Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer
File: mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer (raw, json)
Hash identifier: U0T8WreDFI9t3XH/cf67hI9gNiXa91jM0oNt1sw/GBI=
Subject key identifier: 9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9DBD4CE9D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 04:53:46 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.138.92.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677485799892 (0x9dbd4ce9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:02:45:07:b5:2e:9d:7e:e0:9b:ba:61:a7:
d5:09:fb:e3:20:07:da:79:c8:d8:8d:e1:39:50:dd:
72:21:2a:a8:7d:7d:10:7d:4a:5b:5c:85:50:8e:58:
3a:50:0a:dc:8d:19:1c:85:ed:54:12:ab:5b:94:18:
34:83:f7:9b:fe:f0:bf:5a:08:b0:a9:b7:05:e9:7c:
81:41:ed:93:dc:0b:ea:86:b2:5a:ef:f2:72:bb:2a:
38:4a:8d:89:66:a1:bd:bf:a4:9d:35:77:2e:99:1e:
c1:3f:1f:d6:d7:8b:96:bc:b6:d3:de:08:b0:3c:08:
96:a2:de:26:8d:16:46:83:38:6b:6e:a2:d4:91:fb:
1e:71:7c:1c:1d:68:62:8f:b4:96:0e:c9:86:1d:83:
1e:4e:15:01:55:b8:8b:a8:c7:0f:c7:12:1a:d8:56:
3a:87:fe:d0:71:50:b9:e0:d4:4c:1a:c4:17:7a:dc:
60:fd:07:8f:d6:ad:53:af:5b:67:fb:29:21:79:ea:
95:dc:66:6e:80:2c:ac:fe:9c:46:b2:3c:69:3a:7a:
e6:06:97:e4:91:21:7e:50:ba:f1:0c:2b:a2:06:76:
c1:a3:20:d1:8a:a0:1f:98:f7:93:60:c6:45:92:4b:
4c:cf:1f:c0:20:0d:3f:9a:48:6f:14:2b:3a:de:6e:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:e2:f0:51:c2:19:58:20:7e:89:01:a0:ac:77:9e:87:f3:a4:
e9:05:c4:85:03:e5:dc:79:99:6e:49:3f:62:6a:84:47:d7:bf:
67:6f:18:30:6d:2a:ab:a7:c0:9f:bf:65:a5:54:91:f9:63:4f:
93:87:78:91:db:81:ac:fb:93:f0:9c:c0:c5:bc:0f:00:3b:7f:
fd:46:d8:8a:61:1e:d2:48:bb:40:3f:7f:27:a5:8c:70:d3:90:
2a:5c:45:72:ec:a9:90:9f:b1:b9:12:af:a6:98:26:a8:c6:58:
86:a8:61:82:06:b8:3a:a9:63:2a:63:41:6f:90:e8:e7:09:7e:
c0:c9:aa:9b:cd:80:d4:86:3c:07:96:81:26:73:df:c6:ec:7c:
21:88:c8:bf:d0:ba:48:4a:da:8b:9c:8d:72:f1:09:d2:eb:ff:
79:28:5c:fd:f2:0b:b5:78:04:3f:62:8c:48:d6:b9:b9:44:88:
95:b1:0a:6f:a9:dc:48:2a:d1:00:fa:b5:23:34:47:d6:40:17:
6d:a2:5a:45:3d:0a:c5:32:ca:b3:3f:0d:c9:e2:c7:31:f0:cf:
a3:8d:a0:24:ae:2d:6e:9d:30:a3:1e:09:3b:0e:9d:8f:ec:eb:
45:c7:41:15:29:7d:14:28:43:88:38:e7:1e:72:a4:5f:83:5a:
8b:eb:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net