Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5xY0KR-jBxo-SRkOdxqcPUWDv8k.cer
File:                     5xY0KR-jBxo-SRkOdxqcPUWDv8k.cer (raw, json)
Hash identifier:          qX3f6LX61ikep/HLx8NIimC9sV/BbU101vzuNXQqUF4=
Subject key identifier:   E7:16:34:29:1F:A3:07:1A:3E:49:19:0E:77:1A:9C:3D:45:83:BF:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       76DA4470A8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/9c3caf-9bc4-4e7c-b7ac-3079da214221/1/5xY0KR-jBxo-SRkOdxqcPUWDv8k.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/9c3caf-9bc4-4e7c-b7ac-3079da214221/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:37:39 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.157.176.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510468059304 (0x76da4470a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:37:39 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e71634291fa3071a3e49190e771a9c3d4583bfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:19:a7:28:43:e7:f5:a2:21:f2:01:84:ce:
                    49:a4:82:12:2e:a9:7a:e4:6b:5b:ca:6d:59:e2:8b:
                    c7:97:46:99:87:52:26:bb:5e:11:c8:b4:f4:9c:e7:
                    85:b1:cf:86:8c:6a:f0:ea:4c:55:0d:c6:32:85:29:
                    bd:5c:34:aa:c5:64:4a:e4:6f:b2:a5:9e:29:c7:99:
                    70:83:7b:46:25:29:81:d4:6d:e7:62:b9:71:5a:c1:
                    3c:34:a7:ee:59:2b:56:fc:cc:e2:ee:a4:2b:53:82:
                    7b:a5:0c:2e:2d:60:1a:a5:27:2c:f7:88:d2:a7:96:
                    bb:59:3d:be:bd:38:08:e5:d1:f9:a5:19:ab:c8:a2:
                    96:14:13:a9:e3:3f:84:f5:3a:d4:94:e1:b2:d6:7d:
                    d7:bf:ef:f5:b6:83:81:79:6b:bc:74:81:fd:ec:dd:
                    3c:32:f3:ce:1e:07:84:b3:55:51:3c:d4:51:4c:87:
                    4a:e7:8e:2a:84:82:df:4b:4f:30:50:c9:b9:ca:df:
                    07:2e:27:22:41:c9:6e:da:85:d7:8c:4c:69:c9:55:
                    c7:1f:9b:61:28:d3:29:81:50:46:fb:0f:4f:15:25:
                    db:9e:3a:27:0d:56:8e:b1:ec:d7:af:4f:9a:64:d6:
                    14:b0:2c:ad:61:5f:76:71:bb:6e:7c:83:d4:54:74:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:16:34:29:1F:A3:07:1A:3E:49:19:0E:77:1A:9C:3D:45:83:BF:C9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9c3caf-9bc4-4e7c-b7ac-3079da214221/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9c3caf-9bc4-4e7c-b7ac-3079da214221/1/5xY0KR-jBxo-SRkOdxqcPUWDv8k.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:02:ae:d1:d0:05:61:81:53:b1:c4:bd:e6:0d:6c:82:29:4d:
         c7:db:ef:7e:18:d6:18:4e:1d:ee:e8:82:1c:e8:81:7e:9b:0a:
         b5:42:89:ac:84:2a:cb:c5:8d:f3:e0:76:a5:2b:e0:6b:e4:80:
         1d:5e:67:0e:1b:af:f4:33:64:b6:97:d7:f2:a7:65:bd:be:27:
         9d:ee:8b:fd:19:bd:1d:c0:50:06:2e:52:27:f6:f8:9e:60:6d:
         5e:71:5f:af:e7:1f:85:ef:cc:b8:28:9e:a7:cb:b6:e7:6b:06:
         e1:ac:ac:0b:1f:b8:2d:8f:0b:5f:f6:04:d6:7c:4a:5e:8b:b3:
         6b:85:9e:1b:61:cd:e8:b3:cc:4d:b8:ae:0c:5a:32:a4:3a:6a:
         1e:41:7c:b3:ba:47:9a:3f:e3:22:cc:c1:f9:62:4c:24:09:b7:
         1c:0b:37:d5:25:2e:17:df:3c:dd:38:da:a8:e0:c3:f0:a9:b6:
         b9:af:84:36:79:a9:28:a1:81:6e:fe:e5:7f:39:d3:2b:9f:24:
         d8:4e:5f:61:d3:a0:bd:9a:e8:98:50:6b:47:39:83:0e:a8:67:
         5f:38:dd:2f:2e:47:bd:ad:6f:eb:78:1d:da:c8:5b:c4:46:20:
         d3:37:8d:87:1f:a0:3b:d6:a0:1f:19:03:e6:13:1f:aa:b1:63:
         48:c5:ad:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:36 2023 by rpki-client on console-ams.rpki-client.org