Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3xLi7UO1qTbCwi6aG3KOEGoZBe0.cer
File:                     3xLi7UO1qTbCwi6aG3KOEGoZBe0.cer (raw, json)
Hash identifier:          FW8VmEOR7A8LD3F+Jwv+P63ps9ARlHQT8W+j/ABvOgA=
Subject key identifier:   DF:12:E2:ED:43:B5:A9:36:C2:C2:2E:9A:1B:72:8E:10:6A:19:05:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A0253291B6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/3xLi7UO1qTbCwi6aG3KOEGoZBe0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 06:54:58 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.90.88.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687818838454 (0xa0253291b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:54:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df12e2ed43b5a936c2c22e9a1b728e106a1905ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7d:a1:69:ba:20:ad:1c:80:b9:a6:e6:60:f8:
                    84:cf:17:95:70:22:a9:dd:d8:f6:e5:bd:03:ca:b1:
                    ad:24:06:eb:10:ee:f2:be:c8:84:8c:ab:20:6f:6a:
                    a9:08:c4:a4:98:86:17:be:5c:1e:02:cf:00:b1:c9:
                    83:98:81:c7:40:7f:34:2c:b7:97:ea:88:83:26:b8:
                    4e:76:80:07:1d:33:1c:10:98:dc:ab:e8:fe:f0:85:
                    89:48:6e:01:6b:94:db:0b:f0:e4:94:de:be:85:63:
                    fd:ba:1b:a2:c8:34:d2:28:dd:64:95:f4:0f:f2:8c:
                    57:e6:f9:8b:53:e1:6a:3f:d1:36:df:d5:1b:3f:2e:
                    32:97:95:a3:b4:98:d2:bd:b4:0a:4d:db:7d:10:76:
                    19:00:20:7c:8b:3b:7c:f2:f4:68:99:33:f9:6a:27:
                    51:ba:5f:a0:4c:59:4e:99:6d:65:8e:65:80:0e:ab:
                    4f:c3:6e:6a:38:7d:65:c8:14:44:90:44:9b:a0:87:
                    b7:1f:0a:d8:70:26:bf:17:78:b0:68:e7:e5:ac:61:
                    10:60:0a:5a:ac:97:51:46:de:59:81:0a:a8:71:d3:
                    45:78:47:51:a5:79:f1:2f:98:09:e7:a2:47:81:0f:
                    4c:0c:fd:69:7b:a8:48:bc:5b:c8:95:4f:32:2f:59:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:12:E2:ED:43:B5:A9:36:C2:C2:2E:9A:1B:72:8E:10:6A:19:05:ED
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76104c-42cb-4670-88f2-c6f0c1942bdb/1/3xLi7UO1qTbCwi6aG3KOEGoZBe0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:13:52:b5:47:0d:39:db:25:11:c1:51:d4:cb:f9:86:25:d9:
         c3:f3:75:25:61:76:17:fe:80:49:3a:06:ab:a8:38:d3:8e:9a:
         02:30:bd:1a:aa:99:35:ea:ed:2c:89:8b:62:9e:c3:19:0d:df:
         d8:0e:de:5b:1a:97:5d:b4:91:ce:eb:a5:a7:fa:9c:55:ff:7c:
         0c:b8:89:8a:b9:00:db:84:3b:b3:71:7b:fd:87:53:18:34:e7:
         ad:65:4f:0d:01:5b:ac:67:bb:a0:22:76:e9:6d:84:31:9b:4b:
         79:9a:54:41:39:14:37:eb:69:95:6f:02:83:ef:6c:5c:90:7a:
         c2:0d:de:d7:54:15:a6:90:54:d1:ad:b7:1b:82:7d:60:62:1d:
         9c:8f:69:b1:92:80:16:cb:d4:a5:05:1a:0d:17:54:ce:c4:f0:
         58:01:61:e7:b8:cf:69:6d:ca:f4:a6:fa:e5:ab:61:13:bb:0c:
         98:f5:ce:8d:50:6c:49:74:b9:73:a3:67:c7:67:1a:19:46:a7:
         2e:fb:aa:e8:f1:7f:34:f5:83:9f:d5:2b:2c:6f:b9:4e:95:3a:
         4b:6e:fe:db:e2:57:0e:25:37:ee:d2:64:95:67:85:ce:f1:50:
         77:09:7a:6c:5f:7f:6d:9c:cd:0c:64:09:6c:e9:65:f8:f0:2f:
         3e:75:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-fra.rpki-client.org