Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2ZszNTRgIr9i0mAXCasoDsfu-tg.cer
File:                     2ZszNTRgIr9i0mAXCasoDsfu-tg.cer (raw, json)
Hash identifier:          0AiUeu7OIkm0sERp7vKZU6+Uz3B/E2sNE+W+H+5V+wU=
Subject key identifier:   D9:9B:33:35:34:60:22:BF:62:D2:60:17:09:AB:28:0E:C7:EE:FA:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       81D46A0F52
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/af/07a5ab-9793-4a8d-aa1e-f5214c66878c/1/2ZszNTRgIr9i0mAXCasoDsfu-tg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/af/07a5ab-9793-4a8d-aa1e-f5214c66878c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:42:44 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.131.16.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557614501714 (0x81d46a0f52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:42:44 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d99b3335346022bf62d2601709ab280ec7eefad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:82:07:49:16:05:fc:f2:36:d5:8e:07:82:
                    87:0a:bc:5b:3e:16:d9:20:90:34:7d:9c:99:4a:ff:
                    8c:b4:d1:f1:19:4d:00:0c:b1:e9:11:c1:1a:2a:ea:
                    5d:df:fc:51:9d:1a:c7:4b:37:fb:74:26:f9:e6:31:
                    d1:9d:f6:74:64:dd:ac:3b:d6:60:f4:62:30:ac:ef:
                    e4:49:17:33:1b:ed:42:e9:a7:5f:a9:b0:89:24:2d:
                    9b:6c:23:ef:4c:fe:39:83:06:86:8f:35:65:a4:24:
                    2f:7d:bb:5c:5c:39:c7:5e:f3:9c:de:f0:a6:1b:4a:
                    42:5e:2f:2e:80:6c:94:60:8a:57:9c:dc:05:e2:e2:
                    0b:71:33:ce:05:f3:9f:f9:76:29:e4:0f:9e:96:ae:
                    c4:c4:26:3b:c3:8f:b4:fa:15:43:d7:c2:73:10:75:
                    84:05:d1:6d:fe:f4:87:c6:32:08:fc:29:00:81:6d:
                    47:8f:15:3d:83:95:a4:8e:a0:e4:c7:dd:6b:21:2f:
                    af:56:5d:4c:03:d7:92:9e:c3:83:7e:e7:4e:01:14:
                    58:55:8f:a6:47:87:7b:84:76:92:eb:55:b9:4b:9f:
                    6c:39:6a:21:ad:34:64:c7:bf:76:b1:b4:0f:70:83:
                    aa:a1:5e:5f:0d:e4:f0:86:ff:60:e2:bd:84:06:c6:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9B:33:35:34:60:22:BF:62:D2:60:17:09:AB:28:0E:C7:EE:FA:D8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07a5ab-9793-4a8d-aa1e-f5214c66878c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07a5ab-9793-4a8d-aa1e-f5214c66878c/1/2ZszNTRgIr9i0mAXCasoDsfu-tg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:85:1f:b8:56:92:a3:da:dc:39:6f:fc:1e:37:81:78:ed:
         05:f0:ff:ba:a1:49:e5:88:f3:e2:63:d1:55:ce:5f:9b:b6:2c:
         20:58:58:b4:eb:65:10:86:0e:a2:d5:87:cd:0b:32:2f:92:16:
         bd:1a:db:40:ea:94:86:5d:e6:93:9b:52:1d:61:f0:6e:ff:52:
         67:d9:d3:b9:2e:8c:6d:f3:b2:af:eb:23:cb:de:99:9f:98:16:
         b4:b0:8e:d1:eb:98:39:94:f7:07:ae:88:2b:07:bf:3c:54:0c:
         a9:69:24:c6:a8:b5:19:8f:19:a2:10:5e:c5:eb:51:f9:18:c7:
         90:97:33:50:8d:0c:22:e4:b1:c2:70:b6:6a:01:b7:48:36:2a:
         2e:24:09:11:a5:1c:1c:68:3e:dc:44:d7:f0:67:6e:89:4f:f9:
         a6:74:5e:d9:c6:29:1f:e7:da:94:1d:88:a2:f0:ca:c7:7d:73:
         ca:a0:d7:0b:d5:70:16:59:88:76:7b:5f:00:df:8e:9f:aa:5d:
         09:98:6a:99:d8:e1:a5:fd:f7:b9:76:75:9e:1b:fd:3c:a4:07:
         74:6e:88:5a:6c:79:d6:10:87:0f:68:2f:c3:05:a2:73:22:a1:
         e6:e9:b2:d4:e2:b5:10:bf:25:4f:85:89:04:2e:45:1d:b6:d5:
         5c:34:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:32 2023 by rpki-client on console-ams.rpki-client.org