Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SWrpbb-GLbq1naxXRWUMi8_uSW8.cer
File:                     SWrpbb-GLbq1naxXRWUMi8_uSW8.cer (raw, json)
Hash identifier:          /Ibfr7f/NymBLCB5ZhCyKhV3y8SQ7zEUm5/gAgDylTs=
Subject key identifier:   49:6A:E9:6D:BF:86:2D:BA:B5:9D:AC:57:45:65:0C:8B:CF:EE:49:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7AFEC033A5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/74/6db330-565c-45c1-b0a4-734b3c61ee68/1/SWrpbb-GLbq1naxXRWUMi8_uSW8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/74/6db330-565c-45c1-b0a4-734b3c61ee68/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:27:11 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.66.116.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528260019109 (0x7afec033a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:27:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=496ae96dbf862dbab59dac5745650c8bcfee496f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:3d:5a:cc:81:6a:57:01:db:a4:c5:0c:b0:
                    b6:1a:d1:53:27:16:c4:09:ff:ee:8f:c6:85:af:eb:
                    59:5b:20:ef:16:f5:72:ba:b7:f2:ad:fd:31:22:41:
                    ca:f3:e1:f2:9b:8e:8b:d8:c7:8e:0e:a2:fe:20:1b:
                    96:90:57:c1:26:7a:3f:b5:f3:cf:ab:4d:00:6c:ea:
                    4a:c0:d7:79:a5:f7:81:db:f5:79:05:46:64:7c:1b:
                    65:3a:84:38:b2:7e:06:13:7a:2a:e9:d3:3e:1f:30:
                    0b:3f:6a:42:03:f4:c4:af:6f:3b:10:a8:53:47:d3:
                    16:1e:d7:4e:56:24:27:36:1d:0e:fa:f9:6b:8e:08:
                    3c:db:71:ad:90:46:16:50:e2:88:84:3b:0d:fd:61:
                    9f:03:04:cc:b1:65:c2:81:00:55:26:6f:f6:36:22:
                    18:a2:ef:e4:88:1f:e8:fb:58:52:eb:1b:0e:81:a1:
                    86:73:27:05:09:43:8b:3a:9e:73:81:62:ab:89:12:
                    c4:ef:6d:e8:24:e2:c0:8a:94:84:0a:d4:01:0a:77:
                    27:72:77:4b:38:89:59:4a:90:0f:ce:48:c5:ab:3a:
                    87:86:79:b4:64:12:ef:d1:a7:d9:8c:c3:65:60:02:
                    7a:86:20:c5:c3:21:e4:0d:ba:a6:b8:ad:16:3c:05:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6A:E9:6D:BF:86:2D:BA:B5:9D:AC:57:45:65:0C:8B:CF:EE:49:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6db330-565c-45c1-b0a4-734b3c61ee68/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6db330-565c-45c1-b0a4-734b3c61ee68/1/SWrpbb-GLbq1naxXRWUMi8_uSW8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:b2:2f:d0:4f:39:25:2e:ee:c9:d0:03:4d:57:f3:39:b3:73:
         7d:83:9d:a6:19:6d:03:7f:9d:35:50:d0:91:3b:a4:13:3c:c2:
         fe:70:d2:ae:87:02:85:27:15:ed:b7:4b:e4:6d:f7:15:8b:4e:
         9f:d6:8b:4c:53:a5:40:48:aa:f4:2a:ce:b2:da:6a:5d:66:b7:
         dc:1c:d4:83:f8:51:e3:30:c1:87:7f:13:a8:41:70:d8:4d:e7:
         c0:ea:3a:41:ea:d1:59:55:a3:c4:50:55:27:c5:1a:4a:ee:f6:
         b1:16:ba:d0:7d:72:13:f5:1f:ec:09:7a:42:5d:06:8a:c7:e4:
         57:d7:48:69:e7:6f:b9:34:cf:0c:e8:37:f3:9d:fb:f3:19:66:
         51:6f:b6:c9:ce:17:e7:ad:cd:30:48:23:25:2a:49:ff:6f:f1:
         82:d4:97:a1:b0:05:d9:15:85:f8:d8:52:d5:da:f8:57:84:fb:
         86:f5:ec:ab:da:f5:2b:d6:37:41:58:93:8c:57:bc:7d:c9:1d:
         6c:65:16:fe:ca:a0:5e:24:d7:08:3f:f9:2b:75:75:e8:24:7e:
         9a:fa:b4:59:54:1b:16:ca:7e:cf:24:10:ac:a8:3f:d2:3a:f2:
         88:50:87:9f:61:b9:bb:e5:ec:32:0c:c3:b7:2c:4a:2e:53:d5:
         cd:11:38:b9
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFev7AM6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMjI3MTFaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ5NmFlOTZkYmY4
NjJkYmFiNTlkYWM1NzQ1NjUwYzhiY2ZlZTQ5NmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnuj1azIFqVwHbpMUMsLYa0VMnFsQJ/+6PxoWv61lbIO8W
9XK6t/Kt/TEiQcrz4fKbjovYx44Oov4gG5aQV8Emej+188+rTQBs6krA13ml94Hb
9XkFRmR8G2U6hDiyfgYTeirp0z4fMAs/akID9MSvbzsQqFNH0xYe105WJCc2HQ76
+WuOCDzbca2QRhZQ4oiEOw39YZ8DBMyxZcKBAFUmb/Y2Ihii7+SIH+j7WFLrGw6B
oYZzJwUJQ4s6nnOBYquJEsTvbegk4sCKlIQK1AEKdydyd0s4iVlKkA/OSMWrOoeG
ebRkEu/Rp9mMw2VgAnqGIMXDIeQNuqa4rRY8Bd+5AgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQUSWrpbb+GLbq1naxXRWUMi8/uSW8wHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvNmRiMzMwLTU2NWMtNDVjMS1i
MGE0LTczNGIzYzYxZWU2OC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZGIzMzAtNTY1Yy00NWMxLWIw
YTQtNzM0YjNjNjFlZTY4LzEvU1dycGJiLUdMYnExbmF4WFJXVU1pOF91U1c4Lm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItQnQwDQYJKoZIhvcNAQELBQADggEBACiyL9BPOSUu7snQA01X8zmz
c32DnaYZbQN/nTVQ0JE7pBM8wv5w0q6HAoUnFe23S+Rt9xWLTp/Wi0xTpUBIqvQq
zrLaal1mt9wc1IP4UeMwwYd/E6hBcNhN58DqOkHq0VlVo8RQVSfFGkru9rEWutB9
chP1H+wJekJdBorH5FfXSGnnb7k0zwzoN/Od+/MZZlFvtsnOF+etzTBIIyUqSf9v
8YLUl6GwBdkVhfjYUtXa+FeE+4b17Kva9SvWN0FYk4xXvH3JHWxlFv7KoF4k1wg/
+St1degkfpr6tFlUGxbKfs8kEKyoP9I68ohQh59hubvl7DIMw7csSi5T1c0ROLk=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:04 2023 by rpki-client on console-fra.rpki-client.org