Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.cer
File: MWixdJ_XJ9XP9nt0LWUr0d3SKH0.cer (raw, json)
Hash identifier: v4bkRtSOSalRDxr4C9L4EI/8IhB2dOmyyo7iT0IqZIQ=
Subject key identifier: 31:68:B1:74:9F:D7:27:D5:CF:F6:7B:74:2D:65:2B:D1:DD:D2:28:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186E450D35DBEBA55FF602E3F6D6B78D5B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/937592-0d73-48cf-b0c3-79e2cac301e1/1/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/937592-0d73-48cf-b0c3-79e2cac301e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Mar 2023 08:09:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199436
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:50:d3:5d:be:ba:55:ff:60:2e:3f:6d:6b:78:d5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 15 08:09:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3168b1749fd727d5cff67b742d652bd1ddd2287d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:e8:ac:37:ac:fc:4a:50:ff:ff:9c:e3:78:
42:1b:34:19:05:4b:68:e8:a5:5c:dc:6e:f9:87:c3:
45:8e:11:89:1f:58:d2:87:1c:b6:2b:d7:cf:04:6f:
56:f3:e7:e6:a9:ce:dc:be:01:1c:76:0a:39:2f:a1:
a6:a7:96:1f:aa:1c:05:a7:5d:0f:43:04:c9:80:52:
1d:ac:bc:8e:49:1c:1b:45:fd:a2:bd:60:33:e5:ad:
5e:5f:20:79:3a:01:22:56:d8:8a:72:d8:c7:00:f7:
bf:13:18:af:cf:77:06:38:66:9f:4d:85:53:64:af:
4b:76:41:ba:23:4c:46:75:44:43:43:c0:63:32:7e:
2d:aa:26:a6:f3:f3:ec:76:d9:78:aa:ea:5f:29:10:
93:cf:d0:69:94:c4:ef:cb:69:49:f9:c9:fa:c3:6e:
ff:4b:34:df:25:43:c9:ba:c8:e0:4b:3e:39:9e:a2:
20:ab:6e:42:30:f4:4c:b7:43:ad:f3:76:e4:97:1d:
4c:64:0c:7c:c9:bb:20:6a:82:fd:81:6b:2c:25:09:
cc:a7:a1:0d:a0:4f:b1:26:69:67:78:7e:2e:a8:8b:
9c:d1:d3:47:47:b0:34:a0:35:14:b4:f4:81:77:ba:
36:c9:2f:e9:06:36:88:3b:bb:a4:72:05:2d:c1:2d:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:B1:74:9F:D7:27:D5:CF:F6:7B:74:2D:65:2B:D1:DD:D2:28:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/937592-0d73-48cf-b0c3-79e2cac301e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/937592-0d73-48cf-b0c3-79e2cac301e1/1/MWixdJ_XJ9XP9nt0LWUr0d3SKH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199436
Signature Algorithm: sha256WithRSAEncryption
22:e1:16:69:cb:5a:30:f2:ed:b1:02:aa:5a:fb:11:d3:62:61:
e2:a7:13:df:cb:fd:57:ad:6c:1f:8b:c1:f3:a5:2e:12:a5:81:
2e:e2:cb:5f:70:de:48:eb:e1:a0:dc:34:e4:30:fa:ee:b1:06:
21:2c:8a:e5:ca:a8:04:6b:05:c2:78:2d:52:0b:08:f9:24:71:
b9:79:4f:ea:97:ad:b3:e0:d0:49:05:7c:e8:b6:40:ce:d2:c6:
60:85:2c:10:e7:17:4e:c4:14:05:aa:24:d9:8c:1f:14:8e:ed:
11:7b:f6:f0:7e:16:db:9b:89:42:d4:7d:e1:04:32:58:62:f7:
12:6a:7e:c8:0a:c6:9a:79:4b:b5:6e:d9:b7:d4:dd:c8:d5:35:
56:a3:4a:fa:cd:be:1a:97:52:ab:b1:c6:0a:29:53:ed:ea:e8:
a7:f0:df:bc:66:a6:ae:e6:bb:43:83:32:59:8c:8e:a6:2b:a4:
24:fb:76:0c:01:66:ba:82:6f:e8:f8:6a:85:ba:f0:5d:8e:b1:
23:76:23:94:a6:1d:16:23:0d:98:31:34:67:77:45:f9:2c:09:
2e:dc:4d:ca:5b:4a:cb:9e:b5:f4:b3:56:6a:5a:8e:0e:f8:8f:
66:cb:0a:c3:03:dd:8c:1a:a4:9a:c5:8e:e1:7e:a9:fe:59:88:
9c:8b:78:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:39 2025 by rpki-client