Certificate

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
File:                     WMf3kmevdLp9L8wlYmUsNbXhPrE.cer (raw, json)
Hash identifier:          tP8SrY+NAVB4rGFn/oG3c3jqbCiCcsa95iLhc2GAqLY=
Subject key identifier:   58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Certificate issuer:       /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial:       E9B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Manifest:                 rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.mft
caRepository:             rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/
Notify URL:               https://ca.rg.net/rrdp/notify.xml
Certificate not before:   Fri 30 Sep 2022 03:24:08 +0000
Certificate not after:    Sat 01 Apr 2023 22:21:14 +0000
Subordinate resources:    IP: 45.132.188.0/22
                          IP: 147.28.2.0 -- 147.28.6.255
                          IP: 147.28.8.0/21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59833 (0xe9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Sep 30 03:24:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:70:22:06:1c:65:d1:ad:f3:d4:c3:28:84:
                    aa:f9:15:11:b5:ad:0f:fa:65:cb:1b:74:b8:c1:d9:
                    fc:2f:10:5e:70:ee:4d:7d:52:f1:85:0f:c4:a5:ab:
                    68:13:0d:65:4c:af:1e:35:d2:1a:cd:8b:29:df:68:
                    d4:db:55:5c:3a:35:b8:5b:c0:32:c9:cf:c0:d1:f5:
                    4c:d5:4d:53:f6:e0:ad:9c:a8:38:a4:f7:66:d8:80:
                    ac:29:68:a1:fd:09:bd:03:90:f1:c8:b5:8e:07:94:
                    e2:c1:4a:35:c9:48:54:cf:33:2d:0f:81:71:b4:c4:
                    d9:f0:8a:f7:38:b4:c1:f1:e8:84:40:f4:02:10:d0:
                    a6:80:7d:ad:9a:17:4b:03:db:bc:b0:46:e7:66:63:
                    89:54:f4:96:a8:19:74:91:4c:a0:5c:70:cc:f5:f3:
                    79:d7:68:ee:f5:af:41:7e:e7:74:c6:bf:c6:83:61:
                    48:68:1d:c7:af:1e:49:2d:94:45:09:3e:52:ae:f3:
                    fe:af:a3:98:de:50:48:ec:27:55:10:03:80:59:b3:
                    5d:10:62:4c:b0:7f:3b:bb:7c:c4:18:4c:af:8c:87:
                    01:1f:86:09:87:04:7d:1a:6c:12:66:0d:04:bf:fd:
                    d6:69:62:56:91:b4:40:10:ad:20:cc:b5:88:de:08:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
            X509v3 Authority Key Identifier:
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/
                RPKI Manifest - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.mft
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.188.0/22
                  147.28.2.0-147.28.6.255
                  147.28.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:38:27:87:25:76:e5:f0:8d:1b:74:db:37:59:64:79:2b:
         06:e1:02:cc:75:29:8a:49:13:7c:51:ce:81:4d:32:e9:7d:02:
         12:55:39:9c:f6:ea:1c:19:22:db:4b:65:f9:ff:25:e5:a5:dd:
         ef:84:09:9b:80:6e:c9:cc:c7:be:95:fc:b9:12:90:7e:a5:6b:
         32:9c:f7:46:0e:62:f6:6c:b3:27:40:c6:fb:54:7a:61:e4:c2:
         c8:f9:56:1f:e3:94:ff:40:fa:d2:d3:04:13:51:c6:d0:a7:ee:
         16:22:26:8d:82:9b:dc:e0:b0:9e:70:68:d7:24:dd:6a:05:48:
         34:6d:1f:0e:e8:c3:cb:9e:83:b3:93:e9:3c:c9:51:11:5e:03:
         1f:53:ec:8a:7d:40:02:16:c1:09:a9:61:59:5b:43:41:91:33:
         42:f6:cc:13:b4:b5:df:7f:58:30:da:78:8f:29:01:f2:c9:24:
         e5:31:3d:33:fc:cf:cc:67:f4:c5:80:39:d2:00:68:c8:ce:6e:
         e7:8b:8d:d1:bf:e2:cd:17:84:35:f1:42:f1:30:62:a0:a0:f5:
         ba:ee:a0:1c:47:20:32:d6:fa:50:65:9a:68:8a:26:6a:e3:03:
         87:2c:4f:b6:0e:0f:40:ea:28:78:b3:92:ee:34:ff:ed:df:3e:
         50:7d:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org