Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3RKM9exjUkrnpQexD-EcyqVYP8g.cer
File:                     3RKM9exjUkrnpQexD-EcyqVYP8g.cer (raw, json)
Hash identifier:          9WVA8kPViJcYyKgbcpiaLwSvPXWBldJizHtXWWCOHHQ=
Subject key identifier:   DD:12:8C:F5:EC:63:52:4A:E7:A5:07:B1:0F:E1:1C:CA:A5:58:3F:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       77B42C92EB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/e53fdb-42fa-48b5-88a1-c89f76d1db9e/1/3RKM9exjUkrnpQexD-EcyqVYP8g.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/e53fdb-42fa-48b5-88a1-c89f76d1db9e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:56:54 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.135.52.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514123928299 (0x77b42c92eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:56:54 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dd128cf5ec63524ae7a507b10fe11ccaa5583fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:3a:2d:c6:7d:45:3e:c5:b7:16:40:38:b1:
                    e6:14:8a:c6:71:16:b8:23:43:33:2c:44:75:4a:fb:
                    29:bc:03:9b:58:bf:65:19:e2:be:82:63:a3:80:fb:
                    77:ff:a0:bf:80:3c:7d:47:6e:72:3a:61:54:1b:f1:
                    58:b2:c6:c1:1e:cb:d6:81:c2:38:1f:b5:72:b5:5a:
                    05:70:4a:b9:ca:13:9d:fa:f2:3f:6e:84:62:38:28:
                    03:05:e0:bf:f4:51:fd:b6:32:09:30:b6:6d:73:a5:
                    46:1d:01:c5:d1:4f:8c:2c:a9:d1:3b:61:17:97:18:
                    53:15:8c:f4:a1:ce:19:59:59:54:38:a8:42:56:08:
                    01:46:f5:09:2e:fe:1a:e9:21:4b:8f:56:c0:d6:61:
                    f9:86:97:27:bb:67:31:a2:d4:e6:eb:f4:b7:94:26:
                    ea:a8:74:c1:40:da:c8:8d:e1:b0:6e:75:da:e6:8b:
                    53:3b:b9:21:3b:58:77:39:98:9a:90:72:30:1a:39:
                    8e:3b:0d:55:86:6d:85:cb:54:44:c0:eb:85:69:fb:
                    79:74:b4:96:51:8c:4f:fd:d3:5a:31:fa:e1:72:59:
                    ac:6c:11:b4:77:24:3e:20:db:0a:e7:02:63:28:f2:
                    4e:de:22:65:a8:d5:4e:97:2d:ab:11:79:61:57:32:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:8C:F5:EC:63:52:4A:E7:A5:07:B1:0F:E1:1C:CA:A5:58:3F:C8
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e53fdb-42fa-48b5-88a1-c89f76d1db9e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e53fdb-42fa-48b5-88a1-c89f76d1db9e/1/3RKM9exjUkrnpQexD-EcyqVYP8g.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:58:7a:69:b5:7c:db:57:3e:5f:31:82:2e:63:e3:3c:e2:39:
         0e:ec:1f:0c:76:fe:88:91:a3:b1:4d:a7:8c:bd:62:f8:b9:6f:
         c3:7c:b9:13:fc:16:15:19:45:06:84:c5:de:02:a4:20:bf:93:
         d0:dc:58:4f:af:29:6f:8b:0c:bc:8c:7d:2c:4e:80:b8:4e:b9:
         fc:85:9a:cf:1f:67:7c:8a:9c:97:94:98:56:47:ca:e0:b9:fe:
         53:94:eb:07:85:73:a6:36:2e:c9:6d:93:85:b4:32:c4:8c:e0:
         f5:49:ac:d6:8a:0a:0b:a1:33:26:43:a7:ed:ad:e9:3c:1b:4b:
         e8:7d:b1:45:b8:39:cf:ed:f0:40:73:a1:9e:96:19:04:2a:0d:
         73:ba:6f:5d:ca:4b:7d:db:7c:aa:f6:b6:28:75:ed:2c:15:65:
         d3:3c:ca:fe:55:ac:c8:8c:3d:89:37:c7:68:a1:c8:a6:06:dc:
         ee:00:41:56:ee:1c:c2:cd:f8:b1:2b:58:52:51:4d:b8:e7:d8:
         b1:0e:60:59:a1:a4:2a:08:e2:99:d5:b1:29:ab:7b:ee:15:da:
         8f:e8:3d:5a:36:67:25:a5:f9:cb:5a:59:1a:e3:58:03:fe:a9:
         c1:7e:25:fc:8a:64:46:c3:b9:c6:64:cc:7b:f1:c3:99:50:ba:
         f0:8f:50:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:29 2023 by rpki-client on console-ams.rpki-client.org