Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3MpiHiLLQz_riPiXEGi0LKfUHMY.cer
File: 3MpiHiLLQz_riPiXEGi0LKfUHMY.cer (raw, json)
Hash identifier: oCrBadjtL41VcVV9rd7dwOlRqA7fGEGUZSyuf+EWF5g=
Subject key identifier: DC:CA:62:1E:22:CB:43:3F:EB:88:F8:97:10:68:B4:2C:A7:D4:1C:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 77BA2015EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/07ae51-cce6-40b7-bdd0-c80e2888e339/1/3MpiHiLLQz_riPiXEGi0LKfUHMY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/07ae51-cce6-40b7-bdd0-c80e2888e339/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 01 Jan 2021 00:57:12 +0000
Certificate not after: Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources: IP: 45.159.100.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514223773167 (0x77ba2015ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:57:12 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=dcca621e22cb433feb88f8971068b42ca7d41cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:e7:c0:89:d2:c4:44:13:a4:59:18:95:66:
d1:da:dd:c3:f0:10:51:46:91:65:3b:5b:59:32:61:
26:fd:fd:33:6b:91:89:c2:fd:68:fe:d7:7c:d8:7e:
97:d4:87:f3:61:3b:da:7f:cd:b9:a4:ad:a7:8d:a1:
1e:c9:a6:60:50:f2:9b:7e:b8:7b:60:9b:80:5e:2b:
5e:29:6a:79:dd:49:ca:0f:9f:f7:7c:56:6c:1a:8e:
69:e8:62:ab:b3:6e:d6:74:0b:6c:8a:86:18:e0:04:
9a:38:08:45:9e:9b:c5:44:84:85:3e:0e:52:3f:5e:
31:ba:1c:fb:03:f6:8a:d3:16:7c:6a:37:d4:0d:c6:
e3:a0:3b:64:e6:47:1a:9b:35:e3:15:b7:a5:ca:fd:
81:f2:0a:01:d9:4a:aa:2f:92:80:62:10:9b:55:fb:
a0:c4:ed:5a:19:38:22:de:4b:ec:31:52:3a:37:7c:
85:8c:bd:c1:20:7e:d4:78:07:8e:f5:ee:09:0c:94:
48:f4:87:15:7c:f9:ce:18:c7:e7:c5:e5:fb:0e:9b:
43:52:93:d0:7a:51:a7:72:95:3b:a9:e1:71:02:bc:
02:9f:04:da:7f:4f:ab:a9:7c:e5:e4:2c:4e:c5:93:
e8:b0:50:85:55:ff:8a:dd:eb:fc:58:09:a8:17:5c:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:62:1E:22:CB:43:3F:EB:88:F8:97:10:68:B4:2C:A7:D4:1C:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/07ae51-cce6-40b7-bdd0-c80e2888e339/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/07ae51-cce6-40b7-bdd0-c80e2888e339/1/3MpiHiLLQz_riPiXEGi0LKfUHMY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:30:40:52:29:7b:88:87:ec:56:12:f8:50:4c:8b:70:cf:c5:
54:b6:e6:ce:29:9d:7e:3b:06:1c:33:cd:41:2e:86:21:65:bd:
c7:80:4d:ad:0e:6e:6a:3f:d0:8b:3e:de:0e:92:67:b3:42:9f:
ea:5c:e9:3c:76:d7:cf:b6:95:7f:d8:63:c2:18:e0:34:da:90:
0e:38:e0:e9:d2:b1:a9:e4:df:5e:ad:c4:bf:47:38:2d:8d:88:
18:cd:8a:a8:19:20:c3:45:57:06:83:02:a9:8c:f3:3c:5e:da:
50:3f:34:f2:b4:43:3d:a9:84:fc:b2:3a:1c:5d:fc:50:75:66:
61:f5:ab:e1:08:e0:d1:c9:a0:18:a6:f6:17:33:a2:7e:24:d7:
0f:f0:c5:49:8d:ce:31:60:aa:50:e2:73:44:87:fb:2f:91:8d:
52:a0:39:e5:b0:cc:3a:22:b0:10:ce:f6:a2:fa:4f:8e:97:1e:
8c:64:ec:12:da:79:f5:5b:55:7c:72:15:75:ea:a6:6c:1f:30:
62:26:c3:e4:22:dd:60:fc:10:72:3c:4f:62:72:4d:45:4a:4f:
85:41:fb:06:ec:4d:1a:20:f8:6d:83:0d:52:68:ed:db:fe:72:
aa:37:04:98:45:5e:e9:09:10:78:be:66:9f:02:16:f2:57:d9:
dd:34:1b:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-fra.rpki-client.org