Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35jZW0J582JPeLXlOzGAw_AYaTM.cer
File:                     35jZW0J582JPeLXlOzGAw_AYaTM.cer (raw, json)
Hash identifier:          ToCoIEcygkXhJ+zl+iio57gDgd08AWBotEpJd7nimL4=
Subject key identifier:   DF:98:D9:5B:42:79:F3:62:4F:78:B5:E5:3B:31:80:C3:F0:18:69:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01835F7EA8BDBA134421BF80B0DEAC751641
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/35jZW0J582JPeLXlOzGAw_AYaTM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 21 Sep 2022 10:01:19 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 31246
                          IP: 46.39.160.0/19
                          IP: 83.240.0.0/17
                          IP: 95.82.128.0/18
                          IP: 185.51.240.0/22
                          IP: 2001:4cc8::/31
                          IP: 2a01:4240::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5f:7e:a8:bd:ba:13:44:21:bf:80:b0:de:ac:75:16:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 21 10:01:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df98d95b4279f3624f78b5e53b3180c3f0186933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e5:1f:cd:b0:e3:b5:39:7d:13:d5:18:08:19:
                    f5:5f:74:e8:4f:50:30:18:d6:ce:76:90:ee:53:c4:
                    7d:17:1e:08:11:ba:a2:9d:87:d2:80:a7:9c:58:61:
                    5d:9a:c2:0e:d0:d2:84:95:68:e1:e9:b1:24:9e:c3:
                    65:2f:60:b5:36:e1:d0:19:d4:7f:15:ed:72:61:98:
                    d1:7a:6c:02:5e:01:b4:a0:58:80:03:b2:9e:a7:2d:
                    16:f1:df:cc:85:38:55:1b:26:33:65:13:3e:91:7b:
                    ab:4e:77:e2:fc:e3:61:94:5e:32:ad:b2:75:82:c1:
                    cd:de:77:e8:cf:69:e2:f7:56:6c:eb:7d:58:6e:a5:
                    55:52:dd:28:36:5c:e4:72:83:c7:75:74:b5:b7:58:
                    41:be:e2:93:c4:bf:a9:0c:0e:87:e5:01:81:50:81:
                    f2:6b:a0:4d:62:4c:ab:f5:59:64:31:cd:0d:f4:1b:
                    1a:27:0e:b6:fc:e1:3c:40:35:25:cd:53:3e:d7:ec:
                    f6:75:98:80:12:fd:f4:55:45:1a:43:3c:a6:68:f1:
                    24:74:f7:40:df:3d:4e:54:11:62:db:07:2d:fb:55:
                    49:30:01:40:0e:99:c4:61:bd:cf:da:d3:d9:bf:94:
                    6d:54:f6:53:eb:52:1d:b0:bd:19:4e:bb:2e:f5:90:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:D9:5B:42:79:F3:62:4F:78:B5:E5:3B:31:80:C3:F0:18:69:33
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/35jZW0J582JPeLXlOzGAw_AYaTM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.39.160.0/19
                  83.240.0.0/17
                  95.82.128.0/18
                  185.51.240.0/22
                IPv6:
                  2001:4cc8::/31
                  2a01:4240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31246

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:61:3e:8a:21:ac:52:20:b6:26:c9:58:2c:0a:55:0f:a2:
         64:77:19:14:e5:55:04:20:db:0d:e5:93:f1:4d:cf:5a:3b:46:
         a3:a2:46:b2:f1:f7:15:34:f7:fd:f3:4d:d2:03:9a:1a:48:79:
         b3:9d:d9:26:51:61:19:71:2b:ed:98:a0:59:5b:6b:78:a4:15:
         63:63:00:b1:2d:6e:a1:3e:e4:27:df:19:4d:30:5f:6c:ce:fd:
         9c:c0:e5:89:27:12:08:e6:ee:f6:05:13:22:88:11:2f:52:ab:
         18:63:94:42:ad:13:c2:3c:cb:9d:3e:b5:48:e0:d4:e1:17:ed:
         d5:ef:1a:a4:70:c9:51:b3:92:7f:18:57:e9:66:16:a7:60:09:
         7b:e8:1c:3b:56:37:68:1b:c7:ba:2a:e6:17:4c:c5:71:0c:3f:
         5d:87:5d:a1:7f:34:71:10:11:20:49:8a:93:25:9c:91:0f:6c:
         3a:59:07:bd:1b:eb:d6:aa:90:24:b3:ee:e4:82:8e:47:75:59:
         a9:c2:8d:7f:c9:e5:b5:8e:35:43:fd:e3:e7:14:32:89:ce:1f:
         59:ae:f1:c9:6a:fd:04:35:74:f7:d9:f9:d4:ab:01:f1:5d:0a:
         e8:90:98:67:16:13:4a:71:7f:49:ea:2e:c8:25:26:42:23:94:
         d8:73:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:16 2023 by rpki-client on console-ams.rpki-client.org