Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4T6XPAZaIM6M0LzbGhtRkOHk5OQ.cer
File:                     4T6XPAZaIM6M0LzbGhtRkOHk5OQ.cer (raw, json)
Hash identifier:          eY6Tu4KLTxEgvxXToIazBpUNcnWlmufrCh+Kp0518Ks=
Subject key identifier:   E1:3E:97:3C:06:5A:20:CE:8C:D0:BC:DB:1A:1B:51:90:E1:E4:E4:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       60B6C166D8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/65/fa646c-d843-42e6-b9d8-c4dbe0ad2c2c/1/4T6XPAZaIM6M0LzbGhtRkOHk5OQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/65/fa646c-d843-42e6-b9d8-c4dbe0ad2c2c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:20:39 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 185.243.188.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415382988504 (0x60b6c166d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:20:39 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=e13e973c065a20ce8cd0bcdb1a1b5190e1e4e4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:b9:98:91:0d:6e:7d:5c:d1:56:a2:c7:85:
                    cf:00:5e:6a:22:c5:1f:5f:ae:b1:7b:83:b0:a4:80:
                    c2:4b:32:b3:65:81:fc:3d:32:59:fa:6a:8b:0b:9d:
                    ed:aa:87:28:ff:34:80:40:b9:ff:87:41:72:8e:48:
                    ae:4f:b6:c9:5a:6b:3b:eb:83:7f:13:e9:a9:be:d9:
                    0a:c7:3b:63:fa:09:0c:fc:a7:6b:3e:a5:5f:04:c1:
                    e5:26:ac:ad:de:c8:61:ec:ae:a6:18:4f:75:4e:9a:
                    8f:17:e5:bf:6f:49:6d:60:6e:8b:3d:8a:aa:84:d0:
                    e8:27:af:52:02:4c:58:8c:9e:c3:a0:5f:bb:de:ef:
                    0b:da:e6:ef:67:15:c8:80:00:43:69:45:d0:89:d3:
                    a8:3f:20:67:e0:62:76:a6:0e:b0:c5:69:66:a6:ca:
                    b6:46:43:99:89:9d:b5:75:d2:85:36:79:68:7c:12:
                    f6:80:06:b1:16:3f:67:d4:19:60:67:2c:49:1d:ff:
                    c4:62:9b:25:75:11:61:32:c0:b8:61:2b:77:75:ad:
                    37:de:06:a6:ac:4f:de:28:58:80:35:be:13:9c:d0:
                    70:77:3c:7f:b5:07:68:63:a4:4e:07:36:2b:30:e0:
                    68:25:bd:12:56:ee:1d:60:d8:24:cb:f3:30:3a:f6:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3E:97:3C:06:5A:20:CE:8C:D0:BC:DB:1A:1B:51:90:E1:E4:E4:E4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/fa646c-d843-42e6-b9d8-c4dbe0ad2c2c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/fa646c-d843-42e6-b9d8-c4dbe0ad2c2c/1/4T6XPAZaIM6M0LzbGhtRkOHk5OQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:ef:6d:84:25:66:f7:67:54:58:fb:f0:a5:2a:0a:9b:fb:
         91:ac:ee:c5:36:dc:3c:98:51:91:f3:ba:24:b6:b7:48:7f:9e:
         83:2c:1c:99:08:17:4a:d1:6c:ee:fd:9e:cb:47:95:17:30:aa:
         6b:c6:65:40:28:c3:5a:1b:b3:07:2d:61:d4:6c:fc:26:0f:8d:
         52:12:a0:98:70:0d:bf:e8:af:ec:5a:bb:1a:b2:11:ef:c9:75:
         98:76:c2:8b:7e:c3:52:04:26:a8:65:0b:e7:8b:01:76:39:9a:
         b8:e7:83:42:c3:cf:72:a2:b9:73:b4:00:15:65:71:a1:5d:5c:
         f8:dd:16:3a:eb:5d:0a:32:bd:95:60:f5:52:40:93:ca:95:a4:
         0c:5a:ee:06:ff:7d:57:02:2d:0b:66:cf:7a:f2:cf:c1:74:d3:
         1a:1d:cf:df:aa:dd:a8:09:a1:b7:6a:cd:51:90:98:90:41:0e:
         be:4e:4d:71:f4:20:21:b9:83:d3:8c:86:f7:70:e6:9d:1e:b5:
         02:12:f7:4b:73:ff:55:8e:47:0f:a8:2c:ab:f7:ce:1b:56:46:
         a9:42:ce:e1:1b:37:21:ee:92:a1:d5:7a:26:db:8e:2f:27:3e:
         9e:57:24:11:f2:23:99:98:d3:d2:42:f7:57:bb:20:9e:a7:27:
         7c:0b:d3:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:15 2023 by rpki-client on console-ams.rpki-client.org