Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09LTmEBqQ9Z-OPBSKNI9iSXXW-s.cer
File:                     09LTmEBqQ9Z-OPBSKNI9iSXXW-s.cer (raw, json)
Hash identifier:          FFNtV+G6bMcToMFo5t3xGoCPt3wELTCybIn9iaVtIO8=
Subject key identifier:   D3:D2:D3:98:40:6A:43:D6:7E:38:F0:52:28:D2:3D:89:25:D7:5B:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       78C201B21D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f3/abba7c-3b3a-49ee-b8f1-b0b4c436eaae/1/09LTmEBqQ9Z-OPBSKNI9iSXXW-s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f3/abba7c-3b3a-49ee-b8f1-b0b4c436eaae/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:38:55 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    AS: 43633
                          IP: 91.195.90.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518650966557 (0x78c201b21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:38:55 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d3d2d398406a43d67e38f05228d23d8925d75beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:0b:b7:91:2e:78:e7:dc:1b:a4:87:9b:41:
                    5c:31:54:16:19:11:77:75:fa:38:17:e6:cc:4a:93:
                    ab:4e:e9:67:42:20:40:81:66:bd:a6:66:3b:14:f7:
                    6e:25:2e:33:03:e8:68:a2:0c:17:9f:e2:17:6c:db:
                    69:5b:7f:73:7b:ce:57:de:83:fe:07:da:9e:83:40:
                    8d:04:12:e5:a4:1a:62:7f:0e:21:62:48:e7:8f:a4:
                    7b:6c:a9:e9:29:cd:de:62:e1:eb:27:18:d2:bb:ee:
                    7d:2b:b7:6e:25:f4:db:27:96:ef:37:b9:b3:17:3f:
                    a1:c4:95:b5:f1:8d:d4:c4:f7:d7:46:e8:74:20:e2:
                    75:6c:00:78:02:60:c3:0b:1f:76:d3:2f:38:a6:ea:
                    87:69:61:3e:35:bc:e9:a2:80:8c:7d:49:40:1d:76:
                    98:29:f9:61:0c:9b:f8:90:d6:bb:2c:ec:cc:e4:8a:
                    41:15:02:b4:c6:4d:dd:ac:1a:6c:d4:fd:95:6f:96:
                    6e:7f:a5:b2:5b:4c:6d:e9:8d:f7:e2:eb:86:6f:10:
                    11:51:4e:93:fe:d3:a2:06:c3:47:90:5c:ee:c0:2e:
                    93:1b:cd:ac:a1:ff:48:12:e8:e1:a7:8a:49:34:7f:
                    93:a2:13:7f:6a:b7:42:d1:86:e5:57:77:e8:b2:ad:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D2:D3:98:40:6A:43:D6:7E:38:F0:52:28:D2:3D:89:25:D7:5B:EB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/abba7c-3b3a-49ee-b8f1-b0b4c436eaae/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/abba7c-3b3a-49ee-b8f1-b0b4c436eaae/1/09LTmEBqQ9Z-OPBSKNI9iSXXW-s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.90.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43633

    Signature Algorithm: sha256WithRSAEncryption
         71:db:fb:1d:c9:7c:94:5f:93:43:5a:d1:43:f2:46:c0:2d:dc:
         53:f3:81:26:ba:ca:84:f5:83:d9:15:43:fb:ad:0b:b6:12:68:
         a5:d9:b8:c0:ca:5b:04:2d:fd:fd:fd:22:86:89:5d:f5:8c:12:
         9e:19:b1:23:8c:67:55:8d:d8:45:ea:a6:0d:58:32:f7:97:6c:
         2e:00:70:04:8c:2d:43:9c:bb:8d:03:23:75:9a:16:88:1e:49:
         8a:f7:6b:59:dc:96:0f:56:d8:7e:0c:68:05:b0:24:ed:c7:cb:
         c7:73:5d:cb:92:a4:6d:ac:c0:e4:91:ea:bb:d4:ef:ce:63:14:
         85:b0:8d:6e:5d:54:a5:ce:cf:c6:8a:77:e2:05:15:7b:8d:de:
         28:2d:b7:af:0d:87:bc:cf:92:90:bd:5b:73:42:1d:39:51:18:
         ea:ea:09:79:fd:5f:d9:21:11:cb:77:ad:58:98:e3:6a:26:73:
         89:ff:fb:c4:ea:76:f6:6b:c8:4c:74:cd:d0:13:e8:a0:b8:18:
         d8:7c:11:15:59:be:9b:5b:33:54:71:e8:e0:1b:f3:25:2a:4f:
         25:5d:ef:51:8c:48:7a:fc:a8:bc:2d:50:6f:8c:e8:3f:bd:fb:
         43:bb:ae:d1:38:e2:fd:0e:8c:b6:45:aa:ba:fe:d4:ef:c0:f9:
         5f:f1:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:25 2023 by rpki-client on console-fra.rpki-client.org