Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
File:                     GJf10ZwLE3bLvI-W2EifN6hfvy0.cer (raw, json)
Hash identifier:          Hcr39FPA+bM9MYNtfqt7Q6P7M0wJ7mZ3j2H/s379mVw=
Subject key identifier:   18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       78102CFB21
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/54/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:05:38 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 5.182.32.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515667458849 (0x78102cfb21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:05:38 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:ab:86:39:3a:82:bc:4c:19:72:f5:5b:7f:
                    39:5d:7a:a9:e6:df:a9:16:3d:ba:cc:ef:a9:f8:a3:
                    40:61:3d:05:1d:f5:d6:d3:05:26:02:1b:f2:c3:5c:
                    84:16:77:07:81:f6:fc:27:59:ea:d2:d1:51:b2:70:
                    2d:b9:43:d5:30:46:d3:62:f2:ce:c4:ec:7c:b1:78:
                    f6:a1:91:9f:36:54:c8:7d:1b:2c:27:34:2b:eb:32:
                    4b:f3:d6:a5:35:ac:75:5e:fc:85:6e:43:5c:86:dd:
                    fe:fc:1b:e2:cc:21:d2:7d:ff:93:3e:0b:16:00:32:
                    ad:43:54:23:81:0b:05:63:d8:32:b0:75:86:58:4c:
                    30:cc:30:24:c9:07:64:ed:a6:fe:46:9a:46:b8:13:
                    fd:d3:ab:e9:52:57:1c:1a:2f:97:93:bc:98:fb:f6:
                    d5:d0:77:74:21:0b:6d:25:b2:ee:fc:59:fc:20:4b:
                    cc:2e:70:c8:fc:32:30:30:62:46:ea:25:92:a5:b0:
                    88:5e:f7:fa:0c:f6:05:26:07:1d:3c:97:c2:26:49:
                    09:21:57:9b:ca:fc:69:69:16:1f:f1:13:7f:d3:fd:
                    da:0b:b3:50:b0:9a:86:03:95:f6:6c:48:e4:35:ac:
                    c3:ae:c4:8f:fd:ad:d4:4e:64:70:a8:5c:fd:d3:4b:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:de:67:a5:9f:07:42:95:e2:ad:5c:eb:e6:4f:7c:83:fc:
         78:56:93:f8:75:a2:6f:23:01:12:95:a8:17:9d:b9:98:2d:dc:
         7b:15:af:05:b9:2b:14:c5:a6:7e:11:7c:70:15:07:9d:b4:0c:
         3c:98:30:33:ad:f5:63:e0:f1:59:dc:84:83:8a:47:db:ec:70:
         b0:e0:3a:6a:69:8e:3b:6d:01:26:1f:61:13:9b:8b:5e:38:e2:
         bb:87:58:25:c7:42:1c:44:c3:5e:e4:08:8c:ac:83:26:42:bf:
         2c:47:bf:af:30:62:99:74:9f:51:96:f3:40:a2:2f:59:b8:1d:
         d7:44:85:aa:14:e6:4b:05:c0:54:bf:6d:cb:a9:6c:bb:ee:54:
         b0:2d:2d:4f:54:19:82:9a:d2:0f:3f:d0:a4:2a:38:85:75:90:
         94:5f:1e:bf:9d:e3:d9:ba:e4:b1:b4:6c:98:0b:da:c4:0b:0f:
         f6:b8:6f:89:7d:a8:77:27:36:87:58:3d:10:d4:da:28:6d:83:
         0f:67:0e:d5:90:dc:c1:42:34:73:06:c4:27:8e:a5:96:fa:8d:
         d8:dd:f3:16:31:b3:47:31:ef:cc:32:3d:86:cc:fb:68:d2:a1:
         7b:67:1d:5f:75:b4:94:5e:df:14:1b:35:38:e3:41:e2:75:dd:
         d4:3c:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:15 2023 by rpki-client on console-ams.rpki-client.org