Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
File: MmnMKRuiYPxxEYaE57MC9QzpYo0.cer (raw, json)
Hash identifier: iHJ8mZISlTU62g8ZwsH9kNuwJj4FmBedSIzbmfQLfqc=
Subject key identifier: 32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AF0B8E6A02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Mar 2022 10:40:17 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 192.211.0.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751813159426 (0xaf0b8e6a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 24 10:40:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3269cc291ba260fc71118684e7b302f50ce9628d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:fd:14:e3:1e:cf:db:4d:a4:f6:a7:5b:e5:
af:92:cd:ca:a4:52:b5:db:4c:20:0a:f3:a1:b9:66:
11:e8:f0:bf:36:55:fa:e9:73:c4:4d:11:58:82:7a:
48:b4:bf:f0:fd:af:42:c9:24:54:e4:77:d2:56:eb:
75:f7:bb:15:2b:4a:fa:1f:48:c4:df:1a:34:5a:dd:
dc:aa:19:5d:7f:7f:f6:08:4d:46:80:d5:55:52:87:
2a:b7:69:64:ef:fa:ef:00:cd:ae:39:da:d3:5b:45:
8c:65:9f:69:17:c5:40:c8:bc:14:7f:44:83:bb:e9:
b3:12:a5:08:a3:ee:61:14:a0:75:9d:20:70:ed:13:
59:0c:d9:9f:08:8b:64:c5:c8:49:39:aa:42:22:f1:
4e:c1:19:4b:35:a2:67:49:d7:e4:57:d6:dc:13:f5:
ac:9a:26:d4:63:0a:cf:1d:e5:be:34:3d:69:31:dd:
01:80:58:94:9f:64:cb:89:17:80:79:ee:80:b9:73:
e5:d9:cf:24:6d:b9:17:e6:e3:49:c1:7f:e5:6b:7a:
d2:8a:92:7e:52:07:bd:35:88:41:12:0e:5d:42:5b:
34:7e:bd:7c:c6:06:cc:39:16:75:eb:cd:d9:b2:87:
88:b0:19:64:5c:4c:bc:fc:cb:a2:0c:18:ff:7e:a4:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.211.0.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c5:0d:d1:01:86:94:f3:32:a0:5a:99:49:65:52:15:19:d5:
11:c4:1b:29:86:4f:7b:81:55:aa:50:cd:1d:80:33:04:0b:f4:
f8:11:c0:f8:78:f8:47:cc:9e:e9:2e:8d:8f:dc:7d:44:a6:3b:
fd:4b:db:a7:e5:e1:6d:a3:b8:cd:c0:38:be:26:08:e2:9b:54:
98:fa:99:20:61:6d:ca:5c:44:a0:18:11:13:e3:88:6f:db:2a:
72:8d:89:39:c7:d7:73:15:cd:45:2d:65:25:e8:78:64:18:d1:
e1:29:dd:4c:16:51:73:47:af:6a:93:5c:8e:12:5a:23:08:5e:
dd:9e:7c:a5:f0:d3:0a:07:45:4d:b5:68:a9:fa:36:c2:a4:58:
98:2e:02:fc:25:f1:05:83:06:f8:fe:37:1c:1d:8a:c9:cb:b9:
26:95:31:ed:72:b2:78:ca:a4:2d:71:43:24:84:46:a9:cc:11:
9d:cb:c4:3f:2f:b6:5c:32:81:5b:1a:53:e5:66:e8:db:37:89:
c1:75:cb:db:96:96:e3:2f:01:99:3b:91:2b:56:1e:b8:8f:aa:
8d:17:0d:35:8a:39:b6:0f:8f:db:5a:0f:be:05:2b:02:07:64:
e1:36:ee:32:16:80:b1:f1:59:3c:53:96:77:2b:a3:54:7a:56:
33:a2:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:06:32 2025 by rpki-client