Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9MndSgYJ49Duv0LjzNZIkTeIn38.cer
File: 9MndSgYJ49Duv0LjzNZIkTeIn38.cer (raw, json)
Hash identifier: +UgyQIDFHQdQ4S9GfkLeoFWfOJnHFV8LQr3y9Gf9uKQ=
Subject key identifier: F4:C9:DD:4A:06:09:E3:D0:EE:BF:42:E3:CC:D6:48:91:37:88:9F:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A53A0366BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/9MndSgYJ49Duv0LjzNZIkTeIn38.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:59:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212854
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709642905276 (0xa53a0366bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:59:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4c9dd4a0609e3d0eebf42e3ccd6489137889f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:d8:cb:d3:26:fa:b7:79:eb:3d:13:1f:8e:
58:c4:c6:0f:9b:b0:73:b7:ce:bb:4d:63:2e:a5:52:
73:d8:fc:7e:29:79:2f:94:9a:58:c5:51:f6:1d:c9:
18:f1:71:18:88:51:88:3e:e6:b9:99:38:3f:87:05:
35:58:78:ed:44:6e:4f:ba:4d:37:e8:cf:6d:b2:9c:
e4:f6:09:0d:e9:d7:3b:09:68:25:7b:b0:35:77:d4:
fd:8b:0f:f2:c2:ed:2d:a6:e6:be:46:77:21:f3:98:
28:1b:65:7f:9e:62:b4:9e:b3:8e:ef:cc:36:95:b3:
2d:fa:2b:86:48:1b:73:37:74:7d:1f:55:b7:6c:82:
e0:f4:e7:08:21:3b:e8:d4:09:91:f0:3b:db:d3:af:
84:1e:52:26:b0:66:9e:07:d1:90:77:d7:1b:a9:9d:
e4:c1:d3:e4:96:9c:ba:f7:fa:6e:ff:52:af:74:e0:
75:8b:19:02:ea:29:ca:0f:31:bd:57:7a:0b:e9:16:
21:17:e1:d7:15:e2:99:e1:88:d1:58:6f:97:88:84:
34:72:60:c5:c7:b5:12:c0:58:f0:08:2b:d5:4c:f3:
58:76:53:2e:c4:88:c4:69:28:8c:2e:a5:2d:d8:04:
da:8e:ac:d4:92:4c:d3:63:12:8e:e7:b5:49:00:0b:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:DD:4A:06:09:E3:D0:EE:BF:42:E3:CC:D6:48:91:37:88:9F:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6363a1-aac6-46cf-8d35-aa8733ff5be1/1/9MndSgYJ49Duv0LjzNZIkTeIn38.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212854
Signature Algorithm: sha256WithRSAEncryption
73:3f:2e:9f:89:dd:ee:23:11:9a:c2:9e:f9:85:5a:e7:39:47:
32:04:3d:b9:d5:e5:2d:d8:65:0a:db:5f:0c:95:b7:c9:69:23:
be:25:32:92:8a:03:b8:34:d7:2c:23:81:f3:33:68:a6:45:31:
de:8e:13:ba:49:32:7b:ba:ba:17:f3:da:7b:41:9d:03:29:61:
86:14:41:f3:b0:50:38:f2:55:6a:48:b3:71:6d:0b:ee:db:f2:
ed:f3:5f:e5:a4:fe:78:85:6d:04:df:a7:1f:cc:00:df:1c:38:
c0:3f:a9:ee:69:1a:82:15:58:df:ce:71:be:ac:b0:a2:a6:b0:
a9:6b:ec:58:d3:c2:88:54:8a:8b:75:3a:13:e5:15:b0:96:52:
38:50:2d:e5:6d:c7:d9:c9:ff:be:2a:6a:80:35:1c:15:d7:49:
fa:f0:7c:ec:d1:dc:ea:d9:2c:49:a0:d8:45:08:32:de:8f:35:
f3:25:db:f6:e2:4c:d3:d3:c8:aa:5f:54:7d:ab:70:eb:12:73:
38:51:87:40:92:d2:22:16:b0:03:28:ba:5f:af:cc:1f:46:8e:
64:0d:59:86:53:c8:8c:f0:20:e1:c2:f4:39:98:02:44:67:c2:
cd:d8:20:8e:d3:c1:df:57:9d:db:18:2c:b3:c2:06:f5:54:63:
7a:07:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:11:45 2025 by rpki-client