Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wt79iFQHaCThw3XZNxKN33eAOwo.cer
File:                     Wt79iFQHaCThw3XZNxKN33eAOwo.cer (raw, json)
Hash identifier:          tJIrbveSoQdpJo/M6SiKw4s6FTt9KXs/oczg6CKY5Vw=
Subject key identifier:   5A:DE:FD:88:54:07:68:24:E1:C3:75:D9:37:12:8D:DF:77:80:3B:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       753E38AD90
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/1123711/0/5ADEFD8854076824E1C375D937128DDF77803B0A.mft
caRepository:             rsync://nostromo.heficed.net/repo/1123711/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:02:08 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 193.107.208.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503555075472 (0x753e38ad90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5adefd8854076824e1c375d937128ddf77803b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:ca:f2:ac:cf:33:ea:3b:57:1c:bc:2c:08:
                    c0:dd:40:c5:fb:93:0f:0f:fd:8a:a6:58:c9:b5:02:
                    9c:d0:a6:df:59:d4:f4:61:ea:46:14:2a:fc:e0:49:
                    b6:ff:50:ce:29:ab:34:35:a0:ce:49:07:20:04:ca:
                    94:d0:0e:cf:9e:27:71:67:a5:f4:38:31:84:cf:84:
                    d1:f0:f9:c7:47:be:d9:9e:60:4e:dd:8a:ff:e8:7f:
                    d3:da:27:1b:a7:0d:33:63:4f:e1:29:44:eb:03:83:
                    df:21:16:e4:8e:ee:f0:2c:65:21:c0:81:ea:b6:b3:
                    6c:28:72:81:9c:d4:03:d2:d2:7e:f2:1d:30:c3:10:
                    68:c0:d8:a1:00:63:94:11:9f:31:4a:d7:69:90:01:
                    16:c3:da:2e:97:b3:d0:3a:1a:08:bd:b6:4c:b2:f6:
                    77:cc:05:f6:3a:8a:e8:1b:33:40:03:89:0c:dd:09:
                    e0:35:64:89:27:ee:31:6d:f6:99:7c:fe:07:a6:88:
                    fc:06:c0:78:27:8e:f5:8b:b1:40:b2:44:1a:5c:e1:
                    7f:d5:c9:13:fc:59:4e:62:da:0e:d2:ef:08:f9:a9:
                    45:15:7b:c1:ef:19:90:ca:dd:80:52:0e:43:a2:d8:
                    c1:ca:eb:4f:b0:43:46:29:08:63:98:4a:5b:19:bd:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DE:FD:88:54:07:68:24:E1:C3:75:D9:37:12:8D:DF:77:80:3B:0A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1123711/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/1123711/0/5ADEFD8854076824E1C375D937128DDF77803B0A.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:39:97:d2:83:46:c2:25:e8:2a:17:03:b0:18:08:a3:6a:
         24:25:42:33:fc:d9:20:4f:08:1c:96:64:d0:28:18:e1:b8:92:
         08:dd:ff:4e:df:b0:73:1e:8c:f7:75:16:5d:b1:f0:18:41:8f:
         a0:d3:27:10:73:87:8f:40:5d:51:07:6d:e8:2c:04:17:f4:72:
         42:0c:2f:ac:28:a7:de:8b:e5:27:52:5c:41:2a:69:e5:f8:15:
         04:f4:a1:5d:c4:fc:c3:4e:0e:29:be:b4:c8:29:77:22:95:db:
         23:8b:90:8e:aa:a6:e9:84:f0:28:d8:35:7f:14:39:35:0f:be:
         c4:c7:dd:c2:9f:3b:1b:3a:a0:4b:11:2b:5c:a3:ee:d1:e3:4c:
         91:18:c5:36:f2:1a:6c:39:b7:35:9f:fb:68:e0:f0:d0:6f:36:
         87:ce:7f:7c:98:cc:41:53:69:a8:ff:87:b1:be:21:26:49:31:
         0e:c1:44:3e:c8:2c:bd:dc:32:e5:e0:98:b7:8f:a9:6f:37:cb:
         20:12:d5:63:63:d1:28:aa:10:ef:5c:12:d0:a6:c2:e9:fd:e2:
         39:b4:00:14:6e:75:7e:cb:3f:08:ee:ca:48:3c:1a:d9:c3:b8:
         82:36:c9:b6:60:5b:60:73:61:6d:45:29:b3:70:d3:e9:e7:4e:
         12:02:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-fra.rpki-client.org