Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5NWSBQzWzb0B6s7Iy07WA2MIoEY.cer
File:                     5NWSBQzWzb0B6s7Iy07WA2MIoEY.cer (raw, json)
Hash identifier:          +ZYEDLG/2aseOC4S7MQu5eGHQSnvlznuaOeGbdGcm/I=
Subject key identifier:   E4:D5:92:05:0C:D6:CD:BD:01:EA:CE:C8:CB:4E:D6:03:63:08:A0:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       752D44FB98
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123571/0/E4D592050CD6CDBD01EACEC8CB4ED6036308A046.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123571/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:01:12 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.139.180.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503270669208 (0x752d44fb98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e4d592050cd6cdbd01eacec8cb4ed6036308a046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:bb:ca:04:3b:55:94:4c:3c:9c:54:24:57:
                    ff:d7:ee:a0:10:38:52:03:6d:f9:e0:75:22:4a:28:
                    3f:bc:78:d2:21:bc:09:5f:5a:bc:6b:b0:21:e8:9d:
                    6b:a2:bd:88:6a:b9:7a:64:36:d9:91:96:34:5a:b2:
                    43:32:1b:56:ec:d0:40:a1:3e:0b:44:5d:90:b7:d5:
                    93:45:e7:6e:eb:f1:a8:87:e6:56:31:9a:e8:d1:9a:
                    52:43:d9:13:83:5f:9a:a1:20:07:6b:5a:5d:af:95:
                    5e:de:dc:a3:26:d2:1b:4a:21:49:90:6e:b2:89:0f:
                    17:4f:ff:82:2b:69:34:45:b9:2d:5f:21:93:b4:27:
                    2a:a6:bd:05:bc:6d:f6:0d:66:42:e0:cf:b4:3b:fd:
                    f5:bb:d5:d7:ae:cc:32:d1:eb:61:2f:1c:78:6c:e3:
                    79:22:83:79:b1:f5:f6:a0:92:20:fc:ce:e0:86:30:
                    b3:b9:0b:24:5e:35:13:79:b8:ba:17:47:ea:1f:e0:
                    94:5e:cc:31:60:3c:33:73:ec:e1:bd:03:f3:ea:9d:
                    30:6b:e4:72:01:3d:ef:55:19:fb:03:36:2a:97:b3:
                    f1:1c:83:cc:dd:02:06:de:f0:4c:11:0f:1b:62:15:
                    0f:55:75:d9:24:82:83:3d:3c:d3:14:33:4c:aa:8a:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D5:92:05:0C:D6:CD:BD:01:EA:CE:C8:CB:4E:D6:03:63:08:A0:46
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123571/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123571/0/E4D592050CD6CDBD01EACEC8CB4ED6036308A046.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:86:a2:ae:8e:b8:0a:6b:3a:27:6c:4c:27:2f:10:e9:ab:
         f0:04:c7:bb:af:59:c1:6a:99:30:2a:f1:f3:e3:09:49:73:f7:
         ac:f6:91:4f:fb:be:e0:ff:51:80:11:99:28:de:d2:29:82:7b:
         d2:e4:39:4a:2a:e8:bc:cf:80:ee:09:73:b9:5b:63:9d:94:75:
         b5:4c:c0:5f:d2:24:71:c0:9d:a4:c9:62:db:5d:77:55:27:ad:
         01:af:5f:02:6c:9f:0e:90:98:1e:30:09:27:95:74:86:ff:86:
         39:08:1b:75:76:b7:9b:30:a6:47:79:5f:c1:3e:e5:dd:fb:4e:
         7a:6c:8a:36:72:27:66:16:c8:63:5f:3f:94:19:2e:62:bd:23:
         79:01:7c:36:b0:66:c0:93:2f:b3:16:6d:dc:67:48:a1:08:d1:
         3e:5d:ca:de:bf:75:2a:30:9b:68:e3:4f:1a:98:b9:c5:0a:a1:
         d4:87:74:83:d9:31:95:9d:7b:20:7f:de:b4:ee:26:9e:e9:09:
         0f:7d:97:cb:11:e6:e0:62:83:3b:78:b2:57:32:22:ed:83:e3:
         f0:91:25:9c:cc:29:40:cf:dc:01:e7:33:90:8a:7e:20:c8:78:
         f6:67:11:17:e9:4b:a5:ca:c2:15:ff:17:bf:f7:43:f2:2b:cb:
         1e:bc:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org