91:36:98:a6:
87:9d:c9:a5:59:b4:68:a4:28:4f:80:b0:3b:25:14:58:85:8b:
6c:41:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:46:37 2025 by rpki-client