Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06zTbYqh4I0gIoLUmYN8-1_Mkao.cer
File:                     06zTbYqh4I0gIoLUmYN8-1_Mkao.cer (raw, json)
Hash identifier:          kYGfvi9+fHhnJYXd1nCD2RhWJPTLkCy97dwF2QrYElE=
Subject key identifier:   D3:AC:D3:6D:8A:A1:E0:8D:20:22:82:D4:99:83:7C:FB:5F:CC:91:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6541251166
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/df/887220-edf2-42cb-a929-c4fa82960297/1/06zTbYqh4I0gIoLUmYN8-1_Mkao.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/df/887220-edf2-42cb-a929-c4fa82960297/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 12 Mar 2020 19:01:47 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 93.187.132.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434884645222 (0x6541251166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 12 19:01:47 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=d3acd36d8aa1e08d202282d499837cfb5fcc91aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bd:08:5c:2f:95:1f:52:44:2b:87:f1:44:31:
                    8e:0b:43:f2:1c:3e:2f:7a:af:8b:b8:7e:7d:a7:97:
                    cc:54:83:bf:21:02:c5:a5:7f:b8:7f:60:44:de:88:
                    51:8f:61:de:63:95:bd:d9:1f:fc:1e:de:82:ab:a4:
                    9a:ff:92:d6:14:1e:4c:43:db:d4:0d:fb:2b:32:5d:
                    0a:db:65:a7:0b:4b:e3:00:21:df:ed:f7:bb:fd:ab:
                    68:25:c2:93:0d:c0:a1:15:21:ae:90:bc:1f:11:84:
                    77:a4:c6:08:82:99:a7:e5:37:39:bb:57:27:5e:17:
                    dd:dc:aa:39:d4:c9:23:78:b9:65:b0:44:45:f7:b0:
                    1f:67:95:a1:ff:95:af:5e:97:44:7a:e7:e3:77:05:
                    54:8a:12:6a:12:1e:45:92:94:68:d5:36:09:e1:29:
                    09:e3:05:7f:7b:28:53:fb:28:70:4f:f0:06:e2:c6:
                    cb:4a:24:74:02:ff:ce:9b:bf:33:17:8d:dd:b5:2e:
                    bf:1f:77:4e:dd:81:c3:1c:7b:83:cc:d7:76:7d:16:
                    08:73:a4:97:e9:3c:5b:1f:2f:9d:0f:2a:9d:4c:3e:
                    ce:f2:7c:3a:98:29:1c:8b:04:48:2b:94:5e:1f:1e:
                    e9:e6:55:c4:c5:89:cb:d1:ea:bd:ee:7c:7f:a9:54:
                    e7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AC:D3:6D:8A:A1:E0:8D:20:22:82:D4:99:83:7C:FB:5F:CC:91:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/887220-edf2-42cb-a929-c4fa82960297/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/887220-edf2-42cb-a929-c4fa82960297/1/06zTbYqh4I0gIoLUmYN8-1_Mkao.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.187.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:e8:84:2c:8a:8a:12:9b:58:a3:ed:af:87:54:5b:63:e0:3a:
         52:ba:4b:80:a4:07:12:5a:2b:de:28:3d:e5:77:31:5b:97:b4:
         80:bc:29:28:2c:c9:1a:24:76:9b:1e:1b:30:9b:f2:e9:a5:07:
         18:c5:9d:68:90:8e:90:c8:07:c5:8f:ab:27:23:62:a5:75:46:
         28:36:a7:4a:07:24:67:81:9c:36:96:32:ed:b7:61:0e:cd:89:
         50:dc:f1:9f:0f:8d:18:c1:7a:70:42:9f:02:a3:9b:2f:32:26:
         b3:d8:0a:2a:7d:12:f8:71:bd:f0:be:70:ac:e5:39:ed:ec:b4:
         0b:54:d4:66:98:3e:42:ba:34:74:71:c1:66:77:89:12:58:a2:
         80:f9:9d:40:31:7f:22:d7:42:cd:76:7c:41:6c:c1:36:12:bb:
         b9:5c:e4:63:d4:e8:08:39:5f:cd:61:0a:c3:8e:0c:a1:0a:ff:
         0b:46:f3:25:1e:aa:c9:cd:e0:98:8d:66:0c:a5:c8:c6:8a:17:
         81:b5:9c:c8:54:f0:cd:0b:d3:20:ab:82:e0:5f:a9:1c:a8:6d:
         ea:31:0b:c2:b6:ba:c6:cd:0d:7e:6b:ab:bb:67:cf:6b:fe:88:
         7f:ee:d4:fb:d3:82:9f:79:69:6c:80:ff:9c:71:18:07:98:09:
         3e:78:f5:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:57 2023 by rpki-client on console-ams.rpki-client.org