Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ifEJBUnW3w27ExAQ7xh-JpJcn8c.cer
File: ifEJBUnW3w27ExAQ7xh-JpJcn8c.cer (raw, json)
Hash identifier: mnEJtuu9YgQcGn44M2zzvoTJH7NORdRTRNfr1/MHOWo=
Subject key identifier: 89:F1:09:05:49:D6:DF:0D:BB:13:10:10:EF:18:7E:26:92:5C:9F:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF538C7BE6DAF8F6DBD17B9EEE413DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/97306a-8535-45e0-8c0f-40c06c4acbba/1/ifEJBUnW3w27ExAQ7xh-JpJcn8c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/97306a-8535-45e0-8c0f-40c06c4acbba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 57351
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:38:c7:be:6d:af:8f:6d:bd:17:b9:ee:e4:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89f1090549d6df0dbb131010ef187e26925c9fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:a2:b7:9b:08:2f:32:ba:37:2c:b6:08:f2:
89:84:d2:63:c7:12:a3:1f:02:52:16:dc:8d:65:5c:
31:23:5e:80:1a:c0:3f:8c:e3:bc:e0:e3:5f:77:16:
ed:bd:ca:91:43:b5:64:ab:61:8c:1d:f3:04:99:00:
f7:7d:87:c7:f2:d2:1d:31:0b:5a:98:3a:df:a6:2a:
89:2e:fe:68:01:a7:8f:35:05:47:a1:d0:e3:f2:b5:
13:bc:62:ab:e2:04:38:3f:22:cd:cb:6c:a0:df:6d:
c4:08:8f:dd:a0:c0:be:a8:cc:94:74:48:f9:88:1b:
74:2c:dc:f0:57:bb:e1:fa:b9:44:17:f3:6a:6f:31:
57:dd:88:5e:1c:fd:ec:da:21:4d:80:c1:48:d5:f6:
bd:2e:df:43:59:cd:bf:d0:74:26:ef:21:2e:1a:2a:
10:66:00:f0:bd:e2:9e:e7:87:bc:8f:af:02:e7:dc:
2b:b2:7f:1f:d6:14:e7:f3:a1:f7:f9:eb:a4:24:67:
c5:49:0a:0b:35:e4:d8:b0:db:a8:83:e7:d3:51:8c:
38:23:92:99:d1:88:01:31:4f:f8:ed:b5:77:3e:3a:
e9:81:bb:73:07:93:be:2c:69:f9:bb:8b:6b:d7:bd:
f9:55:cb:93:59:c2:2e:40:ee:bd:0b:35:fc:17:aa:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F1:09:05:49:D6:DF:0D:BB:13:10:10:EF:18:7E:26:92:5C:9F:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/97306a-8535-45e0-8c0f-40c06c4acbba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/97306a-8535-45e0-8c0f-40c06c4acbba/1/ifEJBUnW3w27ExAQ7xh-JpJcn8c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57351
Signature Algorithm: sha256WithRSAEncryption
5d:f3:d1:f9:e3:e4:16:3c:33:c8:3e:37:e6:ce:b6:d8:24:fe:
cb:7b:08:04:fc:7e:b7:89:5a:64:22:49:2a:ad:34:a4:bb:df:
e3:82:7b:e2:d3:8e:5d:20:25:8c:36:ca:d3:d1:6c:13:1d:66:
73:9d:9f:1b:52:78:d3:73:d7:fb:44:4f:0e:98:57:3b:69:fd:
da:9f:4e:6b:16:5a:8a:e3:ac:cc:5b:a5:b4:15:34:5f:86:10:
d9:6b:4c:06:5a:18:15:8e:2d:13:12:41:71:79:f3:94:bc:e2:
15:a6:b7:31:6b:2e:80:67:1e:0c:48:de:6d:0b:21:af:3f:79:
ff:3b:13:91:5d:b3:16:4f:36:de:14:a3:e4:d9:9f:b0:ec:39:
3c:03:1f:58:a3:25:65:b4:ea:fa:df:da:9f:d6:55:69:08:d6:
f6:f1:d2:e1:ad:06:ee:3c:97:f5:a7:4a:90:74:02:09:d6:66:
f0:9c:82:54:03:2f:c4:55:89:b2:bc:a1:8b:98:0f:85:d2:70:
ad:84:ca:a1:bb:cb:b2:81:39:b9:8b:26:19:ba:bd:dc:ef:44:
1c:60:70:b0:10:9b:21:b4:2f:d3:59:1c:2e:f4:95:46:3b:df:
fc:1a:fd:84:ca:14:23:8e:5b:b8:67:b8:71:63:68:41:c2:ac:
03:bf:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:04:28 2025 by rpki-client