Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3IH7jiV6_ZuGjCXjct7ZqkHLmYM.cer
File:                     3IH7jiV6_ZuGjCXjct7ZqkHLmYM.cer (raw, json)
Hash identifier:          ST7NeDm191GQATN0+ryegU3OFwllEQ2NYUw6gu15rtc=
Subject key identifier:   DC:81:FB:8E:25:7A:FD:9B:86:8C:25:E3:72:DE:D9:AA:41:CB:99:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       75C1016363
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/2e82e8-ab1f-47d3-b079-ba2f586ad35e/1/3IH7jiV6_ZuGjCXjct7ZqkHLmYM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/2e82e8-ab1f-47d3-b079-ba2f586ad35e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:12:21 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.144.184.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505749267299 (0x75c1016363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:12:21 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dc81fb8e257afd9b868c25e372ded9aa41cb9983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:00:d8:c0:a5:fe:a2:97:58:22:c0:78:15:
                    06:27:fb:8b:28:1d:73:a0:f0:d6:40:92:b6:f2:b2:
                    21:80:56:d7:00:eb:8e:a3:47:6f:0d:e2:a4:f7:12:
                    4a:ba:89:b3:06:9e:7a:43:8f:15:46:a9:57:3a:7b:
                    ad:29:ae:f4:e8:db:4f:4e:11:20:70:2e:7c:40:cf:
                    fb:b7:e4:a6:15:c5:de:eb:2f:ec:8c:ee:b3:27:78:
                    15:7d:cb:bd:63:67:48:0e:da:9f:bf:41:48:a3:de:
                    0e:bc:17:6d:57:0f:9a:3c:3a:3c:32:16:d2:e5:bd:
                    56:98:45:00:a6:09:a8:a2:27:17:93:ae:0b:d0:3a:
                    9b:06:c7:be:dd:f7:d1:a5:c0:bf:06:c0:00:b3:fb:
                    48:e4:f7:a4:73:be:f3:22:93:ba:74:b7:1e:01:48:
                    b9:c5:6e:cd:f4:3e:34:7f:a9:72:b1:50:b3:c2:1f:
                    6a:da:48:f8:a7:27:ce:1a:d3:88:65:3c:54:74:ac:
                    02:01:a7:5e:ca:55:a5:bb:58:d0:c3:3e:17:f3:8c:
                    99:d0:e2:f9:01:be:c0:20:b7:69:92:7c:89:51:a8:
                    99:63:76:8f:1a:68:9b:52:92:44:be:8c:7c:be:2d:
                    34:01:5a:c7:7c:28:ec:10:fa:16:a3:24:f3:cf:42:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:81:FB:8E:25:7A:FD:9B:86:8C:25:E3:72:DE:D9:AA:41:CB:99:83
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e82e8-ab1f-47d3-b079-ba2f586ad35e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e82e8-ab1f-47d3-b079-ba2f586ad35e/1/3IH7jiV6_ZuGjCXjct7ZqkHLmYM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:17:af:51:67:74:19:f5:81:d4:e4:8d:50:eb:43:42:c7:
         3e:31:60:73:23:ff:6d:27:36:56:f2:99:2a:8a:d3:c1:2b:66:
         4f:dd:14:8a:c8:20:84:1b:42:f7:39:3c:c3:89:82:21:1f:30:
         2f:fc:42:50:ec:2e:f5:d2:38:57:63:44:1d:7f:6b:af:33:bd:
         01:f5:a2:3f:6e:f9:04:fc:55:d7:d9:0c:68:ae:5e:a1:08:d8:
         4a:28:04:c9:10:bb:3e:fe:c2:ba:e8:5c:a1:18:88:62:d2:a5:
         ba:63:25:98:11:18:e6:16:22:25:fd:81:98:c3:9a:0d:d4:82:
         9a:e1:68:9c:5a:20:af:71:78:c4:0f:bb:e2:18:2b:17:c7:68:
         14:cf:8d:15:07:54:a8:b7:79:bf:17:7b:81:5b:0b:38:aa:12:
         99:19:d4:d6:a7:93:59:84:7b:d3:d5:76:15:d4:3f:9f:c5:ff:
         a9:6f:03:56:43:c1:04:3c:b6:8f:30:d0:f3:9b:90:9d:6a:74:
         ab:9b:7a:45:b9:2e:eb:df:6a:b2:40:e0:e4:3e:3c:53:0b:2c:
         16:d7:4d:5d:7c:ac:fa:8f:de:0e:2d:48:ea:64:0d:08:01:e5:
         9b:d6:80:eb:82:b8:73:c7:76:45:87:ce:fe:23:0e:bc:03:f8:
         08:30:b0:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:28 2023 by rpki-client on console-ams.rpki-client.org