Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XRKIUNNVqT2pm16TZA_9dJr6ZNQ.cer
File:                     XRKIUNNVqT2pm16TZA_9dJr6ZNQ.cer (raw, json)
Hash identifier:          8HrgJXJX3km5zB8iNysB84qABmtXbm3o8Ed9VEGzlTs=
Subject key identifier:   5D:12:88:50:D3:55:A9:3D:A9:9B:5E:93:64:0F:FD:74:9A:FA:64:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7540172A01
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://nostromo.heficed.net/repo/635152/0/5D128850D355A93DA99B5E93640FFD749AFA64D4.mft
caRepository:             rsync://nostromo.heficed.net/repo/635152/0/
Notify URL:               https://nostromo.heficed.net/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:02:14 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 92.242.184.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503586433537 (0x7540172a01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5d128850d355a93da99b5e93640ffd749afa64d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:74:9e:6e:c6:7c:7f:be:6d:09:c4:5e:d6:
                    b2:f2:ae:c6:0b:00:01:84:31:6f:db:c4:af:95:f8:
                    21:cd:22:6f:b7:87:ce:53:f4:4d:5c:1d:ae:b8:b3:
                    cb:14:0c:24:29:13:ad:0b:be:d5:a2:f8:c6:e8:35:
                    63:51:46:0a:03:07:45:d2:77:6f:86:62:44:13:26:
                    3b:cb:2b:95:c0:27:d8:3c:0f:b3:69:e1:fd:f7:e9:
                    a4:11:4b:7e:02:67:75:75:58:cd:61:59:86:7c:f4:
                    ec:6e:cb:09:c5:0c:53:f2:dc:84:3c:08:a6:89:10:
                    2f:cd:9e:87:26:60:84:b2:ce:e3:3f:df:02:90:87:
                    cd:93:9e:67:36:2a:11:ae:06:f0:39:71:56:5b:c2:
                    60:50:60:51:a9:3f:44:1a:85:43:e9:18:09:a4:fd:
                    6a:7a:9a:ca:83:04:f1:bb:c3:72:f3:26:a3:9c:18:
                    c7:8d:4f:77:4d:e6:15:5e:f5:a7:2e:75:b5:48:9c:
                    77:60:7d:b9:02:e2:7e:03:4e:4f:f4:d9:58:f7:78:
                    7c:30:b9:1e:8e:b3:0c:05:d4:48:9b:41:54:f5:16:
                    14:19:2e:22:d9:ca:df:70:6c:e3:5a:86:47:c4:67:
                    0b:d1:5a:89:f2:b0:37:63:a1:57:a9:fb:8f:4a:59:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:12:88:50:D3:55:A9:3D:A9:9B:5E:93:64:0F:FD:74:9A:FA:64:D4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://nostromo.heficed.net/repo/635152/0/
                RPKI Manifest - URI:rsync://nostromo.heficed.net/repo/635152/0/5D128850D355A93DA99B5E93640FFD749AFA64D4.mft
                RPKI Notify - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.242.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:bb:34:3e:d1:53:0a:ea:50:06:73:c0:57:56:c2:13:15:d2:
         31:22:16:d8:17:f1:d5:d0:0d:c9:0a:02:42:48:ed:59:3c:6b:
         4f:32:db:c3:41:95:ea:19:3d:c9:a4:bc:cf:63:98:ad:fc:41:
         22:d3:e2:a5:9a:56:db:46:94:d6:1c:79:8c:53:3d:2c:d5:31:
         94:98:7f:48:61:bc:e6:bf:87:05:fa:4f:41:2d:3e:7a:3c:e5:
         73:7b:55:91:08:e2:68:73:4d:d7:5d:75:5a:2e:83:47:e2:6d:
         90:9b:37:74:6a:0a:6d:90:d9:b1:f0:f2:b1:28:75:c6:a4:8e:
         cf:22:5a:6d:37:c9:7e:da:f2:97:7f:bc:bb:82:20:a6:f8:8d:
         55:74:83:e1:96:3b:e6:0a:10:62:c0:d2:ce:9a:3e:33:cd:f4:
         60:a2:3f:1e:64:4f:10:43:63:87:af:41:4d:12:b9:6a:20:cd:
         c3:41:21:c5:67:98:35:bb:9b:e7:11:ee:2e:ae:c6:20:76:ac:
         ea:d7:ff:b1:7f:63:ec:67:0e:df:97:99:db:a2:63:9b:df:d5:
         a4:dd:e8:e9:bf:2e:8f:eb:9d:7f:29:7c:70:ba:13:3e:4e:8c:
         c2:4b:82:d2:24:de:5a:c9:40:25:da:9a:d2:d2:75:8d:77:3c:
         6d:18:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:11 2023 by rpki-client on console-ams.rpki-client.org