Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ySffm-om5yGltcVvjsyRB_VayM.cer
File:                     4ySffm-om5yGltcVvjsyRB_VayM.cer (raw, json)
Hash identifier:          MfWiiHZdS1W7OpRFiK1jgeXuPPUBL+hQuOl4pEUV0q4=
Subject key identifier:   E3:24:9F:7E:6F:A8:9B:9C:86:96:D7:15:BE:3B:32:44:1F:D5:6B:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       98B186F676
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/10/E3249F7E6FA89B9C8696D715BE3B32441FD56B23.mft
caRepository:             rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/10
Notify URL:               https://rpki.e15f.net/rrdp/notification.xml
Certificate not before:   Sat 01 Jan 2022 00:00:32 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 194.45.101.0/24
                          IP: 2a12:8d00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655813441142 (0x98b186f676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:00:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3249f7e6fa89b9c8696d715be3b32441fd56b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:94:8d:9f:dd:c3:e8:cd:d4:34:cf:9f:8f:
                    92:f3:e3:a7:7f:f7:4c:39:80:bd:4f:66:a9:94:09:
                    8e:66:21:8d:01:ef:83:b7:4e:18:d6:77:76:1f:1e:
                    53:55:01:c4:e5:56:d3:32:23:5c:c0:6f:4a:20:a8:
                    89:4a:93:14:6f:ad:6a:f7:5e:05:11:ce:f6:f4:23:
                    41:a5:d0:71:55:57:b4:10:07:66:60:ae:7f:7c:aa:
                    4c:e7:2d:ba:47:7a:88:47:30:2f:24:d4:ce:90:89:
                    1a:2f:69:f9:a4:84:6d:e5:b2:70:a3:d7:3f:c2:5e:
                    bc:4c:8b:8f:a7:03:4f:83:b5:02:09:07:44:59:25:
                    ef:f5:a1:e5:89:f9:73:6b:35:33:4a:66:29:3d:f2:
                    0b:b1:70:27:32:75:b7:28:cf:b9:c7:6f:eb:e5:2d:
                    95:e2:c7:9f:53:d3:a3:63:08:58:19:f7:ac:96:0e:
                    a4:8a:3f:63:68:8d:86:2b:50:f1:4b:55:66:23:07:
                    69:3a:d6:9b:97:4d:00:5c:93:63:3a:d6:b1:46:29:
                    a9:54:66:5d:06:34:0a:20:6f:e4:12:5e:c9:1c:59:
                    19:0f:94:72:56:46:c9:61:fa:2c:58:1c:f5:f0:f9:
                    21:bb:ae:99:3c:09:bf:2b:bc:86:ad:0d:0e:92:56:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:9F:7E:6F:A8:9B:9C:86:96:D7:15:BE:3B:32:44:1F:D5:6B:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/10
                RPKI Manifest - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/10/E3249F7E6FA89B9C8696D715BE3B32441FD56B23.mft
                RPKI Notify - URI:https://rpki.e15f.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.45.101.0/24
                IPv6:
                  2a12:8d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         86:db:21:87:61:c5:d2:d8:21:67:0f:bd:78:20:ea:d4:e1:b1:
         0a:e3:fa:78:22:a8:b5:23:a4:39:77:cf:e4:1e:48:2e:b4:cd:
         97:b5:35:78:35:a6:eb:8c:ba:4b:1d:86:38:67:92:d0:1d:39:
         f5:2e:4f:9c:27:44:cc:95:2f:3b:af:49:4d:6a:35:1c:06:5b:
         33:3f:1b:09:04:7b:43:2e:01:22:93:d2:59:f4:42:a5:4d:7b:
         4e:39:78:8e:77:7f:94:87:0f:dc:94:a4:cd:22:97:84:52:f9:
         95:fb:17:9b:e2:0e:08:1a:1d:05:bf:fe:9c:53:9a:49:16:60:
         88:04:e4:e7:bb:f2:ae:5f:f8:d2:0e:79:32:77:92:8b:c3:f4:
         46:9d:71:17:24:c3:62:bc:2d:97:be:5d:24:56:cf:05:56:7c:
         6b:63:74:72:3f:8e:15:cc:37:f1:3e:b2:41:b7:bc:45:7a:ec:
         c1:89:15:ed:08:13:d4:5a:c7:cb:c7:8d:e2:a8:0e:03:1b:a7:
         1d:39:a1:46:a3:a5:e6:00:81:41:1f:c8:28:fd:cb:f1:df:e7:
         9e:97:5b:2b:15:36:59:67:bb:d3:c4:59:e0:68:e6:55:e7:bd:
         06:c5:ba:a6:5b:15:1a:5b:0b:c5:94:14:ae:02:a2:51:27:3f:
         b7:f8:30:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIGAJixhvZ2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDAwMDMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMzI0OWY3ZTZm
YTg5YjljODY5NmQ3MTViZTNiMzI0NDFmZDU2YjIzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA1GqUjZ/dw+jN1DTPn4+S8+Onf/dMOYC9T2aplAmOZiGN
Ae+Dt04Y1nd2Hx5TVQHE5VbTMiNcwG9KIKiJSpMUb61q914FEc729CNBpdBxVVe0
EAdmYK5/fKpM5y26R3qIRzAvJNTOkIkaL2n5pIRt5bJwo9c/wl68TIuPpwNPg7UC
CQdEWSXv9aHliflzazUzSmYpPfILsXAnMnW3KM+5x2/r5S2V4sefU9OjYwhYGfes
lg6kij9jaI2GK1DxS1VmIwdpOtabl00AXJNjOtaxRimpVGZdBjQKIG/kEl7JHFkZ
D5RyVkbJYfosWBz18Pkhu66ZPAm/K7yGrQ0OklaqqQIDAQABo4ICXzCCAlswHQYD
VR0OBBYEFOMkn35vqJuchpbXFb47MkQf1WsjMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
gfAGCCsGAQUFBwELBIHjMIHgMDsGCCsGAQUFBzAFhi9yc3luYzovL3Jwa2ktcnN5
bmMuZTE1Zi5uZXQvcmVwby9NSVNBS0EtUlBLSS8xMDBoBggrBgEFBQcwCoZccnN5
bmM6Ly9ycGtpLXJzeW5jLmUxNWYubmV0L3JlcG8vTUlTQUtBLVJQS0kvMTAvRTMy
NDlGN0U2RkE4OUI5Qzg2OTZENzE1QkUzQjMyNDQxRkQ1NkIyMy5tZnQwNwYIKwYB
BQUHMA2GK2h0dHBzOi8vcnBraS5lMTVmLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54
bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgAB
MAYDBADCLWUwDQQCAAIwBwMFAyoSjQAwDQYJKoZIhvcNAQELBQADggEBAIbbIYdh
xdLYIWcPvXgg6tThsQrj+ngiqLUjpDl3z+QeSC60zZe1NXg1puuMuksdhjhnktAd
OfUuT5wnRMyVLzuvSU1qNRwGWzM/GwkEe0MuASKT0ln0QqVNe045eI53f5SHD9yU
pM0il4RS+ZX7F5viDggaHQW//pxTmkkWYIgE5Oe78q5f+NIOeTJ3kovD9EadcRck
w2K8LZe+XSRWzwVWfGtjdHI/jhXMN/E+skG3vEV67MGJFe0IE9Rax8vHjeKoDgMb
px05oUajpeYAgUEfyCj9y/Hf556XWysVNllnu9PEWeBo5lXnvQbFuqZbFRpbC8WU
FK4ColEnP7f4MOc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:49 2023 by rpki-client on console-ams.rpki-client.org