Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2VdLIZbtxv-822ooFeupyGvM89s.cer
File:                     2VdLIZbtxv-822ooFeupyGvM89s.cer (raw, json)
Hash identifier:          51mI7E3X42xrjmRTT06kA3XL9/RT+sQT8Q550TkLpWI=
Subject key identifier:   D9:57:4B:21:96:ED:C6:FF:BC:DB:6A:28:15:EB:A9:C8:6B:CC:F3:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       99D631B941
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/85/eb49fe-5f09-4959-959a-5d1cc9c55d22/1/2VdLIZbtxv-822ooFeupyGvM89s.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/85/eb49fe-5f09-4959-959a-5d1cc9c55d22/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 01:01:56 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 210387

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660723579201 (0x99d631b941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:01:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d9574b2196edc6ffbcdb6a2815eba9c86bccf3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:5c:55:11:a3:e9:43:6f:75:77:6b:97:4b:
                    35:42:4c:e3:68:59:dc:0e:3c:f1:ad:0e:42:4b:01:
                    c7:0c:92:e5:0e:aa:b0:6e:fb:c5:e7:99:ea:b0:e0:
                    1d:89:e0:74:f5:c1:d0:c6:52:73:2a:8f:97:32:e8:
                    c1:1d:8d:af:1c:78:27:f8:75:d0:9a:e3:ed:92:bf:
                    53:fd:70:2f:41:08:00:e9:f8:d1:c7:55:67:c6:17:
                    3e:f3:0c:3b:09:ab:56:f4:d7:a1:47:36:57:43:77:
                    c2:87:06:c1:2f:55:ef:28:22:59:e9:ae:5b:9d:f3:
                    1e:64:ae:15:59:24:43:83:47:32:b1:61:39:30:09:
                    82:33:58:e8:33:a6:cd:ff:42:1e:8b:6a:27:a0:50:
                    14:8c:fb:04:7a:1e:4c:76:c5:63:89:e0:14:1a:00:
                    52:cf:d3:5d:74:f2:c7:6d:4b:0a:a5:e1:71:67:c0:
                    0d:05:69:2c:41:30:f5:cc:68:00:8d:e9:9b:b0:e3:
                    a4:98:67:e0:a9:2e:8f:af:bd:6b:ed:b5:19:23:90:
                    59:b3:f1:1b:e8:74:54:02:87:50:0c:40:70:db:ab:
                    5c:eb:b9:c1:50:9e:eb:85:02:62:32:76:7f:e4:81:
                    6f:ce:bf:8a:5c:1a:c3:68:ac:6a:f8:82:f8:ac:c5:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:4B:21:96:ED:C6:FF:BC:DB:6A:28:15:EB:A9:C8:6B:CC:F3:DB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/eb49fe-5f09-4959-959a-5d1cc9c55d22/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/eb49fe-5f09-4959-959a-5d1cc9c55d22/1/2VdLIZbtxv-822ooFeupyGvM89s.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210387

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:e5:b9:c4:55:85:f5:37:30:ce:5d:34:c9:9c:3c:c0:f0:
         08:e0:79:5a:5d:ef:c1:e6:26:a2:02:a8:76:a8:7a:d5:33:dd:
         70:3f:89:39:e4:b6:51:5b:29:19:86:20:80:89:78:1c:8c:21:
         82:39:66:ea:b6:bb:16:e9:2e:cd:39:53:3e:03:3d:54:bd:bd:
         44:bd:a3:c2:dc:f7:8a:58:77:11:6e:3b:6e:1d:f6:06:e6:e9:
         0c:7e:67:67:10:83:3b:67:8d:29:02:d1:51:04:83:68:bc:b0:
         fb:a1:e2:d3:89:f3:3b:4b:91:be:d2:9c:af:d1:33:83:e2:65:
         ee:39:fa:ed:1e:06:30:a9:74:6d:9e:b7:70:75:07:d0:ad:d4:
         0c:53:34:99:8a:72:e1:d1:82:f3:0e:c3:fd:c5:3b:bb:51:ba:
         97:6c:00:10:9b:a8:00:5a:d7:42:07:de:d7:7e:d4:db:19:9f:
         86:8e:ab:0a:f9:27:fb:12:cf:02:4f:fa:d0:07:c4:ad:fa:e3:
         e9:c2:ad:8e:ff:02:3d:b3:05:3c:c2:93:32:39:a4:2b:43:43:
         eb:52:08:0f:cc:53:0c:88:0a:6b:2d:f3:83:47:6f:09:4d:36:
         10:41:fa:4d:90:7d:fb:0e:c4:8e:d1:5a:9c:1a:cb:33:a4:0f:
         a1:b4:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:41 2023 by rpki-client on console-fra.rpki-client.org