Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-FHlMZtXza5IvNZVCC3isG3hXg.cer
File: _-FHlMZtXza5IvNZVCC3isG3hXg.cer (raw, json)
Hash identifier: 8jmgYbtSmzKUOCGjXtkcedd5z1xeGQsPuB/0FUg3t5k=
Subject key identifier: FF:E1:47:94:C6:6D:5F:36:B9:22:F3:59:54:20:B7:8A:C1:B7:85:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED2D983E7812E1EC03830614B2380DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/_-FHlMZtXza5IvNZVCC3isG3hXg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:33:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.151.72.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d2:d9:83:e7:81:2e:1e:c0:38:30:61:4b:23:80:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:33:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffe14794c66d5f36b922f3595420b78ac1b78578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:02:90:cb:cf:e1:f3:10:6f:f0:03:97:08:
d2:51:9a:97:d1:1a:78:7a:97:c8:65:c6:0b:ae:40:
7e:4f:cc:a3:bb:45:e8:3d:33:cf:39:d4:75:b3:ee:
a6:dd:ef:33:68:29:72:2c:16:bf:f0:e8:03:c2:45:
1c:fe:da:98:d0:23:40:78:9c:49:78:36:06:64:15:
db:fa:0c:3b:07:41:7a:cc:c3:d7:09:0a:28:86:21:
e8:2f:a7:3d:fe:94:6f:a0:48:b6:96:14:2f:51:84:
b9:26:cd:de:6e:ed:ca:69:30:c6:d2:38:78:f2:30:
ef:ff:37:b9:15:c8:3d:39:28:33:47:d6:f0:73:f0:
61:27:c6:35:1c:7a:3d:15:49:16:41:b8:a1:36:2d:
38:fa:61:3d:77:be:1f:d8:f3:a1:79:62:0a:fd:85:
2c:c8:84:da:41:65:92:0c:49:2f:f9:29:5e:b7:96:
49:80:ba:ac:3e:48:46:3f:da:7b:38:2a:9d:94:e9:
01:ec:7f:e5:76:c7:56:36:7e:69:d1:7c:11:89:ca:
8a:2d:a5:98:5e:6f:54:56:22:56:d9:97:8d:68:2b:
a3:97:19:e2:62:d3:83:de:a1:eb:62:94:2a:d9:b9:
4b:24:07:76:43:2c:45:a4:cc:bf:a5:48:33:95:ba:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:47:94:C6:6D:5F:36:B9:22:F3:59:54:20:B7:8A:C1:B7:85:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/_-FHlMZtXza5IvNZVCC3isG3hXg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:5c:73:97:23:11:90:dc:cc:ba:7c:21:15:5a:63:14:1d:02:
1b:57:3f:98:12:2d:4e:59:f5:b5:3e:4c:2f:27:89:11:e5:05:
71:4a:5a:4a:cb:32:7d:8d:0d:92:5d:73:0a:6c:d0:9d:57:9f:
da:41:c5:ad:c5:63:37:19:46:a0:eb:05:28:20:21:99:f0:af:
d2:0d:25:11:31:90:2b:35:f0:d2:80:3d:ff:93:61:44:f7:1a:
99:6c:e2:e7:3b:78:55:ec:2c:1f:ce:79:fa:7c:45:b3:3e:b1:
23:4e:93:f3:d2:7e:5b:48:e8:5e:b4:97:0b:fc:9b:84:b2:c2:
aa:df:db:4c:1b:41:79:af:b1:b6:3c:65:1d:1e:22:64:b2:dd:
a7:35:e4:6a:97:4c:98:ad:5d:eb:c4:59:c5:9c:11:89:e4:b6:
be:47:4e:39:83:45:f1:ef:40:e5:08:ac:0c:3e:39:78:45:69:
ed:a6:1d:24:50:f2:4b:f9:a8:a5:de:01:9a:2b:c8:25:f3:71:
98:6e:f2:44:2f:45:0b:9f:b1:ba:08:02:bb:38:74:73:fc:17:
de:d2:b0:d0:72:a3:c5:6d:47:54:60:32:50:53:93:4d:b3:1b:
30:17:c9:77:56:83:da:ae:b5:d2:18:11:36:b5:a7:25:34:92:
d7:f1:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:27 2025 by rpki-client