Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bRrVlBs6srTx8bmZrkHe3ce515o.cer
File: bRrVlBs6srTx8bmZrkHe3ce515o.cer (raw, json)
Hash identifier: UTg3zMF5Ck5bmQ+sLdsVnizHkRJrogI6wnks5rq8agk=
Subject key identifier: 6D:1A:D5:94:1B:3A:B2:B4:F1:F1:B9:99:AE:41:DE:DD:C7:B9:D7:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B182FE4F06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/bRrVlBs6srTx8bmZrkHe3ce515o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 May 2022 13:49:31 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.47.140.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762406915846 (0xb182fe4f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 10 13:49:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d1ad5941b3ab2b4f1f1b999ae41deddc7b9d79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:c8:56:5a:70:d1:f8:c0:d0:da:ae:8f:2b:
70:11:90:46:d3:72:4b:64:ad:ba:c1:23:1b:5f:3e:
60:35:dc:c9:b7:1d:fd:4d:29:63:f0:24:fa:2b:ee:
c5:1c:d8:75:60:71:83:4a:92:c1:7b:20:2c:52:10:
ce:a3:b3:b7:13:97:99:d1:8a:e0:e2:fa:ec:28:3f:
d4:cd:c1:7d:0f:46:cf:f6:52:34:46:f5:b0:7b:8b:
dd:97:22:9e:1d:4b:50:62:ab:01:df:05:8d:7a:00:
db:76:fe:4b:b4:56:5a:d1:45:a0:d4:08:b2:53:2c:
65:81:31:dd:5f:9b:18:fb:bb:b7:b2:18:b2:6e:46:
c2:37:d1:6b:18:ca:50:22:e8:3c:87:3f:63:66:35:
ec:21:aa:1c:0d:9d:72:f5:7d:e6:fa:85:82:81:45:
f3:c7:cd:c4:c6:37:a9:b4:7f:3e:19:a0:dd:43:8a:
c9:3c:4a:13:1b:ee:92:2e:9d:9b:02:6d:c8:bd:5b:
4d:96:c1:7f:90:e4:23:d9:57:f9:b4:d4:cc:6e:7b:
70:49:b3:e9:d5:0c:52:d8:60:70:a3:52:28:7b:f4:
18:f0:39:99:b9:95:c0:99:3a:8e:40:2a:7b:9a:9c:
2d:f3:c2:ae:0c:8b:ac:8c:72:75:28:69:da:1b:38:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1A:D5:94:1B:3A:B2:B4:F1:F1:B9:99:AE:41:DE:DD:C7:B9:D7:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413ffc-5765-499f-9741-73964d943782/1/bRrVlBs6srTx8bmZrkHe3ce515o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:0c:42:24:3d:41:92:fa:70:ca:0e:5e:86:de:d7:2d:6a:df:
8e:e6:75:4d:cd:37:2a:4b:50:6c:f5:04:10:3d:45:55:28:5b:
2d:2e:e1:47:99:5a:de:57:57:e2:03:c4:75:e3:67:07:6d:22:
47:6e:d8:2f:e7:c5:22:1d:e6:f9:0b:33:0e:b4:ef:b7:b0:99:
81:3b:57:6a:55:10:fa:f0:36:41:b4:8e:e0:da:fc:b7:db:a8:
be:c0:9d:8e:94:41:3b:fd:13:21:0a:80:60:89:de:12:52:ae:
c5:f2:7c:63:3e:bd:c6:8e:ae:20:5d:46:27:69:c7:21:62:d1:
fa:ce:fc:2b:a8:2b:00:c8:45:0d:da:e8:97:fd:6f:21:de:74:
b9:c8:a3:9c:10:a4:3b:28:d7:ea:21:ec:fb:d3:ca:4d:28:a5:
c9:7c:76:63:ee:ef:85:7b:60:b0:7e:36:de:7a:87:69:6e:4a:
9d:b3:0f:57:86:73:66:33:8c:64:0c:24:7c:eb:10:d2:9d:17:
9b:29:0a:68:9f:bc:9a:80:89:48:7c:5f:0a:76:b9:0e:22:2f:
ea:d2:be:a4:7a:94:71:e3:e1:8d:38:64:19:b2:a9:41:87:9e:
23:bd:a7:70:9a:c7:2b:b0:d8:f8:d0:4b:56:77:1f:01:d8:e6:
a4:72:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:54:03 2025 by rpki-client