Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JLW0Yz0HCDkcw4sKWyqos9amn1E.cer
File: JLW0Yz0HCDkcw4sKWyqos9amn1E.cer (raw, json)
Hash identifier: 7unQ6VLBpeThx8Eimiwnj8sKenQW083fVJrMCHbb8I8=
Subject key identifier: 24:B5:B4:63:3D:07:08:39:1C:C3:8B:0A:5B:2A:A8:B3:D6:A6:9F:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C0977DEA0B386C73FB93F4D96FEDE2CCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/d71b67-7e16-4857-90a4-888fe2ac97e7/1/JLW0Yz0HCDkcw4sKWyqos9amn1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/d71b67-7e16-4857-90a4-888fe2ac97e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 26 Nov 2023 02:31:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199693
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:09:77:de:a0:b3:86:c7:3f:b9:3f:4d:96:fe:de:2c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 26 02:31:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24b5b4633d0708391cc38b0a5b2aa8b3d6a69f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:bd:ac:88:e8:7c:22:8c:16:3b:9c:9e:28:
e0:f7:22:17:7c:b7:4b:b4:94:6f:1c:91:85:f9:8b:
6a:9a:24:49:0b:d3:c3:5b:9f:58:97:a6:4c:33:32:
76:f1:7a:14:32:f6:81:e3:35:0a:62:65:8a:8b:92:
c4:61:c2:59:67:95:e0:8b:59:60:05:67:fb:28:1a:
90:14:2a:a1:4d:14:56:02:c1:77:fb:95:a1:5a:ac:
21:9a:ca:a5:f2:4f:07:dc:f3:13:9e:23:af:e2:24:
7e:31:a7:01:c6:01:f1:af:0b:c6:05:c9:0e:b0:58:
37:50:4f:7b:b5:80:36:b3:f7:4a:b3:f6:ed:19:e7:
e8:bd:97:25:9e:ef:9d:a7:90:65:c5:32:32:f7:dc:
fa:db:ce:75:25:d8:0c:b5:74:96:d1:4c:5a:72:23:
62:8b:6a:a2:dd:54:2c:29:52:97:cb:cf:84:79:ca:
fb:f8:99:6c:0f:6d:f8:70:e2:6e:0a:2b:22:46:0e:
d4:e8:22:85:36:fd:30:aa:1f:db:3a:49:aa:62:56:
9e:91:a3:b4:ea:c2:84:db:9b:25:f4:b5:33:e8:01:
7c:18:52:68:e9:ad:b3:b1:c0:46:7c:a2:ca:68:3b:
b4:92:9c:6d:8d:88:77:fe:07:c8:da:1f:2e:64:97:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:B4:63:3D:07:08:39:1C:C3:8B:0A:5B:2A:A8:B3:D6:A6:9F:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d71b67-7e16-4857-90a4-888fe2ac97e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d71b67-7e16-4857-90a4-888fe2ac97e7/1/JLW0Yz0HCDkcw4sKWyqos9amn1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199693
Signature Algorithm: sha256WithRSAEncryption
65:e4:3e:89:92:f1:c1:1d:9e:07:93:4b:61:9d:7f:9a:7b:f6:
7e:08:34:22:da:6e:62:78:7e:9f:ff:4c:a0:9f:e4:29:c5:a0:
6a:70:99:de:1d:b9:1e:5c:56:da:fc:ab:35:9d:45:c5:c8:5e:
32:d9:45:6e:8f:a4:b4:81:eb:e3:a3:db:3f:71:5c:ff:85:d9:
77:bf:bf:16:ee:71:60:e8:34:57:f7:43:92:5e:97:60:6f:35:
05:8b:fc:88:d5:8b:1c:1d:59:b1:be:89:b5:ec:d5:b7:1c:c1:
15:81:06:9f:72:ee:3a:3c:b3:b3:ba:de:e9:69:a5:ef:36:be:
d6:64:04:4e:7d:46:8d:78:0e:b6:bc:15:66:24:ca:af:0d:d0:
8d:04:a4:77:26:44:79:c1:ed:40:1e:43:01:15:09:af:b1:e8:
fa:2c:cd:5d:44:45:9d:a5:36:67:31:0f:66:95:e9:fe:04:5a:
32:93:50:80:2b:e0:4d:1e:61:da:e4:78:24:55:7f:ca:e1:45:
51:c7:e6:03:1c:78:cd:ab:36:21:38:f5:1a:30:45:56:07:bf:
bd:8b:ad:c9:1a:bc:d7:23:19:be:48:21:ad:7f:15:bc:21:6d:
2b:43:a5:88:eb:8f:03:6b:1f:f3:22:15:f7:49:a7:13:4d:78:
41:e1:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:40 2025 by rpki-client