Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mqRXKZ7KmZ7n7xSNEJyt-FFmM8Y.cer
File: mqRXKZ7KmZ7n7xSNEJyt-FFmM8Y.cer (raw, json)
Hash identifier: vjpoOWUIULAVAXXkmjEAd9zfaCOhDqHmYheiULXRruc=
Subject key identifier: 9A:A4:57:29:9E:CA:99:9E:E7:EF:14:8D:10:9C:AD:F8:51:66:33:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A84EDD6663
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/ccd44e-0c70-42a1-ba80-64fe87ce7ef8/1/mqRXKZ7KmZ7n7xSNEJyt-FFmM8Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/ccd44e-0c70-42a1-ba80-64fe87ce7ef8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:56:55 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2a06:2840::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722877638243 (0xa84edd6663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aa457299eca999ee7ef148d109cadf8516633c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:42:87:9c:5e:1e:78:9c:a3:fd:98:18:e2:
d0:c3:ce:9d:13:32:40:a6:14:1a:8c:1f:77:b6:b0:
d0:3b:26:96:8d:9c:30:23:30:ed:1c:31:e7:48:37:
44:59:1d:3c:d6:0e:6a:a5:13:83:3b:c1:7a:8b:cf:
dc:e2:69:07:35:87:ea:db:d6:b0:57:01:fa:08:47:
53:6a:fc:ab:f7:1b:40:e4:eb:bd:b5:08:bb:d2:de:
5a:ed:46:95:32:11:7e:7d:5d:07:bd:21:f6:ee:d4:
2a:5d:a6:11:71:69:62:a2:6a:59:aa:c2:90:26:a0:
e5:45:f9:21:76:e0:5a:38:36:ea:e9:87:60:93:a7:
01:96:20:ab:91:f5:3d:e9:c9:c7:e1:6c:35:da:45:
85:4a:b5:13:45:a6:89:3e:57:10:7a:18:fd:88:79:
4f:5d:ff:3d:83:b0:67:6b:4a:35:fb:3b:9c:c2:72:
e9:b9:fc:8b:09:e8:ac:85:0a:57:20:6a:3a:97:c0:
84:db:2b:a2:e4:15:44:97:ec:d8:6e:73:d2:e1:2b:
f4:46:98:e7:c2:2e:e0:c0:11:87:6c:01:e5:4c:d5:
62:c6:9e:3c:3a:18:87:2b:aa:2d:1d:37:bb:c2:95:
31:51:77:16:44:fc:d8:84:67:f4:5b:3b:97:65:b4:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A4:57:29:9E:CA:99:9E:E7:EF:14:8D:10:9C:AD:F8:51:66:33:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ccd44e-0c70-42a1-ba80-64fe87ce7ef8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ccd44e-0c70-42a1-ba80-64fe87ce7ef8/1/mqRXKZ7KmZ7n7xSNEJyt-FFmM8Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2840::/29
Signature Algorithm: sha256WithRSAEncryption
05:ba:09:ab:95:bb:9f:15:6d:c1:38:10:20:29:49:f5:18:48:
41:0a:66:7d:27:0f:55:d3:93:ab:a5:48:fe:0d:90:49:0a:72:
cd:bf:bf:25:7d:a7:c5:8f:98:2c:04:d5:5b:79:9a:97:19:58:
ed:c1:17:4d:44:9a:ee:82:1b:74:52:27:25:a8:e6:43:1a:9c:
83:90:1e:32:b8:f6:97:74:81:b9:d2:35:4c:f8:a1:ba:df:14:
f8:1a:6b:60:c0:35:f2:cd:62:7e:c9:6c:40:df:e9:40:5f:b1:
67:f5:b3:cf:54:da:75:98:fb:b0:95:8d:5a:84:38:05:f6:85:
9c:13:ff:dc:f9:f9:fb:8c:37:d8:ff:b5:f4:76:7f:36:3b:eb:
2e:72:11:ed:d9:83:e2:39:1a:fc:7e:3b:2c:f4:c1:d8:ec:3a:
27:b9:84:42:08:31:10:6f:75:b8:e8:00:51:d4:36:a2:9f:67:
0b:66:c2:b6:93:57:1f:ab:b4:0b:a9:a6:79:73:df:58:dd:15:
0a:75:32:48:0e:63:15:21:c0:9d:a0:76:82:6e:1c:b0:68:e4:
1c:c0:1a:7b:a0:de:83:42:93:5c:77:96:72:a0:a2:1a:af:57:
0d:65:4f:b1:9e:26:ef:51:1c:d5:30:ae:70:20:1a:f4:8d:7d:
8e:c2:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:20 2024 by rpki-client on console-fra.rpki-client.org