Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3_jxuqmyYorvTW6ycTddb5m12Ps.cer
File:                     3_jxuqmyYorvTW6ycTddb5m12Ps.cer (raw, json)
Hash identifier:          ttKU0HjOYlEJ/ciMSuc96DcBIbbJEDsET0frVNqpl0c=
Subject key identifier:   DF:F8:F1:BA:A9:B2:62:8A:EF:4D:6E:B2:71:37:5D:6F:99:B5:D8:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       775E86FE50
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/100/DFF8F1BAA9B2628AEF4D6EB271375D6F99B5D8FB.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/100/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:49:03 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 83.136.180.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512687013456 (0x775e86fe50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:49:03 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=dff8f1baa9b2628aef4d6eb271375d6f99b5d8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:4d:f1:ac:a5:f7:0d:ef:bc:80:0d:79:1b:
                    be:54:b3:e8:a1:d1:60:e2:c4:81:84:1b:4c:fa:6b:
                    f2:9c:ec:98:65:57:e4:5c:2a:c1:51:4c:5c:32:e3:
                    84:56:34:6d:51:34:94:8d:2f:c2:74:fc:37:20:e3:
                    75:c6:7a:56:6a:85:6e:9d:ca:91:fd:a5:15:c0:95:
                    0b:47:76:e8:df:ec:9b:aa:fb:f8:ca:3b:f2:16:19:
                    9b:d3:1c:be:26:55:66:ee:81:0a:4b:5b:18:7d:a1:
                    18:68:1b:58:38:b1:d3:de:81:cd:2d:e2:cb:51:43:
                    8b:9e:32:31:8f:6a:df:59:ba:a0:bf:ac:3a:ff:f2:
                    c9:52:25:28:2f:11:09:f3:32:6d:02:fa:8b:34:c4:
                    a7:ce:77:14:40:8b:43:a0:2e:ee:1f:88:09:30:fd:
                    86:9a:1f:5d:10:d2:27:a6:fb:d1:c6:a6:ed:62:77:
                    4b:1c:e3:07:75:be:70:ac:5a:7a:31:cc:0f:0e:f1:
                    2d:f8:ed:b3:6d:58:73:e3:06:4b:99:b0:57:fb:4d:
                    ca:77:d8:06:62:dc:24:5d:a6:2b:9f:54:07:31:7e:
                    5f:17:18:27:c1:e5:87:21:4c:16:a5:d3:44:fe:3c:
                    76:3a:b5:30:1a:7d:f1:7f:aa:7d:10:4a:e6:a7:fd:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F8:F1:BA:A9:B2:62:8A:EF:4D:6E:B2:71:37:5D:6F:99:B5:D8:FB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/100/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/100/DFF8F1BAA9B2628AEF4D6EB271375D6F99B5D8FB.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:4a:1f:cd:f8:3b:51:8d:81:38:71:3e:cf:26:5b:33:e2:
         e6:eb:16:9b:cb:0c:28:e2:51:34:b6:77:56:30:11:2a:58:58:
         15:8e:d9:4d:93:f6:f8:bc:9a:90:8f:5c:aa:10:7b:a0:19:19:
         dc:83:3c:ed:fe:79:c4:79:0d:d4:1c:36:85:19:e2:b5:9e:47:
         55:51:63:e9:c5:e8:4e:ce:14:6a:28:36:1d:d5:f1:75:0e:4a:
         bc:57:de:9e:01:05:2c:c1:a8:f1:39:96:5b:0c:70:6a:be:a4:
         7d:b0:10:f9:61:4c:55:0b:f0:6b:d3:a1:34:eb:48:dd:98:b1:
         21:de:91:8e:48:e0:c0:db:34:3b:38:6b:e6:bd:c8:62:36:a5:
         45:b4:45:bc:cb:a8:7f:be:09:dd:1d:b4:d4:f8:f2:f3:01:d2:
         0e:6a:1b:5e:33:7b:b2:c5:f7:77:42:f7:6e:03:c8:7a:f4:56:
         45:39:31:b6:90:27:9a:f2:90:85:5b:2f:b8:7f:a9:33:50:84:
         5e:bb:0f:ef:71:f4:00:16:4f:72:0b:63:4b:e0:44:c1:4d:d4:
         a6:12:06:0a:38:aa:f5:16:d0:2a:79:b1:ba:fb:97:28:0a:83:
         a4:e3:45:6d:dc:a3:e7:92:66:e4:c2:07:fc:f0:99:fe:8a:2f:
         5c:ea:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:30 2023 by rpki-client on console-ams.rpki-client.org