Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-IhSoFVQbp5d9_gYWZ_KdiPnuuE.cer
File:                     1-IhSoFVQbp5d9_gYWZ_KdiPnuuE.cer (raw, json)
Hash identifier:          khyH1oQHaT8ruUP5J92Ls5PhwB1BaWcLhYUQDLUVlQA=
Subject key identifier:   F8:88:52:A0:55:50:6E:9E:5D:F7:F8:18:59:9F:CA:76:23:E7:BA:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       8394816317
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9a/c76563-4f53-4ae6-b4f4-fbaa10cbf8a3/1/1-IhSoFVQbp5d9_gYWZ_KdiPnuuE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9a/c76563-4f53-4ae6-b4f4-fbaa10cbf8a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 07:16:41 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 194.49.108.0/23
                          IP: 194.49.112.0/23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565132223255 (0x8394816317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:16:41 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f88852a055506e9e5df7f818599fca7623e7bae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:95:24:dd:ea:96:1c:a5:8a:e6:38:77:6b:
                    30:d0:fa:56:9b:9e:d0:9d:ad:f2:e3:15:a0:0f:17:
                    d6:1f:cd:15:19:a6:f1:01:0a:f4:71:e8:72:02:b5:
                    78:51:c7:1f:c9:3b:c0:eb:d2:fa:df:2b:76:50:aa:
                    89:87:58:6f:f3:24:e6:02:48:5d:f6:b8:d6:48:8a:
                    e5:1a:c8:22:14:e0:7b:28:5d:33:b9:c0:17:73:d3:
                    27:eb:f1:03:93:d0:9c:2f:b7:4c:69:ae:39:df:35:
                    78:b6:cd:d1:db:d4:0d:70:64:ac:a1:e1:9a:c9:b5:
                    8d:bf:f9:1b:70:c3:da:a7:ae:f0:bd:fb:bb:91:91:
                    43:35:8f:73:69:af:52:d1:c0:60:9f:0f:05:41:ff:
                    43:63:4b:d2:27:87:99:c7:a6:01:ba:3d:53:a0:d7:
                    ae:93:91:87:67:70:f1:4c:b4:73:82:05:38:cd:6c:
                    1b:e9:61:f0:47:e1:53:1b:e0:10:0d:ae:07:3b:26:
                    c0:b3:ac:c7:0a:26:ef:12:a9:50:4a:9a:6c:b7:8c:
                    c6:d5:5e:6f:3b:0a:ff:12:8c:a3:e4:2d:c2:11:f7:
                    ab:a0:df:1a:bb:43:c8:c1:f7:31:8e:80:90:14:da:
                    92:f1:68:86:42:18:a5:0f:55:e7:74:9f:92:76:15:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:52:A0:55:50:6E:9E:5D:F7:F8:18:59:9F:CA:76:23:E7:BA:E1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c76563-4f53-4ae6-b4f4-fbaa10cbf8a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c76563-4f53-4ae6-b4f4-fbaa10cbf8a3/1/1-IhSoFVQbp5d9_gYWZ_KdiPnuuE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.108.0/23
                  194.49.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:bf:a9:7d:a3:1b:2c:a6:f4:f5:84:d1:17:74:a0:ec:cc:1e:
         54:24:02:63:77:92:6e:c7:3f:dd:99:02:89:59:2b:0b:1b:8a:
         5c:b7:ad:87:2f:54:b0:cb:bb:89:ba:8e:7e:87:8a:ba:b6:be:
         16:14:a9:60:93:ce:59:1c:b7:e5:0a:a8:59:c4:a9:83:f7:0f:
         8c:02:86:d6:c6:6c:91:fe:02:09:a1:33:3e:6a:35:06:dc:ae:
         20:14:6d:4f:3a:a5:1e:51:5b:ab:e6:f0:89:6a:f7:a6:83:c9:
         e1:b3:90:71:d5:f3:8e:69:c6:93:51:91:b9:e9:e9:c0:4c:28:
         1c:05:35:a6:b8:ec:cd:82:74:c9:44:5f:9a:d3:8a:1a:fe:59:
         b8:ea:c6:f1:c7:59:f3:65:91:59:30:e2:f5:91:ad:de:48:3e:
         a3:3b:4b:fa:cf:d6:7b:f6:95:62:d8:46:a0:2d:f2:7c:c5:42:
         5a:a4:d0:fd:47:36:d5:ba:8e:33:57:25:16:d1:cf:93:e6:dc:
         32:db:78:b0:c3:35:ce:bf:54:f1:e2:9e:5b:93:70:86:bf:04:
         38:fa:dc:90:4d:54:ca:ea:ec:94:f2:d0:ec:11:02:2f:42:62:
         07:2d:54:f4:53:7c:aa:99:4c:02:4c:ca:16:e7:57:d6:cb:0d:
         f0:bf:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:55 2023 by rpki-client on console-ams.rpki-client.org