Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JKPbxaCc0hFEXhTWbVa35BP9NHo.cer
File:                     JKPbxaCc0hFEXhTWbVa35BP9NHo.cer (raw, json)
Hash identifier:          u+GBWwodksA9gffzvYhEzXc7N7BvM0RWvZ3yItDP2HI=
Subject key identifier:   24:A3:DB:C5:A0:9C:D2:11:44:5E:14:D6:6D:56:B7:E4:13:FD:34:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       82E3EC90D4
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/93/edca57-127a-40d9-b7a4-d0abf1b7bb15/1/JKPbxaCc0hFEXhTWbVa35BP9NHo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/93/edca57-127a-40d9-b7a4-d0abf1b7bb15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:51:41 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 5.183.204.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562169680084 (0x82e3ec90d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:51:41 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=24a3dbc5a09cd211445e14d66d56b7e413fd347a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:b7:6f:77:a1:3b:03:56:bc:27:40:33:7d:
                    a8:2e:35:6a:1b:a1:69:16:1e:3a:3f:d9:e3:35:19:
                    27:e6:47:b7:32:da:e8:90:db:b5:40:77:ac:59:ba:
                    de:90:d2:d2:5d:52:c6:9f:9a:d0:9b:ed:f5:5c:74:
                    74:a2:7c:29:6a:ba:25:ce:bf:36:45:3e:59:35:86:
                    1c:42:68:2b:5d:fa:a1:30:cd:4c:69:3e:3a:7f:10:
                    7c:64:5b:85:cd:19:8c:42:2e:55:9b:98:65:5c:b4:
                    67:87:c2:90:56:85:e3:8a:7c:62:44:6e:3e:0f:cf:
                    a6:8a:99:87:c6:24:c6:9d:b5:f6:68:78:33:ab:54:
                    d0:83:fe:f2:74:ba:fd:c4:4b:30:59:5f:05:ea:47:
                    06:e0:32:2c:06:fd:71:c4:f7:89:c6:a4:8c:b5:ce:
                    54:25:92:6c:fb:6c:06:73:ea:9d:63:59:ba:4e:8c:
                    a8:81:28:74:7f:fb:4a:61:88:ef:99:00:61:7b:61:
                    bc:11:c3:4c:8a:a1:4b:b5:d9:c3:27:c9:8e:c1:0d:
                    78:36:4b:cc:ec:b3:3a:ad:66:ae:5d:b4:5b:23:7c:
                    b7:61:1b:b0:56:89:c2:b4:a3:f5:f4:b9:77:22:17:
                    c5:4b:6f:91:f9:bf:5c:73:58:0f:47:f7:13:17:47:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:DB:C5:A0:9C:D2:11:44:5E:14:D6:6D:56:B7:E4:13:FD:34:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/edca57-127a-40d9-b7a4-d0abf1b7bb15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/edca57-127a-40d9-b7a4-d0abf1b7bb15/1/JKPbxaCc0hFEXhTWbVa35BP9NHo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:8c:e7:c9:f6:f8:d5:24:a3:a9:ec:2c:68:a4:35:1f:4f:62:
         c4:97:d9:b8:6c:eb:e0:b7:19:b9:75:25:ae:c6:fd:30:36:00:
         04:2e:12:66:9b:de:e8:01:8c:e5:51:38:dd:0c:05:da:54:5e:
         a3:48:46:a6:14:21:e2:86:a5:64:c0:eb:ac:bf:82:8a:82:9a:
         dd:9f:2f:c0:4b:83:30:b9:a1:0a:f4:83:0b:24:d5:4a:67:77:
         61:d7:25:45:cd:22:ef:f5:60:df:80:72:20:1e:37:7b:ff:93:
         bc:8f:83:fc:7c:80:34:51:95:a4:66:e4:78:01:d9:50:b3:d2:
         57:ef:f6:2b:c4:d2:a2:bc:05:1f:a4:bc:af:bf:17:21:47:af:
         aa:65:35:fc:a5:b6:c3:d5:52:b9:8f:f5:93:fa:24:c7:f4:6d:
         12:19:4e:51:01:2d:1d:27:c3:1d:e8:6d:63:e9:1d:37:9a:74:
         ba:6d:a2:30:8a:ab:2b:c6:c9:42:50:c9:ce:ee:40:10:76:12:
         ae:a6:85:3d:a6:80:a6:27:59:8d:ba:95:b4:7d:b9:1e:60:7b:
         dc:ba:80:4e:b5:c3:f3:7b:78:0e:44:21:dc:0d:89:13:ad:c5:
         7c:24:af:f0:a2:90:30:c3:38:ce:15:2e:3b:ec:f8:47:03:11:
         3a:15:f2:ec
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAILj7JDUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDY1MTQxWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyNGEzZGJjNWEw
OWNkMjExNDQ1ZTE0ZDY2ZDU2YjdlNDEzZmQzNDdhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAvHK3b3ehOwNWvCdAM32oLjVqG6FpFh46P9njNRkn5ke3
MtrokNu1QHesWbrekNLSXVLGn5rQm+31XHR0onwparolzr82RT5ZNYYcQmgrXfqh
MM1MaT46fxB8ZFuFzRmMQi5Vm5hlXLRnh8KQVoXjinxiRG4+D8+mipmHxiTGnbX2
aHgzq1TQg/7ydLr9xEswWV8F6kcG4DIsBv1xxPeJxqSMtc5UJZJs+2wGc+qdY1m6
ToyogSh0f/tKYYjvmQBhe2G8EcNMiqFLtdnDJ8mOwQ14NkvM7LM6rWauXbRbI3y3
YRuwVonCtKP19Ll3IhfFS2+R+b9cc1gPR/cTF0fPewIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFCSj28WgnNIRRF4U1m1Wt+QT/TR6MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2VkY2E1Ny0xMjdhLTQwZDkt
YjdhNC1kMGFiZjFiN2JiMTUvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvZWRjYTU3LTEyN2EtNDBkOS1i
N2E0LWQwYWJmMWI3YmIxNS8xL0pLUGJ4YUNjMGhGRVhoVFdiVmEzNUJQOU5Iby5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCBbfMMA0GCSqGSIb3DQEBCwUAA4IBAQCpjOfJ9vjVJKOp7CxopDUf
T2LEl9m4bOvgtxm5dSWuxv0wNgAELhJmm97oAYzlUTjdDAXaVF6jSEamFCHihqVk
wOusv4KKgprdny/AS4MwuaEK9IMLJNVKZ3dh1yVFzSLv9WDfgHIgHjd7/5O8j4P8
fIA0UZWkZuR4AdlQs9JX7/YrxNKivAUfpLyvvxchR6+qZTX8pbbD1VK5j/WT+iTH
9G0SGU5RAS0dJ8Md6G1j6R03mnS6baIwiqsrxslCUMnO7kAQdhKupoU9poCmJ1mN
upW0fbkeYHvcuoBOtcPze3gORCHcDYkTrcV8JK/wopAwwzjOFS477PhHAxE6FfLs
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:30 2023 by rpki-client on console-ams.rpki-client.org