Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z3Wbs30a3cGDk9-qbawOg0j7mxY.cer
File: Z3Wbs30a3cGDk9-qbawOg0j7mxY.cer (raw, json)
Hash identifier: PnNNeDiPTrRqFWnjeIPMx7Llz45eGnd8O7RWp/t/kJ4=
Subject key identifier: 67:75:9B:B3:7D:1A:DD:C1:83:93:DF:AA:6D:AC:0E:83:48:FB:9B:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168F503B9AB2F89260CFC1A084CA7CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/5d2a89-05aa-4be3-bfbe-b41449bdf477/1/Z3Wbs30a3cGDk9-qbawOg0j7mxY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/5d2a89-05aa-4be3-bfbe-b41449bdf477/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 35632
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:f5:03:b9:ab:2f:89:26:0c:fc:1a:08:4c:a7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67759bb37d1addc18393dfaa6dac0e8348fb9b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:c5:d8:48:65:6e:4e:80:16:72:c7:bf:2e:
b7:3a:20:b0:0d:0e:dc:43:a6:9e:ec:5f:a3:8d:1d:
58:5a:c0:df:37:69:b5:ed:39:27:c4:67:93:59:6f:
c0:ab:19:ab:9b:81:64:dd:08:1e:ad:bd:6d:5e:51:
39:c8:86:2b:4c:e1:e4:6b:64:b6:b8:62:7e:ff:a8:
4a:6b:05:c7:45:94:36:61:54:1b:a2:77:a8:47:4c:
04:d4:a1:90:c2:b5:d8:f4:76:c0:4f:e2:a5:b0:ff:
29:4d:87:6c:e2:df:a5:af:44:d9:12:d2:03:11:c9:
30:3c:a0:7a:71:ad:7d:7e:28:3d:9e:8b:47:94:d4:
cc:dd:7f:e8:57:e9:d8:e3:53:8f:e6:cf:cd:fc:06:
26:0b:ed:be:f0:a5:29:83:93:67:8c:3d:b3:fa:04:
20:ab:2b:f4:cb:ed:d7:a2:5b:cb:73:51:77:04:a5:
b6:e3:44:91:9d:3e:4b:dc:42:dd:a3:a9:bf:a5:6c:
cf:af:32:bc:19:1f:3b:34:7c:f2:b0:f1:d1:10:bd:
fc:c1:b9:ca:8d:49:cf:ba:dd:ae:c0:4f:90:53:1b:
d3:5d:61:cf:9e:85:74:5e:01:36:ff:32:f2:53:d9:
4b:bb:b7:b8:83:ce:85:fb:11:6a:f1:dc:a0:9c:2f:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:75:9B:B3:7D:1A:DD:C1:83:93:DF:AA:6D:AC:0E:83:48:FB:9B:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d2a89-05aa-4be3-bfbe-b41449bdf477/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d2a89-05aa-4be3-bfbe-b41449bdf477/1/Z3Wbs30a3cGDk9-qbawOg0j7mxY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35632
Signature Algorithm: sha256WithRSAEncryption
45:15:ef:12:33:3c:99:9c:72:98:86:66:8e:28:c0:b2:61:f2:
12:bc:08:04:b6:7c:41:f1:23:90:14:20:d7:1b:dd:b6:51:98:
0b:2c:d7:8a:dd:34:f9:11:8f:19:22:88:00:c5:d5:c9:e0:f2:
33:0a:f6:a3:22:cf:f3:73:33:28:3d:b7:0f:1c:6c:c9:67:cf:
44:b8:96:e9:1c:3d:f6:42:8c:5a:2d:23:70:64:87:4a:fc:5d:
0e:6a:f1:c0:21:fa:eb:f2:a5:b7:55:a5:52:38:53:6c:b5:26:
24:16:9f:66:3f:1a:46:7a:cb:bc:42:90:d1:60:6f:7d:4f:42:
5b:2b:1a:eb:80:24:16:2d:8f:f9:45:8c:ca:6e:a6:24:01:c6:
a8:52:57:50:4b:2e:ce:90:e8:4f:e9:9b:a7:a2:ca:78:8e:26:
af:59:64:4d:5e:6c:f0:60:e7:c0:dc:2a:96:d3:fd:04:e0:c6:
a6:b0:df:27:1f:be:1d:b2:c2:03:e0:1c:ec:2a:74:aa:81:22:
2b:e3:57:4a:72:e2:dc:ce:a5:38:1d:bc:ea:ca:ff:f6:f6:aa:
fb:18:75:58:30:ef:2e:74:5c:f5:84:0c:43:49:be:54:3b:2f:
3f:09:04:7a:97:42:dd:88:37:77:7f:b9:c9:7c:c1:75:5e:b5:
5a:20:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:50 2025 by rpki-client