Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6AUn8if-WuL1fompRgzCaikuF3o.cer
File:                     6AUn8if-WuL1fompRgzCaikuF3o.cer (raw, json)
Hash identifier:          mWXzKIZuHnnxn8ZtwhV7zeDpa/2xWOf/goXI60geVk4=
Subject key identifier:   E8:05:27:F2:27:FE:5A:E2:F5:7E:89:A9:46:0C:C2:6A:29:2E:17:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       755EBCE031
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/f150ff-3314-4541-95bd-9e6030b5f54e/1/6AUn8if-WuL1fompRgzCaikuF3o.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/f150ff-3314-4541-95bd-9e6030b5f54e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:04:12 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.135.220.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504100610097 (0x755ebce031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:04:12 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e80527f227fe5ae2f57e89a9460cc26a292e177a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:34:ae:e7:75:42:d3:8e:84:58:59:b5:fd:e8:
                    fe:72:98:7f:68:0a:bb:ae:20:ba:cf:a5:f5:7c:73:
                    df:93:0a:53:d8:96:f2:ba:f5:3f:eb:4d:dd:5f:97:
                    00:4a:00:9d:09:5e:20:a4:db:5d:72:ab:f9:1c:83:
                    1f:40:1b:70:89:9d:f4:80:57:90:c6:34:f6:16:f1:
                    0b:08:8c:5a:f7:48:5d:96:b4:41:6d:04:b4:d7:61:
                    0c:7b:d9:1f:b3:9f:41:bd:55:0e:1d:ce:b5:7c:32:
                    11:75:16:e1:4a:aa:82:3f:69:98:8f:b2:c8:59:02:
                    0a:3f:e9:ae:25:7b:c4:c8:b6:22:fa:f0:d5:fb:51:
                    c7:c7:9e:82:31:34:e8:49:f5:fc:eb:65:da:85:3a:
                    49:ce:b7:b5:ba:db:6f:03:ff:47:1c:11:2e:a2:a1:
                    4a:2f:a9:b0:19:6d:28:30:d8:36:c9:3e:8a:fe:cb:
                    d8:c4:ea:78:71:b6:53:e0:d6:16:e8:9a:95:a6:5b:
                    62:4a:64:cc:47:c2:52:82:47:62:22:b3:71:56:bf:
                    58:2c:3b:64:22:03:12:ea:94:0e:fc:ca:63:c9:5a:
                    21:6c:7a:7c:99:53:9a:c8:41:28:ca:86:e7:0a:98:
                    01:d8:15:66:d5:f7:92:ae:f4:7c:80:5a:3f:aa:33:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:05:27:F2:27:FE:5A:E2:F5:7E:89:A9:46:0C:C2:6A:29:2E:17:7A
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f150ff-3314-4541-95bd-9e6030b5f54e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f150ff-3314-4541-95bd-9e6030b5f54e/1/6AUn8if-WuL1fompRgzCaikuF3o.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:e0:45:70:e2:50:78:be:9e:24:3a:13:d3:b7:ef:f1:06:
         f5:96:58:6c:56:13:b9:e9:e0:ca:b1:97:06:2b:bc:e2:9e:89:
         53:14:ca:ef:2e:b4:8e:46:56:e7:0b:da:af:6a:3b:db:ee:fc:
         b4:ec:92:c8:40:48:04:2f:c3:ed:61:cd:8e:63:9d:61:89:d9:
         3f:27:06:35:f1:4f:30:f3:5b:9c:3d:bf:73:5a:b9:88:dc:12:
         47:d7:65:1d:45:65:e7:f1:a2:c3:33:fe:46:ec:7d:b3:12:0c:
         75:dc:c6:5f:53:9e:ab:dd:d5:57:1a:90:50:db:c5:f3:3d:6f:
         0a:a6:8d:24:24:c4:af:ed:e4:01:09:cd:08:de:85:24:8d:ab:
         a7:a4:ba:cb:a8:d6:67:2a:dd:52:cf:ac:74:bc:1b:96:7c:e0:
         85:88:b9:3d:2f:3e:63:2d:9f:1f:0f:9b:b4:29:e4:a7:c8:18:
         4f:0d:c0:7b:b9:c6:af:52:4a:5e:b6:11:f8:a1:7e:70:f5:65:
         63:f0:58:30:d8:31:b0:4f:46:d7:c1:53:55:51:a5:84:b4:f3:
         f1:68:fa:98:8a:bf:e0:b1:55:b6:27:bb:15:cf:41:d9:c3:5a:
         62:68:1a:5c:74:32:a2:f6:1a:ff:5d:70:c6:33:e9:78:af:a5:
         de:6a:fb:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:23 2023 by rpki-client on console-fra.rpki-client.org