Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mcPHMqZHOkNV0VleRiUi9i5_wIc.cer
File: mcPHMqZHOkNV0VleRiUi9i5_wIc.cer (raw, json)
Hash identifier: 2JtibxoPvAnCEF+uWInxEzaCcPBHZwTW3uMhBCrLb9w=
Subject key identifier: 99:C3:C7:32:A6:47:3A:43:55:D1:59:5E:46:25:22:F6:2E:7F:C0:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5DBD5CB84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/a86e19-c010-443c-afe1-cc88ce368c27/1/mcPHMqZHOkNV0VleRiUi9i5_wIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/a86e19-c010-443c-afe1-cc88ce368c27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:54:53 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 47540
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712357825412 (0xa5dbd5cb84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99c3c732a6473a4355d1595e462522f62e7fc087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:85:d8:ac:23:14:e0:77:a1:62:fd:e4:db:
02:a7:93:5c:b1:f4:26:71:d8:75:21:b5:ee:15:61:
25:f5:8f:11:ea:67:f5:18:fa:32:0a:bf:02:29:75:
fc:a7:42:f8:09:91:36:bf:9d:d2:3c:58:32:93:57:
4d:25:d7:0b:5e:74:84:8e:f0:91:a2:90:08:be:e1:
cc:c7:00:c8:44:a1:e5:87:35:a1:7d:ef:7c:fc:ed:
a9:33:75:c0:07:c3:be:4b:47:b9:90:2d:d6:02:f6:
eb:02:0b:4b:94:e6:50:c9:40:9e:53:61:ea:e0:74:
1b:42:5a:49:eb:09:66:76:46:f8:86:87:c9:be:09:
6d:b4:9f:f8:2f:39:9e:54:a5:e6:04:21:ce:68:2b:
d8:e6:d7:de:73:55:98:4e:0e:2c:67:c3:7b:d5:f3:
d9:e6:b2:8a:43:ef:bd:af:5b:9b:ad:be:22:70:e1:
79:e5:1e:b8:61:26:13:16:58:c5:9f:ac:78:dd:1e:
a2:88:3a:bd:5c:f9:48:69:a2:0d:2c:d2:76:c3:e9:
1e:36:02:25:d6:de:3e:36:97:7b:df:e2:99:70:c4:
0a:a8:45:43:54:95:17:f3:b1:c4:a8:9e:9d:d3:35:
7a:0a:58:c8:b0:34:90:cf:96:43:59:0e:59:6f:a6:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C3:C7:32:A6:47:3A:43:55:D1:59:5E:46:25:22:F6:2E:7F:C0:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a86e19-c010-443c-afe1-cc88ce368c27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a86e19-c010-443c-afe1-cc88ce368c27/1/mcPHMqZHOkNV0VleRiUi9i5_wIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47540
Signature Algorithm: sha256WithRSAEncryption
8a:79:ee:23:77:d1:36:32:86:f5:ac:35:99:ab:e5:8a:d4:95:
0c:eb:ac:d4:57:d1:59:3f:3f:d3:38:dc:9b:b2:a7:1d:5b:12:
02:0c:25:96:f8:ee:58:1c:b1:fb:de:d8:de:ae:92:49:76:28:
e7:cd:c4:89:0e:b2:72:6d:0e:fa:75:26:78:f3:91:e9:56:ee:
53:8d:e5:86:e8:02:b9:a3:f9:a5:d6:9b:62:c2:8a:d0:8d:2d:
66:b0:19:1d:c3:de:99:4f:7c:eb:59:02:80:99:c9:c2:59:9c:
25:89:7a:c4:08:9c:02:bd:27:ed:33:20:ad:1b:a9:b9:cf:d6:
ef:40:56:44:58:90:07:c3:2e:78:26:e6:90:ea:b1:77:62:f5:
b5:25:90:e0:8a:c5:f3:06:02:a4:6a:a8:8a:28:08:00:2b:fb:
9b:72:0c:d6:db:67:d3:bb:2e:0c:f4:8d:f4:a4:02:99:e1:dd:
c7:aa:f2:f1:de:7c:d0:80:93:bd:de:a1:f9:84:66:61:de:6a:
9c:90:ee:7a:18:47:98:26:bd:26:91:10:55:51:12:bd:3d:7f:
c8:91:3b:a1:0a:2c:75:f1:a0:b1:7c:6e:65:b5:2e:73:ec:24:
15:2a:31:85:db:ec:81:ad:45:86:cc:3f:ee:7e:b7:71:ec:42:
54:b5:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net