Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrP0M6H08U5rOtyr7iDs5NW8ytE.cer
File: PrP0M6H08U5rOtyr7iDs5NW8ytE.cer (raw, json)
Hash identifier: xWD7t/J1CJfYjKD3YRzIMyKNXIJm52UQK5fSa7yQzcw=
Subject key identifier: 3E:B3:F4:33:A1:F4:F1:4E:6B:3A:DC:AB:EE:20:EC:E4:D5:BC:CA:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9CD4D87AC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/dadd8a-b6cf-4a8e-8da6-e9a3c0e26c2b/1/PrP0M6H08U5rOtyr7iDs5NW8ytE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/dadd8a-b6cf-4a8e-8da6-e9a3c0e26c2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:55:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 61953
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673585855170 (0x9cd4d87ac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eb3f433a1f4f14e6b3adcabee20ece4d5bccad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:d1:04:3b:ec:5b:d6:d6:dc:45:10:09:39:
b7:52:c5:ed:5c:90:df:48:a5:59:5a:2d:bd:c2:26:
ab:15:73:72:04:a3:35:a6:3a:76:48:93:2f:f0:c8:
0a:bc:9b:4f:4a:de:36:64:78:c3:24:c2:d2:85:15:
c3:68:c8:14:4d:27:63:34:6f:7e:9b:30:35:53:c7:
4c:d4:41:4e:dd:64:18:3f:87:f9:18:d8:1f:b7:2a:
c6:26:d7:ca:c1:fa:5e:4a:d2:f1:e0:ff:9c:6e:e7:
d5:fa:dd:6f:07:46:f9:91:4a:b0:6a:aa:54:35:d7:
c9:81:0b:2f:44:38:23:31:12:08:f6:90:45:8f:58:
30:25:7b:f6:7f:57:9b:65:2d:82:8a:5c:ef:e9:7b:
45:fc:9a:1c:33:6f:57:26:97:cf:d2:7a:86:49:7c:
a4:f2:c6:38:53:07:47:85:7b:4b:0e:81:02:f9:87:
7d:14:6d:f4:19:e2:f2:26:d5:fc:41:fa:40:9e:6a:
76:85:d1:e4:4a:34:3f:b7:40:13:5b:fe:c7:c0:cd:
27:1d:d9:e0:5b:34:c7:b6:91:1b:6a:97:bb:e9:20:
3e:14:95:fb:19:c9:1b:41:fa:61:52:b4:80:52:38:
88:d4:4b:a3:1c:40:38:80:ab:9b:0b:66:d8:e5:1f:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:F4:33:A1:F4:F1:4E:6B:3A:DC:AB:EE:20:EC:E4:D5:BC:CA:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dadd8a-b6cf-4a8e-8da6-e9a3c0e26c2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dadd8a-b6cf-4a8e-8da6-e9a3c0e26c2b/1/PrP0M6H08U5rOtyr7iDs5NW8ytE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61953
Signature Algorithm: sha256WithRSAEncryption
35:c0:84:f2:35:b4:f1:0b:bb:77:17:3e:e9:81:52:2d:2a:b3:
a4:c8:16:03:be:d4:0f:a8:79:95:f7:82:13:34:5d:07:f9:38:
ff:e5:52:c6:77:b2:68:8e:6e:71:13:0e:9e:6a:2b:9c:c8:ea:
f4:ba:7a:bf:da:4e:a3:ec:5e:8d:2f:56:49:55:68:61:2f:c2:
39:95:80:5c:d6:45:b7:9b:d6:f2:04:0b:4c:c5:56:7a:17:2e:
fc:b0:33:86:20:c7:c2:9a:51:1c:ed:61:fd:46:0e:0a:18:ad:
ba:87:ac:33:70:f1:6d:1d:e7:de:ca:54:f3:09:51:fe:08:24:
01:5f:4c:b9:6f:18:6a:3d:00:58:9d:03:1a:e8:22:66:c9:2a:
3e:94:ac:14:91:36:63:5e:a2:99:64:2f:c7:23:66:7e:a8:2a:
11:94:be:88:df:bf:ae:d0:bf:1a:e0:91:7d:e5:d5:29:f5:a1:
a1:12:13:d0:93:13:6e:e7:ee:81:de:cb:55:89:87:2c:68:ef:
69:2d:ea:6c:5b:1c:03:c6:90:f0:37:2e:56:22:9d:16:45:87:
78:fe:d5:62:14:69:38:c9:63:5a:15:37:23:37:14:c1:32:fc:
1d:1a:5d:15:e5:a7:ad:32:e2:bc:5b:30:91:6e:0b:e2:a5:c6:
e2:5b:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:13 2025 by rpki-client