Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer
File:                     43nYPSKgvuuGyH4Vpstsab1CkD8.cer (raw, json)
Hash identifier:          049phVbiRG6o/2DtbNnLZvV0UXkaYIn5Jt5cAYuOxxw=
Subject key identifier:   E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9A8420A132
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 01:55:52 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 43288
                          IP: 185.188.28.0/22
                          IP: 2a0b:b480::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663641694514 (0x9a8420a132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:55:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:f5:99:85:68:d0:0d:d0:17:12:dd:ff:19:
                    37:08:f1:42:16:6d:0f:91:4d:78:05:39:42:7a:6a:
                    2c:3d:af:67:59:4b:d7:8a:65:38:e9:35:78:90:60:
                    ec:f4:57:0c:37:eb:a1:fb:df:0d:cc:48:8c:4f:af:
                    d8:11:44:37:46:b8:28:b2:85:44:92:20:31:ae:bb:
                    eb:1d:82:d5:16:9c:71:1a:38:bb:d0:b1:07:44:99:
                    7c:90:e1:b4:d7:f4:bc:15:3f:95:d8:7e:78:4d:3c:
                    b3:c8:31:77:1b:a5:9e:9d:3a:bb:ef:79:21:e7:4a:
                    73:85:81:48:d8:ac:1b:40:6d:0a:5c:46:7e:76:47:
                    0a:d2:37:2e:d0:7f:07:f5:5e:1f:db:81:e3:fb:aa:
                    87:99:58:8f:1c:ab:d9:4e:9c:99:a1:33:65:ac:d9:
                    18:88:c0:bb:b0:59:a7:00:43:46:97:bc:50:13:d0:
                    c0:aa:c4:37:6a:90:f1:89:ae:e4:68:1b:a7:4e:f0:
                    36:f6:b1:a4:f4:fa:a1:f9:71:ff:d2:c8:32:af:85:
                    dd:c9:c1:d9:95:8c:79:f5:66:09:3f:dd:4c:76:0f:
                    6f:f9:eb:7c:00:92:6c:76:13:ab:28:42:f8:d2:d2:
                    6c:3e:78:c7:a3:9e:c4:a0:ba:74:1e:7a:2f:63:29:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.28.0/22
                IPv6:
                  2a0b:b480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43288

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:64:ee:4f:e7:21:ea:dc:18:dd:1e:dd:89:c2:0f:34:fa:
         db:ab:b9:96:99:6f:28:55:48:77:46:20:38:01:d1:09:9e:da:
         c0:51:d2:6a:0a:c7:fa:25:d7:da:39:d2:c9:d0:dd:57:5d:42:
         8b:b4:8a:e5:9b:fb:20:fa:f2:1a:0e:a7:c1:b2:8d:74:b0:2f:
         0f:e2:fe:7b:92:0d:a3:32:67:3b:71:0c:b8:a1:5a:78:a7:5f:
         92:fd:83:a5:aa:1d:a0:bf:50:03:5d:7d:9c:cf:2a:9b:7f:67:
         d5:71:1f:eb:3f:6a:2e:a8:88:d2:10:c3:c4:03:cf:08:52:7b:
         62:ba:fc:a1:df:fc:c7:70:3f:d5:18:4a:5f:b5:92:aa:41:71:
         34:20:02:33:98:d2:39:d4:5d:d3:73:fc:6d:ce:be:d2:d6:32:
         f2:89:57:bf:95:16:48:21:5b:00:e0:2a:7d:03:1d:c8:2a:c9:
         cd:66:01:94:b5:3b:ba:87:22:ba:9c:04:8f:91:df:49:29:a8:
         13:85:d6:b1:e1:e8:de:af:1f:1a:26:ca:82:83:d8:42:33:bc:
         51:bf:83:be:98:b8:ea:8e:93:b1:32:26:22:66:83:ef:e5:ea:
         17:86:e2:32:28:a3:60:ee:e7:9a:89:30:93:35:4d:1b:67:52:
         f4:a5:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-fra.rpki-client.org