Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4rw7eJrn5ksaxrZ-izJnjty75M4.cer
File:                     4rw7eJrn5ksaxrZ-izJnjty75M4.cer (raw, json)
Hash identifier:          shuOJ8tEb/IoeaeRmPIrR6eO0w5N5cSVmoFIFCCnAN8=
Subject key identifier:   E2:BC:3B:78:9A:E7:E6:4B:1A:C6:B6:7E:8B:32:67:8E:DC:BB:E4:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       794CA63C76
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fe/8a31ba-d2a3-46a4-8386-45cfecf199c7/1/4rw7eJrn5ksaxrZ-izJnjty75M4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fe/8a31ba-d2a3-46a4-8386-45cfecf199c7/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:50:08 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 194.156.180.0/22
                          IP: 2a0d:cc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520977005686 (0x794ca63c76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:50:08 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e2bc3b789ae7e64b1ac6b67e8b32678edcbbe4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:47:12:2b:6f:db:40:f5:06:8d:51:74:a0:
                    c9:07:2a:31:f0:c5:e4:76:1d:13:2b:94:ac:a0:c2:
                    5e:b8:24:85:db:e8:ac:eb:79:ea:c3:f7:cf:8f:c2:
                    3e:38:fa:fb:0c:30:10:38:3d:21:7b:c2:d0:d2:ae:
                    20:21:45:ae:ab:19:40:f9:69:16:6d:f8:c5:74:54:
                    7f:42:c4:4b:df:c3:1a:6f:e3:d5:2c:9d:34:62:4a:
                    a7:16:4d:fc:f9:7a:7d:12:e4:e4:30:1e:a7:74:4c:
                    e8:2a:9e:c0:e8:69:75:38:8d:76:5a:5e:b5:d5:b2:
                    16:86:03:52:4e:a8:52:cf:37:58:61:24:3b:34:32:
                    88:76:b6:8b:ac:dd:13:6c:74:e7:f1:93:0d:57:62:
                    67:fa:a8:90:0b:86:1a:ea:07:e7:58:92:cd:8d:66:
                    1d:0f:08:7e:d0:56:fe:8c:93:3e:f2:9e:97:44:5f:
                    b4:92:b1:2a:3e:32:55:14:f6:67:d6:dd:52:a9:6d:
                    13:3a:41:3e:fa:59:d2:b4:6f:af:16:a7:79:23:83:
                    73:c3:91:62:35:e6:c0:66:42:86:3e:78:18:39:09:
                    79:aa:c8:cb:19:eb:59:12:b1:dc:ef:1a:a9:9e:eb:
                    b2:b8:80:c5:bc:45:44:2f:81:d5:e4:b4:5d:d4:93:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BC:3B:78:9A:E7:E6:4B:1A:C6:B6:7E:8B:32:67:8E:DC:BB:E4:CE
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a31ba-d2a3-46a4-8386-45cfecf199c7/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a31ba-d2a3-46a4-8386-45cfecf199c7/1/4rw7eJrn5ksaxrZ-izJnjty75M4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.180.0/22
                IPv6:
                  2a0d:cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:58:35:fe:64:c0:72:96:2e:a8:bb:ba:ec:60:7d:ad:c3:fa:
         e3:2a:46:e2:49:ff:7e:e9:89:66:4f:71:e2:c6:8a:44:6a:1c:
         0e:f8:92:80:fa:a8:19:eb:57:86:4b:cc:2c:c8:c1:96:f1:7b:
         80:55:ec:9e:4f:c7:22:4b:b7:62:d2:5e:1b:fa:d4:f3:25:fc:
         97:48:89:6c:70:29:bb:8e:16:9e:64:eb:62:b2:1e:32:84:9f:
         15:70:64:fa:e9:e7:fe:f0:c8:ac:05:f7:ec:65:f9:46:75:61:
         de:d2:c4:00:e4:91:88:08:04:df:98:09:bd:80:c4:da:3c:44:
         5b:b0:e3:8a:00:04:48:33:03:36:97:b5:93:dd:2f:13:00:a4:
         41:d8:62:a5:42:04:d5:4d:ed:b0:8e:25:54:23:60:48:54:8a:
         78:23:7e:ff:cd:8c:31:66:64:05:c4:36:5c:b1:5c:8d:e8:0a:
         ba:ed:f3:81:6d:a8:8e:36:70:4e:e0:ab:8a:56:42:20:19:1f:
         23:3a:ca:2d:f3:f6:21:80:eb:f3:6c:8f:c5:80:c9:b8:de:65:
         aa:36:76:d7:39:63:d9:6b:ab:07:5c:e2:ef:a1:92:ed:8f:aa:
         02:f9:04:f0:0e:6d:f0:86:cd:b3:44:7f:e3:69:6b:1e:9e:07:
         18:d7:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:05 2023 by rpki-client on console-fra.rpki-client.org