Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ckYN1MPzP4OpvRdGpVzRmqZdtDU.cer
File: ckYN1MPzP4OpvRdGpVzRmqZdtDU.cer (raw, json)
Hash identifier: 8RA8+fy4UMNY79kqPZK9lKTyMFYfQxdbAG8OhHyh4Zw=
Subject key identifier: 72:46:0D:D4:C3:F3:3F:83:A9:BD:17:46:A5:5C:D1:9A:A6:5D:B4:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7A88FF54C508BAD193A55E7220B5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/a82ed1-bc4b-4f94-bcf3-320475882439/1/ckYN1MPzP4OpvRdGpVzRmqZdtDU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/a82ed1-bc4b-4f94-bcf3-320475882439/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 202197
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:a8:8f:f5:4c:50:8b:ad:19:3a:55:e7:22:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72460dd4c3f33f83a9bd1746a55cd19aa65db435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:a2:0f:70:db:2b:fc:5e:c3:4b:66:4c:95:
3b:28:d7:26:8a:18:c0:40:a1:00:7f:4a:3c:78:ea:
08:01:fb:22:f1:22:25:5a:4a:aa:92:8c:85:e8:3e:
b3:73:9c:65:93:73:43:06:bb:2e:95:04:65:0c:4d:
ec:ff:9d:4f:14:46:c6:05:a4:57:8a:e7:b2:13:f2:
6b:a8:92:50:af:06:d2:fc:9c:ab:74:95:3b:30:f1:
b3:fb:98:64:83:7d:52:dd:ae:fb:98:9b:9f:36:9d:
00:3d:24:7e:32:12:31:b7:2e:dd:b6:29:6e:ea:32:
00:4d:56:24:ab:03:a9:cd:20:41:7c:e7:2f:90:2b:
07:27:70:fd:5e:30:ee:4f:f3:1b:c5:63:97:f5:10:
5b:00:44:8b:bc:36:a2:28:33:de:10:3c:2a:d3:5f:
a1:7d:28:ef:a6:5e:57:f8:4e:15:1b:11:dd:3b:b5:
6e:de:ee:d2:29:fa:7c:91:7f:be:00:00:91:ed:aa:
49:e8:58:e9:4a:a1:2a:7f:2a:72:78:ff:c0:59:56:
3a:e0:24:a2:87:4d:5b:bd:8c:69:8f:6c:23:03:1f:
be:e4:c6:88:b1:3a:f7:bf:fc:8a:03:41:36:a9:93:
0d:76:be:f4:74:20:6f:19:0e:44:39:9d:cc:d4:9d:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:46:0D:D4:C3:F3:3F:83:A9:BD:17:46:A5:5C:D1:9A:A6:5D:B4:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a82ed1-bc4b-4f94-bcf3-320475882439/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a82ed1-bc4b-4f94-bcf3-320475882439/1/ckYN1MPzP4OpvRdGpVzRmqZdtDU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202197
Signature Algorithm: sha256WithRSAEncryption
4e:01:35:17:93:28:2a:38:07:03:ac:fb:70:73:0f:62:0a:ce:
a5:72:da:8f:b8:25:bb:70:69:ae:92:ee:95:08:c2:ac:fa:b7:
c8:97:33:a4:25:25:ef:e0:b7:86:08:95:f6:93:29:84:d5:41:
7a:96:19:7b:17:1a:07:45:83:80:7d:5c:3f:0a:1f:56:6a:31:
68:5b:7b:21:4d:49:28:1b:89:02:62:ad:19:2f:f3:72:34:f3:
22:be:60:0f:63:e7:1a:f9:c4:d5:ad:43:17:8e:49:ee:04:ee:
6d:d6:32:c7:51:6f:a7:e7:c6:7c:33:ab:a2:1d:41:92:d6:0a:
5c:22:87:66:c2:56:bd:1d:79:56:ad:9e:b0:69:c3:dc:4b:19:
8b:79:cb:7f:05:52:af:c5:78:ea:ea:fb:13:0f:15:60:26:cd:
c4:f4:30:b5:40:dd:d7:07:33:76:f4:09:dc:8a:e1:8e:65:31:
e3:83:6a:26:c8:7e:82:f6:78:00:3b:29:a7:49:ec:d7:12:46:
bd:7c:c5:30:50:4a:82:ca:f6:3d:06:69:85:f3:b9:2c:e6:f6:
37:36:73:87:55:ae:3c:95:e4:d5:41:b5:03:2b:80:30:93:a2:
5f:46:a3:c1:f5:36:29:83:a0:b0:9e:9d:81:c7:23:ca:74:23:
9b:a4:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:10 2025 by rpki-client