Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5E9o8bHdkEx9xWlnin3FdFWaADo.cer
File:                     5E9o8bHdkEx9xWlnin3FdFWaADo.cer (raw, json)
Hash identifier:          XNAgLmQIiiJYrkn8tBNljddPyTobyzcE/lmSEjXx69c=
Subject key identifier:   E4:4F:68:F1:B1:DD:90:4C:7D:C5:69:67:8A:7D:C5:74:55:9A:00:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       771003E843
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki1.terratransit.de/repo/TerraTransit/98/E44F68F1B1DD904C7DC569678A7DC574559A003A.mft
caRepository:             rsync://rpki1.terratransit.de/repo/TerraTransit/98/
Notify URL:               https://rpki1.terratransit.de/rrdp/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:42:14 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.14.192.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511369799747 (0x771003e843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:42:14 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e44f68f1b1dd904c7dc569678a7dc574559a003a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:b1:3c:38:af:da:6e:7a:0c:e2:a7:09:b6:
                    53:54:f0:e1:47:f9:40:82:19:32:c3:69:d9:61:83:
                    29:07:8a:df:21:b5:70:7f:fd:ba:63:a3:9f:bb:d9:
                    e2:25:eb:37:8a:66:9f:8e:c4:c6:db:ca:8d:d0:92:
                    0f:c1:d1:09:94:d7:28:9b:21:5d:f5:de:24:4e:9d:
                    e9:82:96:3c:f7:4c:d6:d3:14:f5:cb:d1:1c:2d:b4:
                    f3:6f:dd:53:5a:fa:f6:06:5d:64:6d:4c:82:b6:8e:
                    bc:0e:a4:3e:3d:67:e6:47:28:74:c5:1f:9d:0f:5b:
                    c7:5e:23:fb:4c:8e:06:92:4a:a6:1a:a1:57:fd:04:
                    c5:d5:14:ce:4b:76:bf:97:4f:7e:fd:27:21:2a:50:
                    ce:8b:a7:03:9a:02:4b:64:2d:4c:ac:d3:6d:04:59:
                    6b:06:77:a8:40:da:a9:a4:f5:df:dd:bf:1a:d1:03:
                    f9:b8:55:ba:bc:9f:37:61:e2:96:45:70:b4:97:16:
                    df:06:08:d7:99:18:3d:83:14:8c:f9:14:91:c8:f2:
                    ca:32:5c:65:9b:4b:3c:df:92:7c:e1:48:f9:eb:72:
                    fc:e6:78:79:d6:bc:ff:3b:0b:bb:55:95:a7:23:91:
                    8b:99:6e:d3:99:3c:3e:41:c0:50:44:d5:8d:6a:4e:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4F:68:F1:B1:DD:90:4C:7D:C5:69:67:8A:7D:C5:74:55:9A:00:3A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/98/
                RPKI Manifest - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/98/E44F68F1B1DD904C7DC569678A7DC574559A003A.mft
                RPKI Notify - URI:https://rpki1.terratransit.de/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:a6:d9:9a:df:67:f4:75:f7:4f:63:45:8e:21:f1:e0:c3:
         21:b9:8e:35:ae:79:54:17:38:aa:ea:d2:cc:f0:8f:29:c4:fc:
         3e:cd:3c:5c:f1:0e:cb:07:6f:b3:13:e2:2d:56:46:9c:b7:dc:
         18:e3:17:03:ef:b8:49:d3:dc:48:30:c9:cb:03:76:ba:96:d4:
         df:3e:9d:2a:6d:a9:f5:44:81:29:6b:03:80:55:3c:29:27:74:
         f1:96:4b:bc:33:f8:7c:fc:f0:61:15:d5:9c:9c:46:95:fc:0c:
         5e:c4:b9:8a:e2:d3:30:0b:85:1e:6f:26:ac:d1:71:2e:2c:84:
         58:ea:80:10:39:69:8f:0b:4f:96:ff:c8:43:b0:c4:a2:f9:18:
         f0:81:12:22:30:73:0f:80:ae:fa:ee:82:c3:1c:0e:5b:4b:9b:
         d4:08:a3:82:50:20:d4:56:f6:47:2b:6b:b0:42:c3:9a:cf:5c:
         14:4f:eb:38:16:e1:d4:c9:17:03:78:62:d0:8a:52:da:79:42:
         90:8e:94:64:81:26:f5:19:06:b4:33:17:35:cf:17:9f:df:7e:
         64:44:e1:0d:ba:5a:ad:5d:f6:ab:65:26:29:21:bf:6e:22:bb:
         b8:63:c8:93:9e:4b:75:43:f8:82:f1:a7:97:1d:80:37:e0:87:
         05:69:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:48 2023 by rpki-client on console-fra.rpki-client.org