Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyRmMuhX83DDA491VF8SK46xbRo.cer
File: nyRmMuhX83DDA491VF8SK46xbRo.cer (raw, json)
Hash identifier: dhMPqgYUmLRZxbijwixSUprrMPZKldPOFiPlYxphahg=
Subject key identifier: 9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED407DDE8D250F8130DDAAAA06A24B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.3.186.0/24
IP: 2a12::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:07:dd:e8:d2:50:f8:13:0d:da:aa:a0:6a:24:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f246632e857f370c3038f75545f122b8eb16d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:c3:f5:00:23:d4:43:09:64:2b:04:a1:7e:
80:e6:a1:bf:10:d7:51:e5:58:44:dd:df:9a:cc:30:
fc:f1:2b:79:8c:08:57:32:21:f1:59:50:67:d6:47:
a8:32:82:5e:a6:5d:91:35:68:b2:5f:bf:99:73:e9:
39:f1:2e:76:b3:24:b5:dd:76:98:cf:71:44:39:1e:
72:50:df:2c:37:75:51:ae:50:31:f9:16:8b:a6:35:
7a:1f:c7:97:3a:f1:08:1f:16:fd:ad:42:0d:f1:6f:
37:2d:f6:f9:eb:71:6c:91:16:07:aa:0a:c0:38:27:
12:5a:26:70:89:64:b2:ab:96:40:70:c5:65:fe:e7:
03:c7:89:6f:65:4f:c0:64:bb:66:f5:fc:7f:97:20:
cb:d5:2a:a2:e2:2b:8d:c6:ff:ac:c8:df:63:a0:cf:
1b:29:09:2b:9e:c9:27:fe:20:6b:db:d5:fa:16:33:
7a:87:94:6d:b9:e0:c2:3d:d8:3c:47:9a:e5:d1:ec:
15:20:46:5e:2d:ed:57:47:db:1e:c1:44:7c:67:e2:
8d:e7:57:ae:06:1d:3d:8e:8e:cc:5f:9d:96:3d:34:
20:dd:f4:9f:11:f9:96:71:e7:77:2d:f3:99:4c:be:
fc:07:0d:71:72:85:a0:bd:df:f8:9d:0e:a2:69:9d:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:66:32:E8:57:F3:70:C3:03:8F:75:54:5F:12:2B:8E:B1:6D:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/385e1f-2106-4a3c-a68c-0dd96eea7a89/1/nyRmMuhX83DDA491VF8SK46xbRo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.186.0/24
IPv6:
2a12::/29
Signature Algorithm: sha256WithRSAEncryption
3c:2c:2b:0e:33:8f:bf:20:0a:cd:97:1d:49:c9:17:b0:d6:83:
c0:e5:c0:e6:62:3a:37:22:28:dd:be:77:02:5e:2c:15:65:d7:
d0:4a:d3:e6:99:db:46:45:38:6e:cf:88:61:07:4d:b4:8d:ed:
62:0a:c7:95:c5:9a:d1:05:f7:28:5f:ca:34:f7:6c:49:1f:c7:
32:d2:5d:7b:68:56:ef:03:d3:2d:f1:97:7b:e2:25:9b:7c:27:
e3:ca:66:d8:70:85:b3:60:b3:76:45:6d:62:1d:85:0c:4d:03:
c4:af:42:1f:69:d9:be:17:cc:6d:35:3c:a5:7e:dc:b7:c8:a2:
fe:cc:04:f5:6d:fe:13:d1:19:0f:bf:89:13:69:3f:93:11:dc:
a2:80:ff:9a:15:a6:b7:e4:1e:81:85:e5:3d:0b:f5:f0:60:3d:
30:f2:96:9c:91:48:2d:03:c3:e5:4d:7f:4e:c4:ed:e8:9d:f0:
5b:01:cd:36:a2:33:ca:fa:ae:2f:b9:d8:a7:f8:db:ab:7a:13:
92:14:af:76:ec:fd:22:65:1c:32:3b:3a:18:95:f1:9e:4c:3e:
86:91:dc:d2:d5:3a:f7:46:ff:67:97:d2:cc:3b:dd:c9:3a:10:
bc:ea:b2:b5:aa:1f:3d:43:e4:58:68:4f:ea:0d:77:c9:18:75:
3e:54:3e:0f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu1Afd6NJQ+BMN2qqgaiS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjI0NjYzMmU4NTdmMzcwYzMwMzhmNzU1NDVmMTIyYjhlYjE2ZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6PD9QAj1EMJZCsEoX6A5qG/ENdR
5VhE3d+azDD88St5jAhXMiHxWVBn1keoMoJepl2RNWiyX7+Zc+k58S52syS13XaY
z3FEOR5yUN8sN3VRrlAx+RaLpjV6H8eXOvEIHxb9rUIN8W83Lfb563FskRYHqgrA
OCcSWiZwiWSyq5ZAcMVl/ucDx4lvZU/AZLtm9fx/lyDL1Sqi4iuNxv+syN9joM8b
KQkrnskn/iBr29X6FjN6h5RtueDCPdg8R5rl0ewVIEZeLe1XR9sewUR8Z+KN51eu
Bh09jo7MX52WPTQg3fSfEfmWced3LfOZTL78Bw1xcoWgvd/4nQ6iaZ22cwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFJ8kZjLoV/NwwwOPdVRfEiuOsW0aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzM4NWUx
Zi0yMTA2LTRhM2MtYTY4Yy0wZGQ5NmVlYTdhODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMzg1ZTFm
LTIxMDYtNGEzYy1hNjhjLTBkZDk2ZWVhN2E4OS8xL255Um1NdWhYODNEREE0OTFW
RjhTSzQ2eGJSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwQO6MA0EAgACMAcDBQMqEgAAMA0GCSqGSIb3
DQEBCwUAA4IBAQA8LCsOM4+/IArNlx1JyRew1oPA5cDmYjo3IijdvncCXiwVZdfQ
StPmmdtGRThuz4hhB020je1iCseVxZrRBfcoX8o092xJH8cy0l17aFbvA9Mt8Zd7
4iWbfCfjymbYcIWzYLN2RW1iHYUMTQPEr0Ifadm+F8xtNTylfty3yKL+zAT1bf4T
0RkPv4kTaT+TEdyigP+aFaa35B6BheU9C/XwYD0w8packUgtA8PlTX9OxO3onfBb
Ac02ojPK+q4vudin+NurehOSFK927P0iZRwyOzoYlfGeTD6GkdzS1Tr3Rv9nl9LM
O93JOhC86rK1qh89Q+RYaE/qDXfJGHU+VD4P
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:15 2025 by rpki-client