Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r7NGGNyBMKnxANOMnaVdD2S44QA.cer
File: r7NGGNyBMKnxANOMnaVdD2S44QA.cer (raw, json)
Hash identifier: byvQL2uKOWoab6C1IqwBaL26qI69A6zYqduKrm0D4eA=
Subject key identifier: AF:B3:46:18:DC:81:30:A9:F1:00:D3:8C:9D:A5:5D:0F:64:B8:E1:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018748286717D1CF0E9613FC28A4A94E70B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Apr 2023 17:27:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199459
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:28:67:17:d1:cf:0e:96:13:fc:28:a4:a9:4e:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 17:27:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afb34618dc8130a9f100d38c9da55d0f64b8e100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:85:4c:2e:b0:a0:b5:96:00:a8:6e:3c:d3:
74:ae:04:ac:6c:e3:61:7e:c9:d6:56:a1:28:24:bc:
bf:5e:03:ff:ac:f5:5d:4f:46:d8:33:30:70:e4:ac:
e7:9d:b5:fe:6e:69:99:83:e6:2b:23:50:53:bd:a5:
9e:82:1c:23:5b:18:48:4f:f7:f1:a5:55:6b:8f:50:
c5:9c:41:9d:90:a9:f1:33:d1:f8:71:89:b4:bf:2c:
38:43:cc:7d:0d:53:66:db:37:87:41:87:08:86:f5:
f0:25:55:85:04:50:d5:f2:fd:3b:22:1e:8d:ad:de:
1f:7f:d2:67:a0:8c:02:aa:fd:6f:1c:2e:a6:00:e9:
2a:12:f7:ec:f6:ca:96:bb:4e:9f:54:6f:1d:f4:29:
33:ab:4a:3d:88:c8:f5:65:af:9f:8c:3e:50:35:5b:
9c:74:e3:da:4b:45:85:ec:cd:0a:1f:f3:5e:83:d8:
b4:db:d2:b4:6f:3e:e4:be:df:39:39:02:53:64:ce:
a0:19:be:8a:0a:6b:13:11:29:54:04:ad:0e:bd:f2:
83:59:db:55:b0:f8:3d:8f:b6:41:af:e7:b1:db:e7:
f1:d6:d8:f9:4d:a8:18:1d:c5:c7:0a:cb:85:e4:32:
09:c6:f3:f6:2d:42:6d:3e:39:33:3d:93:2f:6d:e2:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:46:18:DC:81:30:A9:F1:00:D3:8C:9D:A5:5D:0F:64:B8:E1:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199459
Signature Algorithm: sha256WithRSAEncryption
56:5c:03:61:10:4e:b2:49:6b:54:6b:c2:2a:26:91:7b:33:55:
c7:35:83:69:c7:cc:aa:ec:f9:80:80:d6:0c:bc:ff:51:a2:32:
dd:31:c4:d3:e8:b0:77:58:e5:cd:88:a2:5b:b0:89:f6:0e:40:
d5:3b:3b:0f:b2:52:ce:44:96:d6:5a:e3:b6:0b:ad:f2:42:ca:
e5:bc:eb:7e:62:0b:a7:13:03:86:22:32:70:70:44:bd:19:16:
ba:75:45:54:80:04:d9:64:ea:cb:7f:9a:3b:9c:dc:80:44:c8:
fa:1f:1f:e2:4e:57:5e:0b:e2:ed:91:99:23:3a:ee:a6:c9:07:
97:ce:45:8e:35:fa:3f:14:f1:e6:52:7f:b8:3e:39:9e:b4:12:
79:1b:81:91:0c:31:c3:66:34:cc:b0:6c:a4:c4:7c:09:d2:7f:
09:a0:3c:68:13:e9:0f:76:2c:4a:20:de:94:9a:16:70:e6:32:
1b:a9:01:ae:8b:02:b9:49:c5:04:04:3d:ae:e4:a5:0e:43:69:
a3:39:7e:81:44:af:5a:1b:00:04:7d:ee:9b:30:88:19:89:67:
a5:48:52:d9:38:12:fc:a1:56:9c:5b:37:66:e9:dd:85:6a:0b:
1e:1e:a8:7b:ea:65:31:b4:1b:e7:53:81:62:57:46:f3:1c:cc:
76:bf:a7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:34:49 2025 by rpki-client