Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/728Xsi-3iK7jva9b8v-D4X3qvbE.cer
File:                     728Xsi-3iK7jva9b8v-D4X3qvbE.cer (raw, json)
Hash identifier:          AFepSkvR2vqiSKPgiwixY5lTrINkF/GJhX3erF31284=
Subject key identifier:   EF:6F:17:B2:2F:B7:88:AE:E3:BD:AF:5B:F2:FF:83:E1:7D:EA:BD:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8174CABF1B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/be6f10-1072-4b8f-bc36-cae4a1f3b913/1/728Xsi-3iK7jva9b8v-D4X3qvbE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/be6f10-1072-4b8f-bc36-cae4a1f3b913/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:26:24 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 195.80.48.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556010225435 (0x8174cabf1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:26:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ef6f17b22fb788aee3bdaf5bf2ff83e17deabdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:43:0c:06:7e:04:db:fb:7e:fe:d9:2b:28:
                    18:55:c5:af:be:da:ab:9e:b0:c7:9a:96:5c:4a:cb:
                    05:63:fd:27:3c:b4:16:d5:4f:9e:51:ce:f3:a2:e3:
                    8c:18:bd:50:93:c7:6b:b9:65:98:3c:61:18:c8:ed:
                    eb:3d:06:38:69:1e:a4:3e:9a:7b:a1:a7:c1:2a:94:
                    8a:50:d9:93:a7:8f:de:63:db:02:76:85:58:a0:25:
                    b7:09:c1:30:8b:ff:5c:a3:fc:08:89:dd:d6:34:1a:
                    2f:61:3c:7d:cc:4f:2e:04:4f:9e:18:e9:91:77:55:
                    26:20:e4:8f:e4:1b:d9:27:60:75:51:3d:0d:69:44:
                    a9:11:cd:91:0d:33:1a:9a:2c:65:3a:d3:41:33:73:
                    59:b0:d5:b2:cc:8f:2b:b6:d1:02:ff:d0:b9:25:74:
                    2e:4b:35:f5:c3:81:30:7d:3c:71:ca:db:91:31:88:
                    60:25:4b:63:03:df:df:5f:99:3f:64:1b:4a:9f:e4:
                    f7:d5:21:8b:e4:98:b8:06:3f:57:c3:03:95:f3:1a:
                    8a:30:58:68:af:b2:82:1d:ff:1b:f6:27:71:8a:2f:
                    68:a0:d0:90:57:03:52:00:78:c6:1d:43:30:3e:f3:
                    57:37:7b:41:13:c3:3f:69:bb:6b:83:22:ef:1f:b3:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6F:17:B2:2F:B7:88:AE:E3:BD:AF:5B:F2:FF:83:E1:7D:EA:BD:B1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/be6f10-1072-4b8f-bc36-cae4a1f3b913/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/be6f10-1072-4b8f-bc36-cae4a1f3b913/1/728Xsi-3iK7jva9b8v-D4X3qvbE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.80.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:c3:3c:83:ba:59:40:ec:d0:43:cf:07:0d:ee:7f:62:7b:
         bc:63:0b:48:35:88:da:87:b6:df:3f:9c:65:0d:e6:3a:e8:4e:
         20:16:0c:fb:7e:e0:6a:b4:b9:fd:81:41:af:c8:b7:8c:63:02:
         bf:4d:cf:5d:01:2e:97:e5:9f:c3:97:bb:86:99:de:b2:b1:da:
         a2:db:10:7b:26:1f:a0:9f:32:ab:ec:24:d8:5a:72:dc:3f:c8:
         0a:c6:62:6c:a4:c8:6a:59:59:05:5d:4a:51:9f:60:21:ce:36:
         c2:ba:6f:7b:c5:53:e2:ab:ca:ab:8d:8a:a8:24:9e:17:28:bd:
         3e:a2:cd:0e:ca:83:8c:9a:59:ca:6e:f5:20:d2:67:89:33:35:
         d3:ac:2c:d6:b1:d7:d3:ef:c7:ee:09:60:ea:09:7d:24:00:ad:
         72:d4:36:f0:9b:7e:d4:28:bc:5b:b5:9e:5b:80:41:9a:34:1b:
         5c:60:a8:b1:50:92:7b:66:8f:f7:87:6a:94:8d:06:a4:3f:30:
         04:15:96:94:50:9f:e9:7b:f5:1c:19:a2:06:a7:17:44:83:5c:
         3d:8a:91:58:03:cf:57:69:8b:8c:bb:97:67:23:90:a9:ae:e6:
         6a:4f:68:ed:29:e2:af:df:b2:ee:9e:92:79:49:3e:d2:e2:3a:
         30:4b:65:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:55 2023 by rpki-client on console-fra.rpki-client.org