Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0AkTDusNpSubgN0c7CWQEWjo1Mk.cer
File:                     0AkTDusNpSubgN0c7CWQEWjo1Mk.cer (raw, json)
Hash identifier:          dWdkC82rC/xSKJTBzeDNnyIbLWnPq8kIZWiVAp6Ud+0=
Subject key identifier:   D0:09:13:0E:EB:0D:A5:2B:9B:80:DD:1C:EC:25:90:11:68:E8:D4:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5CAE3938EA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d2/c09e39-4c77-4a97-ab2b-ad9aeb55510e/1/0AkTDusNpSubgN0c7CWQEWjo1Mk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d2/c09e39-4c77-4a97-ab2b-ad9aeb55510e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:00:31 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 209940
                          IP: 213.173.48.0/22
                          IP: 2a09:2600::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398059976938 (0x5cae3938ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:00:31 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=d009130eeb0da52b9b80dd1cec25901168e8d4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:fd:f0:7b:c3:e6:6b:83:6f:0e:ef:99:79:
                    75:1b:5d:1c:1b:83:09:e2:23:ca:cb:b5:bc:66:e4:
                    23:e5:b2:e4:05:95:3d:68:9e:d7:69:17:d8:b4:3a:
                    bb:28:ab:03:02:8c:47:9f:fd:48:97:25:de:b5:32:
                    83:0c:1a:18:18:45:b1:6e:a3:ec:4b:bb:a1:64:3c:
                    81:a8:74:d3:04:63:d0:b5:35:11:71:0a:92:b5:21:
                    c5:90:26:2f:43:40:c6:35:73:97:fe:a6:d3:2b:ef:
                    63:5f:b7:f6:3e:3e:9f:f1:86:d9:0f:17:3b:bb:4a:
                    9a:71:fd:60:e5:72:d9:6c:58:9d:99:b8:59:4e:73:
                    6d:9c:f2:0c:61:19:f8:ae:ea:9f:3f:11:69:75:a8:
                    33:59:c0:4f:6e:8b:ff:45:bf:7e:3d:da:14:ea:b6:
                    11:8a:6f:91:33:c2:05:05:10:27:b4:a1:aa:93:d7:
                    66:0f:1b:07:65:89:86:11:e6:f8:6f:59:f8:7b:d2:
                    e6:d3:37:9a:c0:b8:a1:ab:91:eb:bf:1b:bf:af:71:
                    cf:d9:9a:d8:95:05:d9:2e:5e:35:18:42:1f:fe:af:
                    c7:41:99:f9:e9:70:59:26:f2:92:07:a6:d6:6c:a8:
                    0e:51:a4:5a:db:bf:e6:8f:a3:06:15:41:25:31:56:
                    64:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:09:13:0E:EB:0D:A5:2B:9B:80:DD:1C:EC:25:90:11:68:E8:D4:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c09e39-4c77-4a97-ab2b-ad9aeb55510e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c09e39-4c77-4a97-ab2b-ad9aeb55510e/1/0AkTDusNpSubgN0c7CWQEWjo1Mk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.173.48.0/22
                IPv6:
                  2a09:2600::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209940

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:4e:76:74:74:f8:58:71:28:e7:a6:db:ab:33:c7:50:99:
         cb:cc:1f:56:89:73:d0:7f:e0:64:f5:6a:c3:95:96:f4:b6:d9:
         40:e1:fc:d5:92:6c:8f:03:56:36:cb:e3:4f:7e:67:97:ef:a1:
         f3:e8:79:39:b5:d9:4e:52:4a:28:6b:82:53:4a:5a:85:f9:49:
         f1:fe:5b:27:8a:3e:cd:f6:07:93:95:f9:fb:5c:a5:d9:a7:35:
         cb:d5:b5:52:6d:68:bc:ef:b3:48:df:0c:7b:ac:ab:a2:d8:a0:
         7b:4e:70:24:a7:e1:b3:68:25:c4:35:0f:05:e5:2c:65:19:5d:
         4d:7f:2f:c1:55:d3:73:37:41:e2:c1:06:ca:bc:e2:54:ad:ac:
         e1:70:7e:72:08:8e:b9:24:92:0c:fc:93:ab:d6:2d:b6:93:61:
         8e:cd:ea:9f:b5:49:73:0c:5f:d2:e6:55:37:c0:8e:bd:0a:d0:
         db:e0:77:c0:f9:48:48:fb:72:9d:82:97:44:0c:61:1c:a1:e6:
         c1:75:6a:db:55:de:26:2d:88:e8:5a:ac:b8:63:66:68:80:93:
         43:14:9e:5e:23:39:ba:8f:90:03:2d:2e:f9:ec:8f:90:c6:d8:
         b6:c3:4d:d1:a4:c9:84:6e:b4:18:8c:7c:1e:59:44:fc:a1:65:
         52:a2:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-ams.rpki-client.org