Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0ukrmNpOIB2hfb-bfLgXUn4-IKo.cer
File:                     0ukrmNpOIB2hfb-bfLgXUn4-IKo.cer (raw, json)
Hash identifier:          WdgXYtFyvCLcP6s1GEk9KTifEHmvHvukTwfv0JA/oak=
Subject key identifier:   D2:E9:2B:98:DA:4E:20:1D:A1:7D:BF:9B:7C:B8:17:52:7E:3E:20:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       5F561895AA
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c9/520ba2-a4fd-4be4-8c4f-75a47885b0fd/1/0ukrmNpOIB2hfb-bfLgXUn4-IKo.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c9/520ba2-a4fd-4be4-8c4f-75a47885b0fd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:13:41 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 185.206.144.0/22
                          IP: 2a0b:12c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409466344874 (0x5f561895aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:13:41 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=d2e92b98da4e201da17dbf9b7cb817527e3e20aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:c1:a6:9f:88:c5:dd:29:8f:6c:6a:ec:94:
                    5c:19:07:3a:9c:7b:73:47:64:0a:13:50:42:03:2b:
                    ea:96:76:b2:7d:b4:21:d6:f8:3e:4e:c2:03:53:a7:
                    4a:8e:b8:64:ed:4c:77:c6:78:c5:96:90:bc:03:9f:
                    04:7f:46:41:06:ca:39:41:21:27:d5:87:70:f9:c3:
                    b9:50:22:b9:09:70:a1:6c:b7:40:20:97:10:43:0c:
                    d5:e9:a1:a2:f7:9c:42:18:7c:50:3c:39:81:4a:c3:
                    dc:5b:7b:8d:a6:8f:5a:ca:aa:7b:bf:8b:26:16:4d:
                    ce:68:13:23:40:c6:1d:72:8b:19:d3:ca:c4:60:a9:
                    a8:f1:3f:ce:5d:b2:26:ae:64:a7:0b:3d:89:e1:16:
                    de:78:bd:b4:25:14:8b:90:11:ae:94:98:9b:23:ae:
                    ae:f7:3e:2e:ca:03:81:7a:9d:ed:9e:be:af:04:fb:
                    f8:5d:3f:e1:53:03:6b:01:d4:5b:86:f5:bc:b3:d5:
                    5d:d7:1f:ae:38:13:62:32:f6:14:b1:c3:94:32:b9:
                    2e:d9:d4:62:cb:4d:09:51:35:5f:17:27:1a:1b:d9:
                    00:d0:06:45:57:c9:2f:4e:96:6e:7f:12:06:6f:ef:
                    bd:0f:a2:87:49:d6:8d:2c:c6:24:15:b5:9a:fa:0c:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E9:2B:98:DA:4E:20:1D:A1:7D:BF:9B:7C:B8:17:52:7E:3E:20:AA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/520ba2-a4fd-4be4-8c4f-75a47885b0fd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/520ba2-a4fd-4be4-8c4f-75a47885b0fd/1/0ukrmNpOIB2hfb-bfLgXUn4-IKo.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.144.0/22
                IPv6:
                  2a0b:12c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:c0:9d:80:91:a7:15:1e:bf:41:55:98:60:24:8e:52:20:31:
         f6:18:b5:05:c4:5a:a7:ee:3b:4f:fc:41:a3:89:d4:a7:c9:03:
         1d:06:78:41:8e:fb:95:fb:ed:3c:5b:27:74:92:a6:25:eb:ae:
         2b:d3:51:0b:30:a3:a4:f4:70:75:38:e6:4a:63:5c:dd:7d:11:
         fc:e7:e2:0d:d7:2b:8e:44:44:84:5a:15:ce:4c:5e:08:2e:99:
         ad:0d:b4:d8:eb:fc:54:53:11:4c:39:06:df:bd:64:93:e2:82:
         62:5e:79:22:44:94:5a:c6:6a:72:01:46:7d:bc:92:6b:12:dd:
         4c:39:97:d7:20:59:69:af:69:af:bc:29:f1:4e:88:56:3c:3e:
         f8:ca:77:bc:20:38:ff:a8:f0:75:42:c6:ef:81:d6:e7:c5:85:
         e9:86:cf:3d:6e:fe:ca:45:6e:c2:70:81:a0:46:33:fe:86:1f:
         2b:55:fd:e6:09:ff:e9:64:02:79:22:96:fa:1f:5d:c9:93:22:
         84:d2:8f:77:b3:f6:61:23:66:4a:ac:10:cf:86:c9:b8:a7:35:
         f2:51:dc:b9:1c:91:e9:6e:e8:c3:00:f2:85:da:74:f0:a4:ae:
         39:e7:43:91:74:89:60:67:28:69:26:e0:0e:6f:af:b4:93:de:
         24:98:e0:bb
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIFX1YYlaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMDAy
MjQxNTEzNDFaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQyZTkyYjk4ZGE0
ZTIwMWRhMTdkYmY5YjdjYjgxNzUyN2UzZTIwYWEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2x8Gmn4jF3SmPbGrslFwZBzqce3NHZAoTUEIDK+qWdrJ9
tCHW+D5OwgNTp0qOuGTtTHfGeMWWkLwDnwR/RkEGyjlBISfVh3D5w7lQIrkJcKFs
t0AglxBDDNXpoaL3nEIYfFA8OYFKw9xbe42mj1rKqnu/iyYWTc5oEyNAxh1yixnT
ysRgqajxP85dsiauZKcLPYnhFt54vbQlFIuQEa6UmJsjrq73Pi7KA4F6ne2evq8E
+/hdP+FTA2sB1FuG9byz1V3XH644E2Iy9hSxw5QyuS7Z1GLLTQlRNV8XJxob2QDQ
BkVXyS9Olm5/EgZv770PoodJ1o0sxiQVtZr6DHpBAgMBAAGjggKTMIICjzAdBgNV
HQ4EFgQU0ukrmNpOIB2hfb+bfLgXUn4+IKowHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNTIwYmEyLWE0ZmQtNGJlNC04
YzRmLTc1YTQ3ODg1YjBmZC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MjBiYTItYTRmZC00YmU0LThj
NGYtNzVhNDc4ODViMGZkLzEvMHVrcm1OcE9JQjJoZmItYmZMZ1hVbjQtSUtvLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAK5zpAwDQQCAAIwBwMFAyoLEsAwDQYJKoZIhvcNAQELBQADggEBAJ3A
nYCRpxUev0FVmGAkjlIgMfYYtQXEWqfuO0/8QaOJ1KfJAx0GeEGO+5X77TxbJ3SS
piXrrivTUQswo6T0cHU45kpjXN19Efzn4g3XK45ERIRaFc5MXgguma0NtNjr/FRT
EUw5Bt+9ZJPigmJeeSJElFrGanIBRn28kmsS3Uw5l9cgWWmvaa+8KfFOiFY8PvjK
d7wgOP+o8HVCxu+B1ufFhemGzz1u/spFbsJwgaBGM/6GHytV/eYJ/+lkAnkilvof
XcmTIoTSj3ez9mEjZkqsEM+GybinNfJR3Lkckelu6MMA8oXadPCkrjnnQ5F0iWBn
KGkm4A5vr7ST3iSY4Ls=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:54 2023 by rpki-client on console-ams.rpki-client.org