Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z63MTmn-4ZbZV4D245A4WIJlSHs.cer
File: z63MTmn-4ZbZV4D245A4WIJlSHs.cer (raw, json)
Hash identifier: PsO6Vb2hvPjwkg3ajNdZr5EE7bl5ieq1hudnxVjv7fA=
Subject key identifier: CF:AD:CC:4E:69:FE:E1:96:D9:57:80:F6:E3:90:38:58:82:65:48:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184F74AA5F5305512BDFAE9C4C86C30F637
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/8546e4-72cb-4883-802b-09f08f087440/1/z63MTmn-4ZbZV4D245A4WIJlSHs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/8546e4-72cb-4883-802b-09f08f087440/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 Dec 2022 14:29:35 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2ccc::/48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:4a:a5:f5:30:55:12:bd:fa:e9:c4:c8:6c:30:f6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 9 14:29:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfadcc4e69fee196d95780f6e39038588265487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:7c:58:5a:ee:c4:cc:c3:3b:55:ad:2e:cc:
4c:ea:c2:6b:e2:a5:b2:29:d7:74:d0:51:e4:a1:51:
83:70:3d:66:68:ea:d3:32:03:6c:b7:bb:1f:a6:eb:
f6:fd:ce:5a:75:f1:23:dc:6e:08:39:35:ed:81:95:
6a:89:6e:72:3a:8c:7c:2c:9b:2e:a0:e4:39:ff:ad:
58:70:ae:2b:a5:28:3b:d9:74:2e:98:3e:56:0b:05:
36:6e:64:26:2d:36:76:23:54:63:7f:fe:a0:f6:02:
fb:0c:1a:36:26:84:96:c2:18:dc:37:52:e2:60:06:
1f:fa:57:af:f3:5a:48:bd:15:98:77:5a:9c:1a:a4:
c9:63:cc:c1:50:b7:85:6c:b6:19:89:d9:fe:9a:50:
3d:a4:e5:11:80:9b:f1:08:59:cf:3c:4c:09:3c:99:
88:75:24:e9:ad:58:43:8b:90:ec:2d:c6:c7:e6:3b:
f0:e0:58:c2:9f:ec:13:e9:fd:85:d7:59:f5:17:2d:
e0:be:22:45:af:0b:fc:4d:d7:a1:91:48:0c:60:6e:
94:ae:80:25:74:80:18:92:d9:ba:d5:3a:e7:27:bf:
86:46:a5:a9:87:3d:79:a8:12:8f:ee:e5:74:49:25:
53:7a:df:ed:12:15:17:86:97:1d:d1:64:1c:f5:60:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AD:CC:4E:69:FE:E1:96:D9:57:80:F6:E3:90:38:58:82:65:48:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8546e4-72cb-4883-802b-09f08f087440/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8546e4-72cb-4883-802b-09f08f087440/1/z63MTmn-4ZbZV4D245A4WIJlSHs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ccc::/48
Signature Algorithm: sha256WithRSAEncryption
52:c6:52:55:fb:9b:56:94:3c:6a:49:b2:bf:d8:44:6d:59:1e:
07:06:b1:5f:0c:22:67:de:84:7d:e1:f3:5e:e0:e8:79:25:99:
f8:59:66:f4:97:73:6a:22:8c:cc:4f:12:1c:31:29:b4:63:44:
93:cc:36:5d:f2:dc:e1:23:0d:9a:dd:31:f2:cf:d5:3c:1b:23:
61:66:14:95:7a:9a:a4:20:27:58:d5:be:19:7b:39:ba:10:b4:
4f:80:0d:39:77:65:b8:94:86:02:fd:28:d9:f5:79:ba:50:49:
c8:ca:7e:8c:07:f1:e3:24:f1:0d:97:4a:41:98:b3:1f:7f:df:
35:a8:4b:e0:9c:56:20:f2:2b:e3:ca:cc:98:39:99:59:f3:56:
a6:33:54:6a:b8:b6:4e:a7:43:b4:b8:5e:9b:c5:16:46:33:ec:
70:ad:cb:ba:f3:fb:fb:33:db:f4:35:ba:0e:49:26:1d:66:d6:
6c:5e:75:24:18:e9:0e:78:49:53:8d:92:0d:8a:65:0d:b1:a3:
4a:f8:d9:81:fe:3d:d9:2e:0e:2d:7e:38:3d:57:a3:2b:5a:b2:
ce:d8:fb:f8:3b:60:12:f6:bb:2d:d1:8a:e2:27:16:7c:0a:4f:
c1:0b:60:3c:2b:59:a3:a7:26:96:36:b6:fd:15:8a:89:a8:21:
2d:e8:66:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:48:29 2025 by rpki-client