Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AbeqPFbnwz_kKwhWyJPUDk2Kfc.cer
File:                     2AbeqPFbnwz_kKwhWyJPUDk2Kfc.cer (raw, json)
Hash identifier:          tkMcHaDos+aYfkNBQbzAFfOggNrQuLUYcfDc/Qd60kg=
Subject key identifier:   D8:06:DE:A8:F1:5B:9F:0C:FF:90:AC:21:5B:22:4F:50:39:36:29:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7CA03B8734
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/452d6a-b6c8-4324-8e61-43351516f1ce/1/2AbeqPFbnwz_kKwhWyJPUDk2Kfc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/452d6a-b6c8-4324-8e61-43351516f1ce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 03:06:53 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.66.164.0/22
                          IP: 2a09:9d40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535264200500 (0x7ca03b8734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:06:53 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d806dea8f15b9f0cff90ac215b224f50393629f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:7c:9e:d5:9f:a3:b5:ae:38:1a:61:e3:e3:
                    9f:8d:d7:99:8a:a0:e2:27:63:9f:36:34:b9:0e:03:
                    9a:dc:db:17:c6:90:14:ff:bf:3c:84:08:f5:0a:d6:
                    08:be:2d:fc:d1:19:c1:67:db:59:6e:60:14:2f:dc:
                    0f:6a:fa:58:48:7f:3c:25:dd:ef:76:aa:8c:43:ac:
                    63:23:5c:a2:c6:38:1f:37:27:99:65:c0:e9:2c:48:
                    a8:ae:70:19:58:c5:b0:29:00:d3:0f:15:92:e6:73:
                    f4:d5:ff:77:1a:a8:0e:73:76:5b:b5:74:9d:55:de:
                    0c:40:88:a9:51:c8:5a:ff:fd:79:27:55:b2:7a:15:
                    2c:6a:50:3a:85:69:4a:5e:c3:49:cb:1a:12:12:d1:
                    13:3d:41:40:c1:bb:ba:5f:1a:f6:b0:ee:4b:92:8c:
                    1f:9d:ad:af:c9:ca:d2:e3:f6:6f:b3:4e:dd:df:02:
                    5a:b3:f7:71:20:37:92:ab:cf:f5:eb:a8:2c:8a:8f:
                    d7:ac:2d:85:f0:dc:5c:54:f1:90:a6:23:52:0e:44:
                    64:a0:65:cb:2c:47:89:81:2f:3c:51:04:d7:16:74:
                    9b:a2:87:e3:ab:e0:b8:6e:cc:f2:86:45:ce:f9:c8:
                    7e:a9:d9:92:db:43:fb:04:e8:02:c9:a7:f3:5d:94:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:DE:A8:F1:5B:9F:0C:FF:90:AC:21:5B:22:4F:50:39:36:29:F7
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/452d6a-b6c8-4324-8e61-43351516f1ce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/452d6a-b6c8-4324-8e61-43351516f1ce/1/2AbeqPFbnwz_kKwhWyJPUDk2Kfc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.164.0/22
                IPv6:
                  2a09:9d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:8a:52:1f:da:87:a9:3b:bc:de:c3:c3:89:95:c1:d1:d6:
         02:44:f5:61:1d:bf:a6:38:37:e2:8c:67:1d:33:2d:0e:31:05:
         ee:18:d6:7b:bc:cd:35:c8:5b:09:7a:f6:d8:53:bc:57:76:1c:
         c1:bd:9a:6c:ee:ce:0f:58:e3:38:f5:49:2c:2b:5f:14:ed:ac:
         8d:99:46:3b:d9:fc:a7:29:9d:a1:6d:31:79:14:fa:d4:54:19:
         c7:6f:f1:25:88:89:81:a1:c2:00:a0:b0:e3:13:4f:19:60:47:
         36:83:db:d4:30:f1:10:d7:bf:a0:6a:d5:8f:65:fd:8c:16:de:
         22:82:ca:e4:8d:30:5a:7b:a9:c6:71:7d:01:71:ca:3e:2b:93:
         22:7b:18:bd:5b:06:1b:03:1d:69:c5:47:f2:14:56:3b:39:b8:
         de:4e:17:c2:93:b1:95:2f:96:60:95:25:39:9a:1c:3a:ea:a1:
         e3:a8:2b:ce:a6:6c:8a:3d:20:e2:a5:92:84:d1:ff:da:41:5d:
         f2:99:ef:6c:dc:fd:5f:eb:c0:c8:ae:d2:74:97:90:60:ec:65:
         ee:0a:3e:45:e6:e8:eb:23:c4:44:e9:1f:47:ea:e9:0e:d8:26:
         15:84:8d:ba:63:9e:50:99:8a:54:1e:40:4d:c5:07:1f:20:56:
         a5:24:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:40 2023 by rpki-client on console-fra.rpki-client.org