Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g5WDDl8atJt7GCLFIwe4NoBsf6E.cer
File: g5WDDl8atJt7GCLFIwe4NoBsf6E.cer (raw, json)
Hash identifier: CGUT/EIBy3d13GllwdP+YcZ+tHtXi+4jRdSzLJOakms=
Subject key identifier: 83:95:83:0E:5F:1A:B4:9B:7B:18:22:C5:23:07:B8:36:80:6C:7F:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A76EE6F8E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/e19219-cb7c-4749-9c66-a8c3089beca7/1/g5WDDl8atJt7GCLFIwe4NoBsf6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/e19219-cb7c-4749-9c66-a8c3089beca7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 12:59:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a00:8e40::/32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719120169186 (0xa76ee6f8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8395830e5f1ab49b7b1822c52307b836806c7fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:48:d3:64:67:86:63:37:57:ba:8d:94:9e:
34:9a:96:60:3d:12:c5:f6:17:1d:ad:83:cb:43:91:
2d:86:0c:bf:6f:e7:9e:a9:a4:a3:90:81:25:c4:71:
2e:e7:d3:c8:48:b0:b8:a1:29:34:01:06:8a:a2:6d:
5c:c8:88:08:fb:5c:9a:9f:2c:59:45:f9:46:6b:53:
81:34:8d:77:89:f8:ac:ab:6e:f7:ac:51:b5:d7:ce:
fe:c7:28:1c:33:65:79:ef:17:ca:0a:0c:4f:0c:99:
65:ff:33:8e:e8:12:cb:82:e1:e5:3f:b0:95:f5:ea:
e0:78:5d:09:e7:4b:c9:12:31:3c:ff:fa:fd:2b:57:
76:ca:1e:62:dd:cc:29:50:2c:46:74:26:3c:96:7c:
73:0c:16:16:c4:b4:8f:c7:62:fa:2e:ac:52:2c:04:
46:2a:3a:c5:6c:62:bc:b1:96:5c:e2:bf:17:08:0f:
c8:eb:3c:10:d0:83:af:cd:6d:3c:03:3c:6f:f4:c3:
5c:2f:e9:ef:d0:f5:ca:11:47:ee:15:9b:3f:61:45:
69:ff:e1:6c:79:48:7a:8a:91:22:18:b2:ad:4b:51:
93:de:87:4e:e1:68:e5:6a:13:09:99:2e:20:7c:cc:
af:bd:17:cd:d8:44:65:ef:4d:d0:a8:84:71:b5:0f:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:95:83:0E:5F:1A:B4:9B:7B:18:22:C5:23:07:B8:36:80:6C:7F:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e19219-cb7c-4749-9c66-a8c3089beca7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e19219-cb7c-4749-9c66-a8c3089beca7/1/g5WDDl8atJt7GCLFIwe4NoBsf6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8e40::/32
Signature Algorithm: sha256WithRSAEncryption
59:af:6b:ce:70:20:0e:8d:0c:0e:30:cf:2f:ab:9e:75:ef:a1:
f3:34:ce:f2:b4:0d:9e:dc:73:bb:4e:89:fb:3d:bc:72:a3:a2:
cd:e6:a6:2f:17:56:96:01:b6:ce:b2:78:9d:4c:50:2e:10:e6:
8c:fc:21:c7:c9:f5:93:53:46:14:e0:bb:c6:25:38:e0:39:96:
74:0b:87:4b:da:ba:b7:fc:d8:bd:13:15:96:88:10:b1:22:29:
79:86:8f:ba:6d:d8:0d:8c:7d:9e:e1:9b:ae:70:ce:eb:f5:84:
62:0f:91:68:98:95:81:8f:b7:1a:41:49:02:4a:66:22:ad:9d:
e2:37:b0:13:5b:5b:91:4b:e2:0b:02:16:14:e1:fa:8d:9a:76:
6f:b4:83:ec:c7:ae:a4:c3:95:80:f5:1e:90:78:f6:a7:2a:7f:
6c:26:79:9d:11:e1:54:5c:dd:11:27:44:80:ba:35:ba:77:54:
bf:82:26:dd:5f:7b:7f:93:80:19:b7:54:eb:a7:57:4f:e9:6d:
20:bc:6c:ef:05:a1:6c:c0:3a:70:9a:b4:11:c4:ff:22:87:db:
12:d0:d3:97:37:a9:0a:c1:a4:b6:81:89:8a:05:ba:d3:3c:3b:
22:ab:29:99:3a:44:20:f0:4e:87:93:dd:3a:7d:eb:58:09:da:
db:53:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:03 2025 by rpki-client