Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93wDW6cLR1cBiKwQ7p85bKuy6Kk.cer
File: 93wDW6cLR1cBiKwQ7p85bKuy6Kk.cer (raw, json)
Hash identifier: Ek7CVtkNDNLwTP2ZLQW+1pyOfPGER3oPhg/NC5zRu+Y=
Subject key identifier: F7:7C:03:5B:A7:0B:47:57:01:88:AC:10:EE:9F:39:6C:AB:B2:E8:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B61279D65C9D90ADFB72DF180CBF5DE7F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/93wDW6cLR1cBiKwQ7p85bKuy6Kk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Oct 2023 10:07:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 50560
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:27:9d:65:c9:d9:0a:df:b7:2d:f1:80:cb:f5:de:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 24 10:07:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f77c035ba70b47570188ac10ee9f396cabb2e8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:98:a2:f1:45:03:2b:e8:c7:e3:1b:6d:95:
68:5b:6f:25:a0:cd:21:39:1b:34:d8:9f:74:93:73:
6f:7a:bb:99:e1:61:cd:b0:61:37:fd:ed:a8:5d:f8:
f0:0b:77:69:15:df:25:fa:e7:df:84:94:48:33:f1:
cb:64:ab:84:22:a2:de:6a:7e:0d:6e:52:d5:19:c9:
d0:da:86:a7:8c:31:f6:79:f4:47:4e:7e:24:88:fe:
d1:2c:11:af:94:b3:51:f9:9a:c9:7b:6c:18:ae:0e:
8a:80:fa:fa:de:0d:61:46:0e:02:c5:17:8c:ec:b9:
fa:75:41:9b:90:39:96:7b:96:dc:22:e7:63:ce:56:
4c:3f:53:11:26:8e:5e:d5:b1:6f:2e:d9:40:85:e7:
80:f0:0c:85:9c:0e:24:9f:1c:43:cc:75:df:8a:46:
50:cc:53:57:b2:49:47:7a:59:8f:f3:d3:f9:0e:fb:
1b:63:d8:68:45:ba:1d:51:ec:9b:87:35:c0:fc:ba:
2e:50:12:db:57:1f:f0:d1:51:87:24:95:85:0c:ca:
74:8c:39:0e:20:2b:d1:6e:ca:a9:a1:a8:c1:0b:71:
98:63:dd:50:bf:88:81:79:7d:c0:e3:3d:69:aa:57:
b7:d9:56:6b:2b:39:f4:7c:c8:6b:8b:fb:43:fe:e1:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7C:03:5B:A7:0B:47:57:01:88:AC:10:EE:9F:39:6C:AB:B2:E8:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/93wDW6cLR1cBiKwQ7p85bKuy6Kk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50560
Signature Algorithm: sha256WithRSAEncryption
4c:43:a3:85:8f:ff:e5:f3:6f:ce:21:6a:bb:7a:66:c0:8b:80:
dd:f3:f7:a8:c1:61:b2:35:2c:20:73:3c:16:51:cb:88:33:25:
12:65:54:d5:08:91:9a:8c:2f:b3:aa:b5:1d:33:30:3c:2e:f1:
8c:64:9e:96:ab:8d:11:32:17:f5:c3:a2:84:48:0f:56:85:99:
c0:de:65:c6:b3:e2:2d:73:21:44:9b:be:18:29:3d:15:23:d8:
24:41:d1:33:33:3d:1a:9b:7f:7b:ba:c7:42:23:e8:13:e9:b5:
a7:0f:72:3d:5c:c9:36:99:c2:2b:d8:d2:b5:60:18:01:8b:90:
ff:d1:4f:8a:01:47:c4:56:91:69:cb:7a:16:e9:03:8b:cc:e9:
b3:82:df:eb:4f:7b:bf:08:6e:d7:de:d8:ee:da:64:4c:23:a6:
0a:f0:59:66:b8:15:86:82:80:63:5d:ed:23:8f:bb:a4:0a:07:
e7:26:df:6b:74:25:30:b5:a2:71:08:52:44:1c:e5:ec:0a:7f:
47:a9:25:f9:4b:9b:30:31:9f:3f:84:27:97:eb:53:42:96:d5:
bb:46:33:17:94:c9:4e:ee:d5:8e:56:7a:6d:4e:23:ff:53:7a:
46:68:9b:d1:e4:f0:45:0d:ab:82:f8:73:b1:b7:85:90:40:ce:
5d:cc:d0:38
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYthJ51lydkK37ct8YDL9d5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDI0MTAwNzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzdjMDM1YmE3MGI0NzU3MDE4OGFjMTBlZTlmMzk2Y2FiYjJlOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZCYovFFAyvox+MbbZVoW28loM0h
ORs02J90k3NveruZ4WHNsGE3/e2oXfjwC3dpFd8l+uffhJRIM/HLZKuEIqLean4N
blLVGcnQ2oanjDH2efRHTn4kiP7RLBGvlLNR+ZrJe2wYrg6KgPr63g1hRg4CxReM
7Ln6dUGbkDmWe5bcIudjzlZMP1MRJo5e1bFvLtlAheeA8AyFnA4knxxDzHXfikZQ
zFNXsklHelmP89P5DvsbY9hoRbodUeybhzXA/LouUBLbVx/w0VGHJJWFDMp0jDkO
ICvRbsqpoajBC3GYY91Qv4iBeX3A4z1pqle32VZrKzn0fMhri/tD/uEIlwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFPd8A1unC0dXAYisEO6fOWyrsuipMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2EzMTg1
Mi04MjE2LTQ1NzItOTQ5NS1lMzAyZmQ1ODMzNTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvYTMxODUy
LTgyMTYtNDU3Mi05NDk1LWUzMDJmZDU4MzM1Ny8xLzkzd0RXNmNMUjFjQmlLd1E3
cDg1Ykt1eTZLay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDFgDANBgkqhkiG9w0BAQsFAAOCAQEATEOjhY//5fNv
ziFqu3pmwIuA3fP3qMFhsjUsIHM8FlHLiDMlEmVU1QiRmowvs6q1HTMwPC7xjGSe
lquNETIX9cOihEgPVoWZwN5lxrPiLXMhRJu+GCk9FSPYJEHRMzM9Gpt/e7rHQiPo
E+m1pw9yPVzJNpnCK9jStWAYAYuQ/9FPigFHxFaRact6FukDi8zps4Lf6097vwhu
197Y7tpkTCOmCvBZZrgVhoKAY13tI4+7pAoH5ybfa3QlMLWicQhSRBzl7Ap/R6kl
+UubMDGfP4Qnl+tTQpbVu0YzF5TJTu7VjlZ6bU4j/1N6Rmib0eTwRQ2rgvhzsbeF
kEDOXczQOA==
-----END CERTIFICATE-----
Generated at Thu May 8 04:35:49 2025 by rpki-client