Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mJITCUt1hblHeOvfQ5pfN1UVYhs.cer
File: mJITCUt1hblHeOvfQ5pfN1UVYhs.cer (raw, json)
Hash identifier: eVAzlofP1mkhjZIHbAdlacPGpCdp2LrYQz+L64RBD00=
Subject key identifier: 98:92:13:09:4B:75:85:B9:47:78:EB:DF:43:9A:5F:37:55:15:62:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A2B20D0995
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/0bfbec-cc8c-4dab-a504-90aedfb9a82a/1/mJITCUt1hblHeOvfQ5pfN1UVYhs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/0bfbec-cc8c-4dab-a504-90aedfb9a82a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 08:57:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.241.8.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698771900821 (0xa2b20d0995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:57:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=989213094b7585b94778ebdf439a5f375515621b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:75:cf:8b:70:eb:fc:c1:1b:6d:6b:70:60:
9b:4b:2f:2c:02:97:39:b6:53:ed:71:f7:82:d4:0c:
60:cc:59:53:d5:3d:bb:8c:91:61:bf:1e:a7:eb:e7:
64:3c:a4:79:c8:78:5d:df:0c:9b:6c:eb:4b:94:6f:
eb:f9:d2:7b:a4:14:45:4b:08:1d:59:8a:42:08:5a:
fe:b7:da:01:21:6a:78:db:ed:29:cb:84:a1:10:8b:
90:19:9d:4c:29:91:e2:ff:ee:cd:18:9d:1e:af:00:
0b:21:73:c2:7f:a7:b2:c8:04:64:46:52:60:9d:0c:
9c:f9:e4:54:46:18:44:de:c0:ac:4c:e0:41:5a:d5:
cd:98:b1:3a:4a:3f:37:08:cc:23:1d:16:f4:a7:7b:
65:7c:7d:ca:c6:2b:77:fd:6e:25:d1:58:a8:fd:d2:
02:55:92:02:e9:84:ce:73:56:9c:ae:a3:85:e5:fd:
6b:8a:da:81:8e:3b:62:60:a3:48:cd:7a:cb:9c:28:
83:26:69:51:e4:45:9b:51:cc:94:3f:b6:44:4e:cc:
0d:6c:fe:49:ae:2b:cb:d4:b0:5f:40:74:b2:00:d8:
c5:00:ee:76:79:f5:a1:f6:86:2c:c5:25:50:ad:a0:
46:95:c1:14:ce:43:88:d3:cc:b8:38:6f:0a:b5:05:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:92:13:09:4B:75:85:B9:47:78:EB:DF:43:9A:5F:37:55:15:62:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0bfbec-cc8c-4dab-a504-90aedfb9a82a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0bfbec-cc8c-4dab-a504-90aedfb9a82a/1/mJITCUt1hblHeOvfQ5pfN1UVYhs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:6a:2c:a2:71:75:03:83:7d:9e:40:f8:fc:01:66:95:72:22:
6c:ab:87:55:b9:5f:d3:06:e4:c9:60:32:27:44:6b:ae:e9:bb:
2c:e8:f8:15:5b:5d:4f:ab:3e:09:12:4d:53:a2:37:4a:12:75:
f7:aa:ee:17:90:20:1e:43:bf:9c:03:e2:e4:8d:9c:37:9a:fa:
f3:da:13:93:db:bf:20:52:e5:d9:f4:05:22:16:7d:31:c7:0e:
cb:4f:1f:0b:1d:bb:db:9f:7e:15:7c:70:de:8a:b4:9c:8e:7b:
68:b1:2c:af:dc:ab:35:7f:e0:1a:0b:15:8a:e5:88:cb:8b:2e:
d0:5f:4d:ed:5a:3e:ac:d1:f6:f2:9b:55:9f:55:82:4a:b1:66:
b0:f1:c6:fd:f7:0d:77:e5:c2:b5:3b:29:80:1f:74:62:5f:60:
0b:7b:c3:2d:d8:28:6a:c6:31:8a:5b:38:90:69:87:68:93:00:
bb:9b:50:42:b7:f3:ce:61:0e:be:ae:ea:b4:14:dc:4b:37:76:
ec:0d:c6:30:48:73:b7:96:fb:a1:a0:38:31:81:25:e3:94:ba:
da:21:82:2e:24:3f:ca:35:14:f9:1c:90:4b:42:ee:5c:12:bb:
7c:07:6c:31:da:80:53:44:07:85:80:52:59:d0:f9:db:85:0d:
bc:de:5f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:15 2024 by rpki-client on console-ams.rpki-client.org