Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3JsPwPrhyzvSi50Bqvw1Y_2pUdo.cer
File:                     3JsPwPrhyzvSi50Bqvw1Y_2pUdo.cer (raw, json)
Hash identifier:          l7x9e1dkJ94Y5uJ/oRZknQ98dgluvLSY7HySbXXGqdk=
Subject key identifier:   DC:9B:0F:C0:FA:E1:CB:3B:D2:8B:9D:01:AA:FC:35:63:FD:A9:51:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       751C13927E
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/1/DC9B0FC0FAE1CB3BD28B9D01AAFC3563FDA951DA.mft
caRepository:             rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/1/
Notify URL:               https://rpki.admin.freerangecloud.com/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:00:05 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 59893
                          IP: 45.148.76.0/22
                          IP: 2a0f:9400::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502982218366 (0x751c13927e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:05 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dc9b0fc0fae1cb3bd28b9d01aafc3563fda951da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:ea:96:7d:e4:03:96:4b:8d:e2:ce:77:37:
                    85:6a:03:89:42:82:e4:c5:f3:1a:ec:0b:f7:48:60:
                    4c:2c:62:13:18:e5:b0:a4:03:45:2c:8e:94:90:90:
                    31:7d:f5:df:37:61:8d:98:42:49:22:e6:b9:08:f6:
                    3e:22:24:45:f8:39:ab:8a:16:f0:28:f3:50:8e:49:
                    a2:96:7f:90:7d:0f:23:2e:20:85:fa:4f:42:8d:e1:
                    a6:42:e3:b0:83:5d:a4:57:fd:4f:74:5c:53:d0:42:
                    c3:0e:72:68:cc:a4:fb:10:35:64:8b:b5:0d:a1:15:
                    62:a2:df:0c:24:e8:00:6f:4a:0c:c4:42:c3:8a:23:
                    22:34:16:a5:bf:f2:7e:79:2d:0f:5e:fb:a1:8e:44:
                    e3:47:94:33:40:24:fa:db:ef:51:07:ea:f0:c7:cf:
                    6d:1a:4a:e2:f9:b7:63:d8:f9:da:54:62:26:31:6d:
                    b2:4c:c2:b7:43:12:81:bc:5a:7d:5f:72:2b:03:5e:
                    2d:ee:fc:d9:34:b5:67:88:d3:62:44:cc:09:34:fc:
                    cf:66:68:4a:82:b8:eb:8d:29:d8:51:89:52:db:79:
                    73:b0:59:14:79:c5:bd:ef:1a:d5:c8:8e:87:fb:fd:
                    ae:fe:da:4d:73:bc:72:b7:f4:f5:2b:68:35:0c:65:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9B:0F:C0:FA:E1:CB:3B:D2:8B:9D:01:AA:FC:35:63:FD:A9:51:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/1/
                RPKI Manifest - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/1/DC9B0FC0FAE1CB3BD28B9D01AAFC3563FDA951DA.mft
                RPKI Notify - URI:https://rpki.admin.freerangecloud.com/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.76.0/22
                IPv6:
                  2a0f:9400::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59893

    Signature Algorithm: sha256WithRSAEncryption
         a1:ff:b1:f6:0a:1c:b9:7e:ef:39:a9:5d:37:57:b9:95:c5:bc:
         17:f5:e7:8c:23:33:2a:0a:d1:c3:4d:7b:18:13:fe:27:9f:b1:
         78:8c:d4:5b:d4:90:94:98:4f:74:f3:8c:ef:86:01:12:39:d4:
         de:f2:f4:78:01:8e:af:88:27:77:e0:75:10:aa:6b:1c:ab:d8:
         89:24:a4:7d:63:7b:1d:a8:66:bf:28:10:55:32:05:66:32:fc:
         d6:bb:0a:30:94:d1:11:e1:6e:9a:8e:9e:47:9e:79:06:23:7a:
         a6:c5:2f:d0:16:ea:76:f8:47:e2:50:de:0d:5c:9d:e2:f9:2a:
         79:4c:e3:51:e8:09:b4:a2:9a:84:42:ca:38:5f:d8:23:1b:41:
         0f:b9:48:10:b6:2c:12:9f:7d:c1:83:b7:15:07:7c:1c:a8:f8:
         57:9b:80:ee:98:b9:8c:d2:e2:ef:49:37:7a:dc:a7:6e:94:42:
         6d:63:2b:da:74:af:fc:9e:94:71:a3:3a:cb:6d:a9:94:d6:b9:
         9a:f8:60:b0:42:84:18:1d:a8:70:8a:d3:89:d1:d3:fd:48:ab:
         11:ea:60:4d:1a:69:31:33:f4:0c:4f:d5:c8:50:7e:65:30:1b:
         b2:b8:be:21:cf:a1:4a:4a:f1:80:99:57:02:8e:52:9e:66:68:
         95:4e:49:ef
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIFdRwTkn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAwMDVaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGRjOWIwZmMwZmFl
MWNiM2JkMjhiOWQwMWFhZmMzNTYzZmRhOTUxZGEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZHOqWfeQDlkuN4s53N4VqA4lCguTF8xrsC/dIYEwsYhMY
5bCkA0UsjpSQkDF99d83YY2YQkki5rkI9j4iJEX4OauKFvAo81COSaKWf5B9DyMu
IIX6T0KN4aZC47CDXaRX/U90XFPQQsMOcmjMpPsQNWSLtQ2hFWKi3wwk6ABvSgzE
QsOKIyI0FqW/8n55LQ9e+6GORONHlDNAJPrb71EH6vDHz20aSuL5t2PY+dpUYiYx
bbJMwrdDEoG8Wn1fcisDXi3u/Nk0tWeI02JEzAk0/M9maEqCuOuNKdhRiVLbeXOw
WRR5xb3vGtXIjof7/a7+2k1zvHK39PUraDUMZb4pAgMBAAGjggKVMIICkTAdBgNV
HQ4EFgQU3JsPwPrhyzvSi50Bqvw1Y/2pUdowHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
AQkGCCsGAQUFBwELBIH8MIH5MEAGCCsGAQUFBzAFhjRyc3luYzovL3Jwa2kuYWRt
aW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzEvMGwGCCsGAQUFBzAK
hmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJD
LUNBLzEvREM5QjBGQzBGQUUxQ0IzQkQyOEI5RDAxQUFGQzM1NjNGREE5NTFEQS5t
ZnQwRwYIKwYBBQUHMA2GO2h0dHBzOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91
ZC5jb20vcnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1
d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZRMMA0EAgACMAcDBQMqD5QA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDp9TANBgkqhkiG9w0BAQsFAAOCAQEA
of+x9gocuX7vOaldN1e5lcW8F/XnjCMzKgrRw017GBP+J5+xeIzUW9SQlJhPdPOM
74YBEjnU3vL0eAGOr4gnd+B1EKprHKvYiSSkfWN7HahmvygQVTIFZjL81rsKMJTR
EeFumo6eR555BiN6psUv0BbqdvhH4lDeDVyd4vkqeUzjUegJtKKahELKOF/YIxtB
D7lIELYsEp99wYO3FQd8HKj4V5uA7pi5jNLi70k3etynbpRCbWMr2nSv/J6UcaM6
y22plNa5mvhgsEKEGB2ocIrTidHT/UirEepgTRppMTP0DE/VyFB+ZTAbsri+Ic+h
SkrxgJlXAo5SnmZolU5J7w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-fra.rpki-client.org