Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4H3jFEoJ_V9QVZxJP4bi6L08Z54.cer
File:                     4H3jFEoJ_V9QVZxJP4bi6L08Z54.cer (raw, json)
Hash identifier:          V7ds8htaEVwgvCTSQmHeYWeAl2MQMv5C1QDZghjWLBo=
Subject key identifier:   E0:7D:E3:14:4A:09:FD:5F:50:55:9C:49:3F:86:E2:E8:BD:3C:67:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AFC4647A56
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/4H3jFEoJ_V9QVZxJP4bi6L08Z54.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 07 Apr 2022 10:11:15 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a0f:6ec0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754914196054 (0xafc4647a56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  7 10:11:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e07de3144a09fd5f50559c493f86e2e8bd3c679e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d5:c7:9e:10:b5:a8:a0:58:aa:41:b4:7f:00:
                    cb:af:4e:2f:d1:88:1e:57:a2:18:59:e2:34:aa:58:
                    c1:6c:32:1f:46:b8:5b:83:2b:36:4c:7e:f1:ef:08:
                    0c:14:b6:f6:67:15:4c:72:56:4c:28:9a:9c:c2:20:
                    68:68:36:96:27:7d:27:ac:8d:20:3f:27:cf:28:f1:
                    cb:c4:3c:58:bf:3b:f1:a7:ef:f2:23:bb:1a:fc:56:
                    f6:1a:4b:9d:19:cf:36:1a:d9:58:38:36:02:fc:56:
                    b2:d9:54:93:39:d3:92:14:e6:e0:79:4e:d3:c2:a8:
                    34:ef:52:1d:79:89:e5:c6:7a:23:1a:21:53:91:7d:
                    b9:a8:e2:ef:91:d8:0f:b2:76:08:af:3e:d7:69:ff:
                    e0:d6:5b:e7:2f:5a:2b:07:2c:fc:f7:c6:88:a2:6e:
                    b2:80:65:8a:4a:41:64:a4:41:72:c9:93:43:e4:5f:
                    91:1b:26:b5:71:49:5d:3b:d7:63:91:fd:79:c5:ff:
                    b9:1b:31:55:06:8e:dd:99:df:72:00:3d:04:77:c3:
                    21:7a:f5:9c:84:aa:4d:51:44:b0:9d:e8:3f:fd:6b:
                    c2:cb:05:ec:d5:ca:1e:fe:af:f3:b5:ef:cf:30:d5:
                    32:98:3c:4b:e9:0a:55:a2:d5:e2:60:26:d4:cf:55:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7D:E3:14:4A:09:FD:5F:50:55:9C:49:3F:86:E2:E8:BD:3C:67:9E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/4H3jFEoJ_V9QVZxJP4bi6L08Z54.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:eb:58:8a:32:50:5a:6c:4e:52:98:d5:89:37:c6:79:2f:
         1f:d3:c1:d1:09:83:bd:ba:90:ee:44:a1:e6:a8:da:54:ac:93:
         ef:5a:86:bc:b6:85:bc:8f:eb:d8:96:ec:27:02:a9:fd:df:e7:
         d0:9d:20:7a:f4:6c:20:8e:8e:43:7d:f2:60:98:93:d3:9b:6b:
         2f:5d:9f:71:7c:63:da:09:06:48:b8:e7:8d:be:0f:9c:e4:d1:
         35:23:cb:b8:06:89:fd:1b:51:8d:56:30:8d:ac:a2:b9:6c:1c:
         62:13:3f:dd:d3:b7:d1:98:db:37:12:38:b3:43:9c:2d:a6:26:
         2f:7f:1d:be:44:ed:92:5b:7b:3a:ef:71:e5:68:dc:c2:0c:84:
         22:9a:5a:a3:8d:99:9d:69:f1:02:74:d7:d1:5c:23:b7:c1:16:
         b0:de:c5:b5:bd:90:23:c6:fd:75:91:90:17:23:cf:a4:32:2f:
         7c:a9:ab:24:b1:46:18:35:98:9a:15:86:d9:48:3e:68:04:d3:
         07:84:23:22:66:fa:b8:43:85:96:42:30:7d:b0:45:3b:7c:e9:
         28:5d:55:f5:fe:ed:ec:11:8d:0f:31:7e:14:4a:4c:02:c2:d4:
         81:38:e9:11:b4:b2:e8:04:30:c1:01:93:79:57:81:70:cc:97:
         f3:4b:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:15 2023 by rpki-client on console-ams.rpki-client.org