Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MtNMIb-r7NuYVmYygQ-SSjlwbl0.cer
File: MtNMIb-r7NuYVmYygQ-SSjlwbl0.cer (raw, json)
Hash identifier: nlDaqarzXxt6QhWmNuAkmn99O2tDW9xvcu9mIcHL47o=
Subject key identifier: 32:D3:4C:21:BF:AB:EC:DB:98:56:66:32:81:0F:92:4A:39:70:6E:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD12D59F39B54A2956D6C0ACB1F2333
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/74a195-b192-4b03-84eb-d1c9f10df7e7/1/MtNMIb-r7NuYVmYygQ-SSjlwbl0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/74a195-b192-4b03-84eb-d1c9f10df7e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.206.176.0/23
Validation: Failed, certificate revoked on Mon 17 Jul 2023 07:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:2d:59:f3:9b:54:a2:95:6d:6c:0a:cb:1f:23:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32d34c21bfabecdb98566632810f924a39706e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:e7:48:f7:19:22:44:d2:8a:48:04:13:86:
d1:f5:2c:f4:14:be:f6:3e:9e:aa:30:99:ae:a9:42:
5d:5a:17:a9:41:4c:0c:0d:bc:13:e1:f9:a0:ee:d4:
85:b1:40:24:21:d8:9a:33:1c:0e:e2:e6:ef:a3:08:
32:e1:15:73:0d:f8:1c:e2:6f:ab:88:dd:ff:54:d0:
60:66:3b:86:2c:75:65:51:78:9d:79:7a:f4:07:a8:
10:fa:bf:11:f7:5c:34:66:3f:61:39:de:e9:dc:14:
fd:06:f2:42:8c:3e:0b:86:1b:24:04:a3:be:52:aa:
3d:65:f7:29:c4:d1:05:87:6f:ba:ab:2c:84:db:6e:
7c:f6:c2:1a:f5:e0:37:ca:f7:fa:e3:8c:13:5f:df:
1e:3b:ad:90:0f:1d:f2:e0:30:b2:71:47:10:59:1a:
be:84:a4:11:86:5d:89:dd:fc:84:6b:8e:8d:b0:e0:
9e:45:06:b9:ce:c4:18:be:3a:d7:d8:de:ec:f3:28:
bd:c6:cb:4c:15:9e:3e:b1:f2:33:db:13:b7:7e:91:
aa:c6:8b:0b:2a:85:3a:34:81:f6:c9:3e:fa:dc:fc:
4c:32:31:8c:33:8c:c4:1e:f5:94:79:63:25:b2:41:
21:40:29:e0:4c:19:2c:fe:f2:5e:d2:46:4b:e4:43:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:4C:21:BF:AB:EC:DB:98:56:66:32:81:0F:92:4A:39:70:6E:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/74a195-b192-4b03-84eb-d1c9f10df7e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/74a195-b192-4b03-84eb-d1c9f10df7e7/1/MtNMIb-r7NuYVmYygQ-SSjlwbl0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.176.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:31:e3:18:4f:6b:2d:88:53:5b:0a:90:94:1d:1f:a3:45:84:
21:0d:a4:be:d4:0d:1a:56:04:c3:c7:7d:5a:60:02:ff:61:f0:
e6:1a:6c:e5:a9:4b:cc:32:93:d5:55:c0:1f:8c:2d:51:4f:3f:
3a:d5:82:2e:b9:4c:c1:2d:20:54:cf:20:88:40:5c:44:5d:1c:
fd:f7:5b:a9:5f:6d:b2:db:22:16:56:98:2b:d5:26:b1:bc:cb:
d7:5d:21:54:dc:db:1d:a4:15:f2:4a:4f:b8:79:78:55:38:ea:
3c:af:cf:c8:ae:11:c9:f9:fb:ff:14:4c:b9:31:d3:e5:fc:49:
12:42:a8:92:cf:c7:4a:0f:65:0f:95:18:a8:14:32:03:78:b1:
12:81:68:e9:f1:83:53:0d:d9:7f:04:1d:3b:73:48:02:05:86:
34:88:bd:b3:f0:07:7c:0c:d4:a1:c5:ce:77:a3:d7:52:ca:d2:
0d:11:98:e1:6c:68:59:4b:64:bb:17:00:7a:75:bf:9f:eb:d9:
02:23:08:59:24:7b:97:97:1f:4c:80:2f:3e:2a:db:52:09:06:
2a:5f:12:3c:0f:55:92:c5:cb:2d:26:eb:2c:87:3e:9a:a1:3e:
7b:5f:48:35:60:cd:67:fa:55:2e:21:3b:d1:f0:c0:1e:2a:31:
ae:a1:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:04 2024 by rpki-client on console-ams.rpki-client.org