Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NTjwt9in4tMTzKFHFMsxajDS6NM.cer
File: NTjwt9in4tMTzKFHFMsxajDS6NM.cer (raw, json)
Hash identifier: oYaKZ4ftYmh91wiSadELbfGcpA2UA4tAdqft84zLIJs=
Subject key identifier: 35:38:F0:B7:D8:A7:E2:D3:13:CC:A1:47:14:CB:31:6A:30:D2:E8:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B2AAEC26177440E75838329053E83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/NTjwt9in4tMTzKFHFMsxajDS6NM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.105.0/24
IP: 2a12:8f00::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:2a:ae:c2:61:77:44:0e:75:83:83:29:05:3e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3538f0b7d8a7e2d313cca14714cb316a30d2e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:8b:b3:5b:c3:c1:83:d6:40:b2:b1:76:87:
6b:f8:cc:17:a7:51:05:35:ba:a3:e9:55:01:67:30:
92:e7:06:c2:b9:64:37:87:ca:97:ef:ae:4c:74:e2:
31:c9:ae:46:44:2d:36:e3:00:5c:54:d9:dc:fe:91:
cf:41:9b:50:a1:64:c6:80:45:db:a4:39:c4:0c:9e:
4d:a0:5c:ad:3f:36:13:c1:d6:b8:54:b7:2a:f5:24:
dc:4e:31:58:9c:53:de:02:a2:78:5a:d7:36:91:4b:
f8:9b:78:f8:48:02:5e:a3:b6:48:2c:b1:a8:8a:75:
5a:c0:93:d6:24:40:38:cd:f8:97:21:ee:85:78:45:
c0:0e:26:9a:cf:f7:31:29:be:be:d4:e1:03:ff:f2:
65:d6:7f:31:b7:bf:51:a5:2d:db:df:4c:d0:21:1c:
50:42:7d:a0:57:d4:e6:c0:34:b4:6a:db:98:aa:8b:
5b:a1:4d:fb:aa:8d:98:ee:51:0a:d7:18:e6:cb:dd:
b7:c6:fd:6d:97:b4:a0:19:1b:d7:9e:fd:8e:f6:b4:
bd:c0:56:69:68:39:8a:b3:36:e1:e3:a0:19:f2:29:
66:ad:7d:ca:6c:34:e6:99:e1:68:f9:a8:8f:a7:7e:
20:c1:41:ca:28:05:90:3c:63:66:b1:73:56:62:d2:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:38:F0:B7:D8:A7:E2:D3:13:CC:A1:47:14:CB:31:6A:30:D2:E8:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/482e24-db65-4b49-ad76-a40f9e7863bc/1/NTjwt9in4tMTzKFHFMsxajDS6NM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.105.0/24
IPv6:
2a12:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
22:c2:a3:64:2c:d0:fb:62:4e:90:c5:57:d5:a9:e6:2f:06:39:
7b:26:ee:17:0b:61:9b:d9:75:88:42:13:d9:a6:a6:13:bb:bd:
4d:bf:34:39:1e:6e:9c:7f:e4:1b:58:82:b7:d7:01:1e:61:e7:
cb:f8:89:56:0f:18:3c:ef:0c:75:36:14:90:58:1d:d1:21:78:
89:f3:df:67:c9:c6:e1:c5:a1:9a:89:a5:19:23:b4:21:10:02:
77:ed:d7:51:9d:b6:7e:21:70:de:aa:d1:35:3e:b7:e0:60:94:
26:e1:ea:d2:f7:7c:90:66:e9:62:0a:9d:af:36:a3:4d:08:c1:
d0:1f:a0:bb:86:69:aa:23:f4:11:e6:f6:be:2a:fd:85:7b:16:
cf:b1:36:92:bf:c2:3d:f2:cc:74:b4:7a:b7:d5:25:6e:fa:10:
cc:59:41:d5:9f:86:dc:9d:f6:c7:c9:b5:71:b2:0e:0d:41:3f:
6f:af:8c:0f:eb:fc:3d:dd:c7:d8:fc:ad:36:a7:9a:88:bc:ce:
10:f3:64:8b:1d:86:e5:3e:6d:4c:37:b6:fb:0d:96:71:78:d8:
1b:87:8b:97:9b:3b:3e:3c:cf:76:26:33:c8:bd:cf:1a:3d:66:
6d:66:d7:f4:89:77:2c:38:94:66:a9:77:7c:78:e9:ef:83:b6:
99:e0:91:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 16:51:03 2025 by rpki-client