Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0_uBDt9k0ziaPEY0VxlYqUzAqEE.cer
File:                     0_uBDt9k0ziaPEY0VxlYqUzAqEE.cer (raw, json)
Hash identifier:          ogFB4WhWjyF78mWYIykwdJqga61Yiz93x3oBvicfLSc=
Subject key identifier:   D3:FB:81:0E:DF:64:D3:38:9A:3C:46:34:57:19:58:A9:4C:C0:A8:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B32EEDB98D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.rp.ki/repo/MISAKA-RPKI/10/D3FB810EDF64D3389A3C4634571958A94CC0A841.mft
caRepository:             rsync://rsync.rp.ki/repo/MISAKA-RPKI/10
Notify URL:               https://rrdp.rp.ki/notification.xml
Certificate not before:   Tue 14 Jun 2022 22:09:54 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 194.45.101.0/24
                          IP: 2a12:8d00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769586477453 (0xb32eedb98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 14 22:09:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3fb810edf64d3389a3c4634571958a94cc0a841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:38:30:b1:4b:70:8f:7a:cf:3e:37:b2:cd:98:
                    d1:01:48:66:d3:ec:05:aa:a8:eb:80:0e:d8:9a:5b:
                    5f:a4:74:d6:4d:bd:04:62:17:36:72:92:07:5c:6d:
                    10:ba:0f:d9:b6:c4:83:15:43:6f:c3:86:c0:20:45:
                    58:5a:00:4a:d9:10:d3:40:5f:07:c0:46:6c:ee:7d:
                    a8:75:96:a4:a0:3b:63:36:29:7a:eb:81:25:0e:cb:
                    95:35:e1:7e:ea:a6:3f:8a:9b:c0:a1:aa:45:c6:f1:
                    6f:50:65:cf:ee:69:b3:36:46:be:fb:46:c4:e8:d1:
                    73:38:e3:98:e6:17:2a:65:06:f6:dc:c3:ff:b2:e4:
                    2a:aa:90:f0:59:25:6d:b0:de:38:e1:55:fd:46:1f:
                    6d:39:05:5b:5d:cd:49:1b:da:2d:51:e8:cb:89:38:
                    b5:c5:4d:44:44:63:09:ac:16:79:36:cc:87:d7:dd:
                    30:7c:a9:54:25:31:99:ea:c2:cf:07:46:56:28:c8:
                    db:b6:aa:7b:03:2d:b4:f9:a8:09:ba:ef:98:1a:7c:
                    be:f8:c2:55:bb:b7:2b:65:e7:0c:e7:af:21:d8:01:
                    0c:a1:ae:a5:57:12:59:72:b4:35:1b:17:5d:92:74:
                    2f:6f:d4:6e:03:37:81:af:7e:7e:9f:4f:60:92:ed:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FB:81:0E:DF:64:D3:38:9A:3C:46:34:57:19:58:A9:4C:C0:A8:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.rp.ki/repo/MISAKA-RPKI/10
                RPKI Manifest - URI:rsync://rsync.rp.ki/repo/MISAKA-RPKI/10/D3FB810EDF64D3389A3C4634571958A94CC0A841.mft
                RPKI Notify - URI:https://rrdp.rp.ki/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.45.101.0/24
                IPv6:
                  2a12:8d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:14:a7:62:82:a3:c7:16:97:2a:66:9d:e9:d5:bc:61:bd:
         e3:c2:39:2c:89:cf:0d:fb:10:17:88:95:94:2c:69:b2:4a:82:
         18:9c:87:22:0b:51:33:d5:bc:1b:82:1a:b7:da:10:28:d9:16:
         59:d6:2d:69:35:36:9b:27:41:75:1d:5c:1c:2d:8c:2f:29:5a:
         84:77:70:e3:8c:25:5c:bc:55:a4:76:27:aa:e5:6d:0d:7e:79:
         2d:d4:48:87:6b:26:90:19:63:cd:73:a2:bf:43:e3:d0:47:da:
         bc:f6:f8:22:22:96:45:d5:d3:f1:17:d8:3e:92:be:19:bb:e3:
         cd:80:f6:aa:6e:5c:d4:10:f1:e5:f5:81:bd:cd:4f:31:c1:b0:
         50:b3:7d:6f:2e:63:68:22:77:05:ea:e0:c4:0a:43:41:1a:9e:
         9c:93:12:86:84:74:cd:bc:90:50:b0:22:b7:0a:ee:7c:af:56:
         16:1f:76:b0:c9:b5:4c:6a:c0:16:92:71:43:9d:81:e0:27:e4:
         91:42:cf:20:f1:d3:18:ae:49:43:b4:f9:12:16:ef:75:1f:07:
         cd:42:89:55:23:44:f0:4b:45:a3:79:07:92:54:e4:6f:c4:41:
         45:8e:49:5b:a7:3f:db:d5:92:24:f9:69:cd:1d:f8:5c:62:30:
         7c:5e:6a:7b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIGALMu7bmNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NjE0MjIwOTU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkM2ZiODEwZWRm
NjRkMzM4OWEzYzQ2MzQ1NzE5NThhOTRjYzBhODQxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA8TgwsUtwj3rPPjeyzZjRAUhm0+wFqqjrgA7YmltfpHTW
Tb0EYhc2cpIHXG0Qug/ZtsSDFUNvw4bAIEVYWgBK2RDTQF8HwEZs7n2odZakoDtj
Nil664ElDsuVNeF+6qY/ipvAoapFxvFvUGXP7mmzNka++0bE6NFzOOOY5hcqZQb2
3MP/suQqqpDwWSVtsN444VX9Rh9tOQVbXc1JG9otUejLiTi1xU1ERGMJrBZ5NsyH
190wfKlUJTGZ6sLPB0ZWKMjbtqp7Ay20+agJuu+YGny++MJVu7crZecM568h2AEM
oa6lVxJZcrQ1GxddknQvb9RuAzeBr35+n09gku2zwwIDAQABo4ICRzCCAkMwHQYD
VR0OBBYEFNP7gQ7fZNM4mjxGNFcZWKlMwKhBMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
gdgGCCsGAQUFBwELBIHLMIHIMDMGCCsGAQUFBzAFhidyc3luYzovL3JzeW5jLnJw
LmtpL3JlcG8vTUlTQUtBLVJQS0kvMTAwYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnN5
bmMucnAua2kvcmVwby9NSVNBS0EtUlBLSS8xMC9EM0ZCODEwRURGNjREMzM4OUEz
QzQ2MzQ1NzE5NThBOTRDQzBBODQxLm1mdDAvBggrBgEFBQcwDYYjaHR0cHM6Ly9y
cmRwLnJwLmtpL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5
bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3
RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
LgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADCLWUwDQQCAAIwBwMFAyoSjQAw
DQYJKoZIhvcNAQELBQADggEBAEpYFKdigqPHFpcqZp3p1bxhvePCOSyJzw37EBeI
lZQsabJKghichyILUTPVvBuCGrfaECjZFlnWLWk1NpsnQXUdXBwtjC8pWoR3cOOM
JVy8VaR2J6rlbQ1+eS3USIdrJpAZY81zor9D49BH2rz2+CIilkXV0/EX2D6Svhm7
482A9qpuXNQQ8eX1gb3NTzHBsFCzfW8uY2gidwXq4MQKQ0EanpyTEoaEdM28kFCw
IrcK7nyvVhYfdrDJtUxqwBaScUOdgeAn5JFCzyDx0xiuSUO0+RIW73UfB81CiVUj
RPBLRaN5B5JU5G/EQUWOSVunP9vVkiT5ac0d+FxiMHxeans=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-ams.rpki-client.org