Certificate

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/gY5eZDw9ohLSAi1mlxSwh1gVFcY.cer
File:                     gY5eZDw9ohLSAi1mlxSwh1gVFcY.cer (raw, json)
Hash identifier:          Kf9d/BQSZupOwleDiOvood5b2e8s2MXb8lWfaPn1ObQ=
Subject key identifier:   81:8E:5E:64:3C:3D:A2:12:D2:02:2D:66:97:14:B0:87:58:15:15:C6
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Certificate issuer:       /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial:       C7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Manifest:                 rsync://cc.rg.net/rpki/RGnet-cc/gY5eZDw9ohLSAi1mlxSwh1gVFcY.mft
caRepository:             rsync://cc.rg.net/rpki/RGnet-cc/
Notify URL:               https://cc.rg.net/rrdp/notify.xml
Certificate not before:   Fri 01 Apr 2022 22:24:32 +0000
Certificate not after:    Sat 01 Apr 2023 22:21:14 +0000
Subordinate resources:    IP: 198.180.153.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51161 (0xc7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
        Validity
            Not Before: Apr  1 22:24:32 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=818E5E643C3DA212D2022D669714B087581515C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:88:9f:41:00:fd:88:79:12:e8:f6:18:12:
                    5b:96:d7:a7:b9:f6:ea:57:58:f9:a8:9f:84:34:06:
                    1a:5c:a0:81:0d:7e:f6:34:06:54:6e:8d:96:9f:40:
                    95:30:bb:5d:ec:11:45:5c:07:35:e4:2a:7c:57:75:
                    61:98:ef:5c:47:72:a2:c1:9d:49:e6:d0:b2:a2:ac:
                    c3:a1:c1:6d:bc:97:30:70:a2:60:cc:5f:a1:d4:db:
                    23:d8:ab:c3:fb:f6:06:66:f0:17:c2:5e:e8:a5:ab:
                    52:ed:ea:7b:61:91:46:fa:6a:4f:ab:0a:d7:ae:87:
                    f8:a4:90:68:67:19:e5:1a:b7:a7:ca:8d:73:2d:19:
                    32:9d:08:28:c5:9c:86:75:62:48:6c:54:11:62:a2:
                    e5:8f:7a:cc:8d:33:69:8a:d6:a9:2c:57:25:77:f2:
                    53:77:6f:51:70:0f:4b:26:43:ff:bc:38:74:e4:11:
                    27:f2:49:b0:2e:45:f4:8c:4a:37:bb:54:fb:f2:4f:
                    9d:16:3d:c6:fb:e3:48:02:bb:b9:ea:60:76:d6:ed:
                    f0:0d:82:a0:22:b2:71:63:1b:07:ee:c1:09:df:59:
                    28:c8:ea:04:9d:04:3e:d7:0d:2b:44:e9:82:b0:16:
                    41:45:9f:e6:c7:1b:f1:37:ea:d5:09:2e:6e:72:f2:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:5E:64:3C:3D:A2:12:D2:02:2D:66:97:14:B0:87:58:15:15:C6
            X509v3 Authority Key Identifier:
                keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://cc.rg.net/rpki/RGnet-cc/
                RPKI Manifest - URI:rsync://cc.rg.net/rpki/RGnet-cc/gY5eZDw9ohLSAi1mlxSwh1gVFcY.mft
                RPKI Notify - URI:https://cc.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:91:24:ae:c3:3d:e3:8a:89:ec:2c:a4:07:f0:32:37:ce:dd:
         ba:d6:48:f4:e5:d4:80:da:9a:b0:87:c5:b0:76:33:87:ff:75:
         4b:0e:69:dc:af:10:b7:cf:4d:7a:e9:a2:b0:b2:cb:09:4d:bc:
         82:b0:8d:ee:78:a8:fd:22:4e:07:15:3e:91:e2:d6:f4:fb:5d:
         c9:2b:9d:2e:46:fb:13:ef:f8:e9:26:6f:65:d7:23:69:b0:c4:
         8b:a9:67:aa:46:ff:4d:b2:a2:6f:30:90:df:bc:0b:e2:23:fe:
         81:c7:af:31:f4:68:47:49:07:e5:92:c9:c7:b4:1a:82:78:4f:
         3b:a9:de:62:0b:c5:d2:cf:c8:a4:49:3a:3d:09:1a:e8:15:d8:
         db:91:5a:00:1e:45:d9:6a:07:7a:af:06:3d:75:28:7a:77:79:
         23:ba:92:52:0c:98:7e:eb:ff:ee:38:ad:3a:4f:67:1c:d3:3c:
         7b:9d:15:93:b7:87:68:a9:f5:d5:fd:81:ae:33:c2:d2:4a:94:
         39:10:10:a3:92:18:65:fa:7d:34:c9:d4:00:47:8b:3a:cf:3f:
         27:ae:61:a1:24:b2:93:7b:40:6a:a1:3b:cf:a1:ae:4d:f2:31:
         c6:69:10:be:05:ae:0e:01:35:1b:b1:73:11:2a:34:13:f1:3f:
         53:99:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org