Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EtJ4hSmcJQVFZRvxd-CxoqZwcMs.cer
File: EtJ4hSmcJQVFZRvxd-CxoqZwcMs.cer (raw, json)
Hash identifier: /YXtharKnrvsXfvpQs7FwqNt1TcxtRC6mgFJzBAjZqQ=
Subject key identifier: 12:D2:78:85:29:9C:25:05:45:65:1B:F1:77:E0:B1:A2:A6:70:70:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9F619F01C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/086efd-5897-43be-87b6-a84a4a51cdb6/1/EtJ4hSmcJQVFZRvxd-CxoqZwcMs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/086efd-5897-43be-87b6-a84a4a51cdb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:01:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212074
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684537610689 (0x9f619f01c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d27885299c250545651bf177e0b1a2a67070cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:93:82:cd:8e:c1:eb:bf:1a:b4:fb:63:a1:
1f:bd:fa:8c:68:51:90:21:8e:2d:3e:b5:f4:e5:96:
fe:f8:25:20:85:d2:99:ea:3b:1f:e3:ea:ad:30:4c:
64:bc:4d:44:ab:c1:88:1d:64:0f:ba:47:84:9f:e0:
42:9a:ae:12:fc:d4:34:97:9f:87:91:df:6d:b7:35:
64:82:89:d2:a6:ac:b2:88:1d:3c:3a:91:90:63:d5:
29:36:17:26:82:e5:ad:2d:fa:da:83:61:d2:c5:1a:
e0:f1:82:cb:c9:d0:d6:24:ad:3a:23:8a:03:42:b2:
91:3c:25:b0:8f:6f:4b:27:9c:8b:41:f6:05:72:17:
d3:5e:cc:ac:47:70:d0:38:85:63:ba:6b:0e:b7:d4:
1a:2d:bf:4b:6d:10:94:bb:f0:2e:8f:ae:fa:85:16:
06:72:91:e9:ba:de:a0:7b:0b:37:d3:ef:da:b7:39:
b6:a8:6a:39:9a:6f:b8:e0:3f:04:cd:77:65:72:97:
cb:6f:03:cf:d6:ca:20:89:c9:7e:eb:75:69:13:d5:
0b:a3:98:94:02:bc:21:61:2a:ff:8d:a7:2e:bf:07:
e0:4c:19:93:8e:69:5f:4d:7d:42:c4:b6:5c:33:5d:
64:f6:ca:ca:99:c9:f3:3e:d2:25:8a:80:6c:cc:cc:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:78:85:29:9C:25:05:45:65:1B:F1:77:E0:B1:A2:A6:70:70:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/086efd-5897-43be-87b6-a84a4a51cdb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/086efd-5897-43be-87b6-a84a4a51cdb6/1/EtJ4hSmcJQVFZRvxd-CxoqZwcMs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212074
Signature Algorithm: sha256WithRSAEncryption
75:59:eb:66:62:81:14:36:0f:03:c5:d2:af:ae:60:5f:4a:99:
69:d7:3a:33:8b:e5:40:07:84:32:ce:56:cf:98:0e:1c:01:3b:
87:5f:31:10:2e:69:f7:6b:9d:24:c2:c9:d8:d3:91:4a:e2:35:
f2:47:96:14:53:7f:b8:25:c5:97:1b:d2:c9:0e:d0:0f:e9:48:
84:b2:c1:70:26:78:47:cb:2b:7b:93:a9:3e:59:ac:4e:db:c7:
a2:8b:72:10:24:da:6c:a6:a1:13:b3:b0:7c:ea:cc:07:cc:f5:
09:9f:95:03:e0:02:29:fc:2e:5a:42:87:52:92:64:af:60:aa:
19:1e:90:72:09:c8:b0:0f:1d:4e:27:c0:54:61:5e:30:16:f5:
bb:8d:3b:17:eb:ca:b0:0e:54:1a:6c:0f:ec:3a:db:fe:9e:93:
8a:30:b3:92:8f:c2:c8:20:70:d6:ae:38:f2:11:b1:33:cc:85:
a2:e8:2e:26:7d:73:89:35:00:21:6b:82:09:c2:97:57:45:ff:
ce:e9:c8:af:a5:00:d8:17:fd:9a:30:a1:63:cf:78:23:72:4d:
b9:15:c9:88:34:8a:b1:08:17:5b:cb:62:9b:4d:29:df:b2:a6:
c7:cf:da:96:a1:2e:f9:a7:bd:a8:c2:b1:fb:59:bb:cb:8b:1e:
9d:73:61:f2
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAJ9hnwHBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDYwMTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMmQyNzg4NTI5
OWMyNTA1NDU2NTFiZjE3N2UwYjFhMmE2NzA3MGNiMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAmdWTgs2Oweu/GrT7Y6EfvfqMaFGQIY4tPrX05Zb++CUg
hdKZ6jsf4+qtMExkvE1Eq8GIHWQPukeEn+BCmq4S/NQ0l5+Hkd9ttzVkgonSpqyy
iB08OpGQY9UpNhcmguWtLfrag2HSxRrg8YLLydDWJK06I4oDQrKRPCWwj29LJ5yL
QfYFchfTXsysR3DQOIVjumsOt9QaLb9LbRCUu/Auj676hRYGcpHput6gews30+/a
tzm2qGo5mm+44D8EzXdlcpfLbwPP1sogicl+63VpE9ULo5iUArwhYSr/jacuvwfg
TBmTjmlfTX1CxLZcM11k9srKmcnzPtIlioBszMyOPQIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFBLSeIUpnCUFRWUb8XfgsaKmcHDLMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzA4NmVmZC01ODk3LTQzYmUt
ODdiNi1hODRhNGE1MWNkYjYvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMDg2ZWZkLTU4OTctNDNiZS04
N2I2LWE4NGE0YTUxY2RiNi8xL0V0SjRoU21jSlFWRlpSdnhkLUN4b3Fad2NNcy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM8ajANBgkqhkiG9w0BAQsFAAOCAQEAdVnrZmKBFDYPA8XSr65gX0qZadc6
M4vlQAeEMs5Wz5gOHAE7h18xEC5p92udJMLJ2NORSuI18keWFFN/uCXFlxvSyQ7Q
D+lIhLLBcCZ4R8sre5OpPlmsTtvHootyECTabKahE7OwfOrMB8z1CZ+VA+ACKfwu
WkKHUpJkr2CqGR6QcgnIsA8dTifAVGFeMBb1u407F+vKsA5UGmwP7Drb/p6TijCz
ko/CyCBw1q448hGxM8yFouguJn1ziTUAIWuCCcKXV0X/zunIr6UA2Bf9mjChY894
I3JNuRXJiDSKsQgXW8tim00p37Kmx8/alqEu+ae9qMKx+1m7y4senXNh8g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:28:41 2025 by rpki-client