Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2HetXNnUAvEowaWbHkL0Xz7pTJw.cer
File:                     2HetXNnUAvEowaWbHkL0Xz7pTJw.cer (raw, json)
Hash identifier:          DetZqfnyCFMsxDLsLVwiYNmOBUD7ovkcB2p72hAxBw0=
Subject key identifier:   D8:77:AD:5C:D9:D4:02:F1:28:C1:A5:9B:1E:42:F4:5F:3E:E9:4C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       78EF1B8A04
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fd/6610aa-fde2-449d-8367-9570b010dde8/1/2HetXNnUAvEowaWbHkL0Xz7pTJw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fd/6610aa-fde2-449d-8367-9570b010dde8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:42:46 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.140.164.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519407634948 (0x78ef1b8a04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:42:46 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d877ad5cd9d402f128c1a59b1e42f45f3ee94c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ad:8b:f7:2c:6d:71:a3:97:9f:e4:ca:69:59:
                    ed:57:36:2b:1a:92:2b:99:69:a2:76:3b:29:8a:d9:
                    14:ba:e2:16:5a:75:90:67:82:d2:cc:38:0b:c5:22:
                    f6:a0:1c:ca:f9:f2:49:84:64:32:b4:32:06:01:e5:
                    ca:a2:f1:8b:49:18:d6:d8:b6:2a:d3:55:43:16:cc:
                    d6:bb:05:12:c8:30:8c:93:4d:0c:84:0f:6b:c1:5f:
                    34:10:39:30:fb:ff:92:85:55:8a:3f:aa:a0:5a:84:
                    9a:74:05:c7:7e:3d:2a:cb:af:b5:f3:c4:c5:e6:73:
                    82:b8:ef:0f:a4:d4:8e:cf:48:92:73:c9:2a:24:88:
                    33:8a:7d:54:9b:3d:4b:6e:14:36:72:ff:9e:01:6d:
                    25:23:b0:9e:26:70:4c:2d:17:72:f5:42:51:50:75:
                    93:43:61:9d:92:64:27:ba:35:74:e7:0a:88:2e:35:
                    53:23:6f:ab:c2:2c:c0:23:b2:f7:66:5b:47:74:7c:
                    8b:0b:b7:ce:db:35:14:cc:58:ec:c6:6f:10:62:00:
                    00:a6:ab:58:e7:a5:28:7b:ed:16:12:9d:ab:cf:80:
                    c4:7f:0f:8d:2e:08:d4:2e:fc:f9:ef:77:18:b0:32:
                    fc:5c:b2:0a:32:e1:0e:dd:13:bb:2e:ee:7b:38:c4:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:77:AD:5C:D9:D4:02:F1:28:C1:A5:9B:1E:42:F4:5F:3E:E9:4C:9C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6610aa-fde2-449d-8367-9570b010dde8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6610aa-fde2-449d-8367-9570b010dde8/1/2HetXNnUAvEowaWbHkL0Xz7pTJw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:20:37:f8:89:50:ba:93:c7:08:8d:c3:be:4e:f0:90:77:d1:
         5a:eb:b9:28:4e:98:d5:54:e9:db:ab:26:7d:c4:5a:4d:a1:7d:
         10:f0:19:62:be:0e:89:a8:9b:bb:e9:96:f4:b1:6b:a2:ea:73:
         08:75:cf:9c:e7:04:d0:e7:45:b9:4e:23:57:79:9f:42:73:e0:
         c8:1d:83:7b:5a:2d:a1:7b:ab:2d:43:da:01:94:e6:8d:29:c3:
         2e:57:3e:64:c1:df:21:91:33:a4:81:2d:50:02:f9:fc:89:ff:
         61:d1:d0:71:a8:38:7b:c2:df:59:49:56:1f:30:fb:cb:82:11:
         a9:46:99:1d:62:fa:af:c8:2a:34:d9:af:97:e1:b9:f6:a9:ef:
         a9:77:94:40:f3:33:c3:fc:a6:be:01:25:b0:a9:05:1a:ca:f8:
         7d:b7:1d:02:08:32:11:7a:01:42:7b:3c:f6:70:d2:b7:36:47:
         63:0c:4d:e4:f6:a7:a3:b7:8c:bc:c7:4c:8e:da:b7:fe:53:0b:
         a6:b9:97:64:7e:c9:91:59:13:bd:08:e7:39:6b:c8:4c:da:0f:
         af:15:a1:68:89:75:9f:c0:13:50:fa:e0:d6:65:46:eb:98:f6:
         4b:ce:56:20:3f:b6:4b:35:2d:36:b1:79:85:3a:a9:d5:16:ed:
         38:8e:10:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:31 2023 by rpki-client on console-ams.rpki-client.org