Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uxi_h61foM7AVuHXGCglbFEQIis.cer
File:                     uxi_h61foM7AVuHXGCglbFEQIis.cer (raw, json)
Hash identifier:          NAAAqht+8tn87ra+QUnbtn74gvst9sSkGA7QJ4bcNS4=
Subject key identifier:   BB:18:BF:87:AD:5F:A0:CE:C0:56:E1:D7:18:28:25:6C:51:10:22:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B1809A6058
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/c15086-b7d4-488f-846d-b5ec496ee01c/1/uxi_h61foM7AVuHXGCglbFEQIis.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/c15086-b7d4-488f-846d-b5ec496ee01c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 10 May 2022 13:02:38 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 192.76.164.0/24
                          IP: 192.76.171.0/24
                          IP: 192.83.216.0/24
                          IP: 192.94.78.0/24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762366812248 (0xb1809a6058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: May 10 13:02:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bb18bf87ad5fa0cec056e1d71828256c5110222b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:04:af:75:34:73:3a:66:f9:a5:33:71:e0:
                    9b:cc:84:f4:8a:5e:19:b4:26:2b:1d:7c:ac:de:78:
                    cd:cf:c3:94:e1:5f:b8:84:7d:97:50:98:7e:d2:6f:
                    14:f2:5d:99:b8:24:e1:68:c8:a6:0e:e8:04:09:a2:
                    5a:5a:50:c2:c7:5f:9b:00:b8:82:d9:d8:76:c2:c7:
                    3f:c8:9e:b4:af:f0:bf:45:07:f5:0a:c7:60:d0:6a:
                    5c:ad:0d:8b:59:73:01:d4:37:4f:ff:1c:20:39:2a:
                    37:fd:6e:63:3c:49:c8:0c:2d:dc:e8:ab:13:ce:93:
                    d0:ed:17:3e:51:70:d5:b8:37:8b:80:0c:bc:11:c4:
                    68:f0:f4:56:ea:bb:5f:7c:38:c1:75:af:f6:d1:b5:
                    3a:a4:f7:24:f5:6f:5f:fb:46:69:90:ca:fb:95:9b:
                    85:a2:b3:cf:bd:e4:82:45:ed:19:0a:e2:ae:e2:b0:
                    d0:c9:e9:08:b0:8c:56:d3:4b:90:9d:89:6f:88:af:
                    d2:41:4b:9a:b0:96:6b:b0:e9:30:1b:a1:88:3d:a5:
                    52:94:67:77:04:3d:de:26:37:ec:2d:ca:f2:78:10:
                    e1:df:45:80:0b:8c:f9:46:b6:a7:7f:50:b4:35:28:
                    b1:e5:6a:67:dd:e2:ed:7e:8a:a8:5a:f2:61:46:67:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:18:BF:87:AD:5F:A0:CE:C0:56:E1:D7:18:28:25:6C:51:10:22:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c15086-b7d4-488f-846d-b5ec496ee01c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c15086-b7d4-488f-846d-b5ec496ee01c/1/uxi_h61foM7AVuHXGCglbFEQIis.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.76.164.0/24
                  192.76.171.0/24
                  192.83.216.0/24
                  192.94.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:cc:10:f3:a3:f2:76:f2:80:61:bb:35:9e:33:05:52:dd:5e:
         ea:c9:9e:54:14:a4:5b:ab:ac:a0:34:61:ea:27:f2:02:65:d4:
         18:c6:9e:7f:6b:20:54:f3:33:ec:92:c2:d9:51:e6:6e:67:04:
         bd:8f:0d:4f:24:6c:93:65:a9:b2:a6:ee:8a:f3:a7:c1:e8:b4:
         44:21:9d:dc:d6:ef:da:e2:2a:98:5b:fe:72:bc:fd:1b:0a:b2:
         30:0c:c6:f5:15:99:5c:36:d0:3c:fa:29:05:17:8d:e1:c2:71:
         43:82:74:7e:c1:40:4d:de:62:0d:18:2e:dc:a1:2e:b1:3d:f3:
         a7:f7:9d:a7:c5:45:5c:08:8e:1c:bf:23:54:ef:4b:82:06:54:
         56:c6:fe:d3:46:f3:74:00:26:09:af:b3:7f:ae:ad:bc:bb:86:
         1b:98:87:ab:b2:46:7e:69:9f:a2:f2:0a:ea:62:1f:cf:19:f1:
         56:59:6d:78:6e:95:36:4e:e1:1e:72:29:e7:81:6f:c9:0f:5d:
         95:6d:9c:26:b6:45:85:81:91:a1:06:cb:a9:30:9f:17:71:49:
         3d:78:44:b4:ae:bc:4b:9c:32:ac:ea:f6:c0:8d:a4:38:1b:85:
         52:88:48:d3:1e:24:af:f7:bc:ad:fe:e7:a0:28:66:19:aa:75:
         b0:11:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:29:18 2025 by rpki-client