Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Smy_B-CxGwu7zO9I_tP2UfPu37Y.cer
File: Smy_B-CxGwu7zO9I_tP2UfPu37Y.cer (raw, json)
Hash identifier: MgNaHlQ35/c+3SeSHpXl69Jum1x09FAnExTOUkn0pzA=
Subject key identifier: 4A:6C:BF:07:E0:B1:1B:0B:BB:CC:EF:48:FE:D3:F6:51:F3:EE:DF:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C2A6CCE70B202A5690D62B0BD7A7D68
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.kitten.network/repo/MythicalKitten/0/4A6CBF07E0B11B0BBBCCEF48FED3F651F3EEDFB6.mft
caRepository: rsync://rpki.kitten.network/repo/MythicalKitten/0/
Notify URL: https://rpki.kitten.network/rrdp/notification.xml
Certificate not before: Sun 01 Jan 2023 07:09:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 203635
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2a:6c:ce:70:b2:02:a5:69:0d:62:b0:bd:7a:7d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a6cbf07e0b11b0bbbccef48fed3f651f3eedfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:b6:f5:e0:8d:e0:5f:f1:ca:67:df:be:4f:
59:f3:91:4d:9f:4d:4f:dc:ec:49:60:52:45:88:fa:
9d:a1:56:d5:91:01:b9:2e:0b:a2:8b:c9:0c:66:dc:
2d:17:6b:9a:7b:61:29:69:c5:3c:a7:8a:67:d5:5b:
e0:37:f2:a1:bc:06:d3:3d:82:9a:b0:48:10:75:cd:
41:ea:b1:43:eb:e1:54:1d:d7:4e:23:ca:7d:62:9a:
9e:47:84:95:bc:d1:52:57:66:44:3c:e2:e0:bc:23:
f1:cf:58:1f:e2:a9:90:50:5e:7d:ba:71:4a:b4:55:
2f:63:21:e4:5c:c1:6e:4b:9f:29:0f:98:8a:8b:84:
4c:9b:9f:e5:c5:0c:b4:e7:3d:a1:3f:68:7e:8f:97:
c0:aa:f1:a8:34:bc:ac:9c:db:68:ee:7e:2a:bb:64:
0e:ad:ea:ba:35:2f:60:7e:ff:1a:5e:19:71:c5:e4:
6a:ec:76:07:ce:7c:be:a9:a8:b8:d8:36:1a:2f:5f:
ed:6e:18:c9:90:ed:b1:ef:90:47:22:03:b1:bd:35:
0d:79:62:73:6a:9f:e9:0a:10:f8:13:a8:6f:47:4b:
c3:a8:d3:fc:e3:97:6f:b3:20:03:f3:3f:fd:99:30:
02:00:e8:e2:ea:ef:03:32:a9:26:7b:6e:08:1e:bc:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:BF:07:E0:B1:1B:0B:BB:CC:EF:48:FE:D3:F6:51:F3:EE:DF:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.kitten.network/repo/MythicalKitten/0
RPKI Manifest - URI:rsync://rpki.kitten.network/repo/MythicalKitten/0/4A6CBF07E0B11B0BBBCCEF48FED3F651F3EEDFB6.mft
RPKI Notify - URI:https://rpki.kitten.network/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203635
Signature Algorithm: sha256WithRSAEncryption
72:12:5c:28:1a:da:73:e4:19:13:10:81:c9:33:8e:5e:f4:7e:
42:1a:b5:49:1e:b4:0c:6e:d5:f3:bb:ce:5a:fa:35:86:4d:9f:
dd:90:14:ba:f0:ac:8d:24:a6:27:e5:e3:46:33:69:37:68:26:
67:91:93:7e:7d:34:cd:f5:cc:1c:38:12:17:7e:a1:45:3e:4e:
01:37:07:29:a5:44:e5:12:45:41:7f:2b:58:d3:2e:fb:e9:d8:
de:e4:76:5f:96:19:5c:05:da:da:0d:ad:39:05:4d:a5:9d:8b:
c0:a0:c3:21:ba:60:78:f6:d7:fa:23:e9:11:38:64:2c:68:17:
07:3c:85:a7:c6:93:0f:76:ee:a7:79:13:fc:b6:ae:fd:8f:d8:
96:b0:2c:0d:b5:99:b5:82:64:4a:35:80:3f:c3:a8:a9:89:02:
0e:fb:f9:66:d4:ea:1b:2c:bd:56:2a:ee:0f:06:28:de:2c:50:
b5:c6:20:45:fe:85:49:d4:8d:13:11:09:c7:87:7f:49:98:e0:
ee:db:8d:4b:00:d6:62:b3:66:3c:7e:86:e4:1a:a1:fe:c6:fb:
32:4e:02:eb:64:34:7c:eb:84:71:fe:52:48:e4:17:c9:8f:6e:
51:af:8a:70:91:fe:df:2a:58:b8:31:7e:28:ce:d6:b3:84:6b:
c9:c3:14:58
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAYVsKmzOcLICpWkNYrC9en1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDcwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTZjYmYwN2UwYjExYjBiYmJjY2VmNDhmZWQzZjY1MWYzZWVkZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19G29eCN4F/xymffvk9Z85FNn01P
3OxJYFJFiPqdoVbVkQG5Lguii8kMZtwtF2uae2EpacU8p4pn1VvgN/KhvAbTPYKa
sEgQdc1B6rFD6+FUHddOI8p9YpqeR4SVvNFSV2ZEPOLgvCPxz1gf4qmQUF59unFK
tFUvYyHkXMFuS58pD5iKi4RMm5/lxQy05z2hP2h+j5fAqvGoNLysnNto7n4qu2QO
req6NS9gfv8aXhlxxeRq7HYHzny+qai42DYaL1/tbhjJkO2x75BHIgOxvTUNeWJz
ap/pChD4E6hvR0vDqNP845dvsyAD8z/9mTACAOji6u8DMqkme24IHry0uwIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFEpsvwfgsRsLu8zvSP7T9lHz7t+2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgfoGCCsGAQUFBwELBIHtMIHqMD0GCCsGAQUFBzAFhjFyc3lu
YzovL3Jwa2kua2l0dGVuLm5ldHdvcmsvcmVwby9NeXRoaWNhbEtpdHRlbi8wMGoG
CCsGAQUFBzAKhl5yc3luYzovL3Jwa2kua2l0dGVuLm5ldHdvcmsvcmVwby9NeXRo
aWNhbEtpdHRlbi8wLzRBNkNCRjA3RTBCMTFCMEJCQkNDRUY0OEZFRDNGNjUxRjNF
RURGQjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczovL3Jwa2kua2l0dGVuLm5ldHdv
cmsvcnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VI
SUpuSEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMbczANBgkqhkiG9w0BAQsFAAOCAQEAchJc
KBrac+QZExCByTOOXvR+Qhq1SR60DG7V87vOWvo1hk2f3ZAUuvCsjSSmJ+XjRjNp
N2gmZ5GTfn00zfXMHDgSF36hRT5OATcHKaVE5RJFQX8rWNMu++nY3uR2X5YZXAXa
2g2tOQVNpZ2LwKDDIbpgePbX+iPpEThkLGgXBzyFp8aTD3bup3kT/Lau/Y/YlrAs
DbWZtYJkSjWAP8OoqYkCDvv5ZtTqGyy9ViruDwYo3ixQtcYgRf6FSdSNExEJx4d/
SZjg7tuNSwDWYrNmPH6G5Bqh/sb7Mk4C62Q0fOuEcf5SSOQXyY9uUa+KcJH+3ypY
uDF+KM7Ws4RrycMUWA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:29 2025 by rpki-client