Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tXffNC3CJhhhfign1KwT-m1KKBc.cer
File: tXffNC3CJhhhfign1KwT-m1KKBc.cer (raw, json)
Hash identifier: elrSVCa/IkfXkzN7bMRGgJbaDv+5T/yU1cAntRNtJRY=
Subject key identifier: B5:77:DF:34:2D:C2:26:18:61:7E:28:27:D4:AC:13:FA:6D:4A:28:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA5B398646
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/755581-b349-4e32-a34e-ae849f0c36d1/1/tXffNC3CJhhhfign1KwT-m1KKBc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/755581-b349-4e32-a34e-ae849f0c36d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:54:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60652
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731674936902 (0xaa5b398646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b577df342dc22618617e2827d4ac13fa6d4a2817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:7a:07:a6:88:e6:b9:c0:a9:e0:dd:30:de:
c8:82:92:66:a0:c8:4c:e7:14:81:10:4b:57:77:f4:
37:42:a2:c9:c0:46:30:03:52:77:75:b0:67:47:3d:
e2:fc:46:08:e9:cf:72:be:e2:bf:f7:d9:90:22:8a:
20:6c:17:94:1d:5d:a7:c5:a3:db:e9:09:da:1d:03:
a9:31:e0:f0:99:f1:ad:c1:38:1f:9d:a1:d8:2b:97:
e4:d2:a6:31:26:4f:bb:e6:b6:60:9e:3b:92:e5:d8:
e9:af:43:d2:19:d9:af:df:57:6c:67:c4:0c:1d:d5:
81:38:92:f5:73:82:c8:1c:d6:30:24:3e:8a:51:6c:
c9:29:a1:5f:f4:45:72:9c:bc:92:41:58:54:cd:94:
a0:02:3b:56:ed:2e:ff:b9:10:0c:82:bb:41:80:ed:
4a:66:c3:f9:ad:93:eb:fd:76:72:6d:a1:e0:d3:a2:
b5:7e:75:69:8d:4d:c6:bd:0b:81:15:be:37:79:ae:
94:22:42:64:3e:af:f0:e5:c7:c9:00:82:03:61:4d:
77:85:0c:d1:0f:99:73:3f:77:82:dd:ea:cf:a6:cd:
4b:77:ea:da:d1:78:95:26:45:26:8d:3e:81:01:11:
5b:a0:99:25:c1:88:5e:d8:00:ce:5b:f5:2e:21:e2:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:77:DF:34:2D:C2:26:18:61:7E:28:27:D4:AC:13:FA:6D:4A:28:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/755581-b349-4e32-a34e-ae849f0c36d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/755581-b349-4e32-a34e-ae849f0c36d1/1/tXffNC3CJhhhfign1KwT-m1KKBc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60652
Signature Algorithm: sha256WithRSAEncryption
30:4f:31:af:93:0c:57:55:e5:b2:36:7e:98:2c:62:c2:57:d3:
82:15:73:1c:9d:a4:42:44:f4:61:0f:0d:63:f8:1c:2d:29:f5:
75:d7:74:8a:c4:dc:57:cd:5d:ea:d2:7c:14:93:40:7a:24:c0:
66:1a:b8:2a:bc:08:28:5a:b6:45:4c:6c:44:ce:40:7e:eb:48:
20:0a:b3:00:6a:7c:0a:d0:0a:1d:57:3e:7c:14:c4:f5:53:03:
fb:24:f4:2c:da:8f:08:a4:45:14:91:8f:9c:19:44:ac:2a:9e:
5a:f6:f9:fc:a9:3b:a5:23:88:74:d6:21:b6:c1:0a:de:00:6b:
66:06:77:f0:9d:b0:c6:e7:b3:07:8c:a6:86:d2:ec:42:28:8f:
ae:93:7e:f0:8d:55:80:c2:47:ed:c0:1b:00:5c:c8:88:c1:fd:
02:90:70:49:68:7b:2a:12:b5:e6:a0:ab:df:20:28:3d:4a:24:
8a:10:01:a7:9b:b0:e2:c4:b6:ac:65:1a:7c:44:77:19:52:4b:
6c:b2:bc:92:07:a3:9a:d2:05:c6:88:ee:f8:45:5a:10:20:4b:
38:15:07:cc:a4:12:18:d5:6d:af:f0:2d:6a:0e:ed:19:c7:38:
6c:07:4b:11:26:8e:2d:02:b9:c8:3e:bc:5b:09:97:54:41:f2:
85:96:13:58
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAKpbOYZGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTU1NDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiNTc3ZGYzNDJk
YzIyNjE4NjE3ZTI4MjdkNGFjMTNmYTZkNGEyODE3MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA+Cx6B6aI5rnAqeDdMN7IgpJmoMhM5xSBEEtXd/Q3QqLJ
wEYwA1J3dbBnRz3i/EYI6c9yvuK/99mQIoogbBeUHV2nxaPb6QnaHQOpMeDwmfGt
wTgfnaHYK5fk0qYxJk+75rZgnjuS5djpr0PSGdmv31dsZ8QMHdWBOJL1c4LIHNYw
JD6KUWzJKaFf9EVynLySQVhUzZSgAjtW7S7/uRAMgrtBgO1KZsP5rZPr/XZybaHg
06K1fnVpjU3GvQuBFb43ea6UIkJkPq/w5cfJAIIDYU13hQzRD5lzP3eC3erPps1L
d+ra0XiVJkUmjT6BARFboJklwYhe2ADOW/UuIeLlOQIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFLV33zQtwiYYYX4oJ9SsE/ptSigXMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3Lzc1NTU4MS1iMzQ5LTRlMzIt
YTM0ZS1hZTg0OWYwYzM2ZDEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvNzU1NTgxLWIzNDktNGUzMi1h
MzRlLWFlODQ5ZjBjMzZkMS8xL3RYZmZOQzNDSmhoaGZpZ24xS3dULW0xS0tCYy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwDs7DANBgkqhkiG9w0BAQsFAAOCAQEAME8xr5MMV1XlsjZ+mCxiwlfTghVz
HJ2kQkT0YQ8NY/gcLSn1ddd0isTcV81d6tJ8FJNAeiTAZhq4KrwIKFq2RUxsRM5A
futIIAqzAGp8CtAKHVc+fBTE9VMD+yT0LNqPCKRFFJGPnBlErCqeWvb5/Kk7pSOI
dNYhtsEK3gBrZgZ38J2wxuezB4ymhtLsQiiPrpN+8I1VgMJH7cAbAFzIiMH9ApBw
SWh7KhK15qCr3yAoPUokihABp5uw4sS2rGUafER3GVJLbLK8kgejmtIFxoju+EVa
ECBLOBUHzKQSGNVtr/Atag7tGcc4bAdLESaOLQK5yD68WwmXVEHyhZYTWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:23 2024 by rpki-client on console-fra.rpki-client.org