Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6XMZ2tNcydWutv17tdjJuGSxfak.cer
File:                     6XMZ2tNcydWutv17tdjJuGSxfak.cer (raw, json)
Hash identifier:          I30ZpFggdFokgnLbjGwkuYUhu0Q2B65ckiFz8ksM3IU=
Subject key identifier:   E9:73:19:DA:D3:5C:C9:D5:AE:B6:FD:7B:B5:D8:C9:B8:64:B1:7D:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9CD332E763
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/6XMZ2tNcydWutv17tdjJuGSxfak.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 03:55:34 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.160.204.0/22
                          IP: 2a07:bfc0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673558226787 (0x9cd332e763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 03:55:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e97319dad35cc9d5aeb6fd7bb5d8c9b864b17da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:3e:f2:c1:e7:6c:d1:9b:88:4e:2a:ed:54:
                    3e:2b:d3:c4:41:8c:e1:fa:a8:ab:ba:74:71:d1:56:
                    a3:90:27:9b:de:0a:5f:83:fe:3f:6a:58:7a:97:0a:
                    24:54:bb:52:52:bf:d4:13:ed:7e:81:27:6e:57:ce:
                    12:d2:0d:2f:9f:4b:ce:cf:78:06:e5:ec:24:4a:dd:
                    47:bc:69:cd:24:09:20:da:6a:ee:5f:b9:fd:b8:f5:
                    b9:08:d5:32:67:4b:b8:9f:24:0b:65:db:48:34:8c:
                    b0:13:09:2e:75:81:37:be:d3:4c:fb:e4:df:ed:1b:
                    2f:36:97:cf:13:f9:ad:13:92:12:1e:e7:0d:7c:37:
                    89:6b:3e:08:ef:7b:45:46:6d:c0:ec:19:f5:ac:4f:
                    bf:4f:78:f0:a1:48:fb:a1:7f:02:58:87:77:58:76:
                    ee:b3:f7:5f:78:a5:09:f1:56:5e:af:6d:bd:59:0f:
                    72:5f:bc:bd:d5:76:49:44:40:f0:c3:ad:39:cf:c6:
                    f6:a9:f9:b8:66:10:0b:5a:06:85:34:e6:d2:af:f7:
                    54:7d:c8:d2:e2:5e:c4:79:35:bc:99:b6:9f:9f:9a:
                    64:26:15:8e:67:0e:0a:a1:e1:62:3b:60:5e:bb:91:
                    42:6a:cd:14:76:2a:3c:a8:b5:bc:b7:3c:72:75:21:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:73:19:DA:D3:5C:C9:D5:AE:B6:FD:7B:B5:D8:C9:B8:64:B1:7D:A9
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/6XMZ2tNcydWutv17tdjJuGSxfak.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.204.0/22
                IPv6:
                  2a07:bfc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:6e:40:97:ee:55:5e:04:bf:7c:db:9f:6e:aa:31:82:14:b9:
         0f:05:3e:21:67:91:d3:b8:fa:53:43:73:78:44:b1:74:ef:d2:
         1e:1f:22:b6:43:b6:df:fa:31:44:3b:86:8e:c8:09:58:b3:bd:
         ec:0f:46:43:f9:0c:5c:5d:1c:43:3d:c4:23:64:87:2e:6f:d0:
         bd:09:53:3f:4b:af:70:06:9b:a0:97:c1:82:34:4e:fc:7b:59:
         32:ce:be:86:8c:1b:8b:25:9f:e8:14:f0:d3:c2:40:3f:3d:2d:
         d2:ce:75:db:32:d6:2a:c0:11:11:5b:06:69:49:0d:a3:6b:c8:
         ed:61:d9:d0:30:03:bf:1c:ea:1d:e3:a2:68:13:a4:69:57:df:
         c8:df:b1:7b:88:de:d5:c5:39:fa:99:c5:06:b3:0d:f5:5a:79:
         fa:b4:1d:43:b1:37:a0:40:da:fc:22:ac:62:25:13:34:3f:60:
         b8:76:c1:b6:76:e4:9b:28:cd:22:f2:1c:89:3f:75:39:64:97:
         fc:28:9b:bb:7a:46:84:65:1a:73:99:ff:e3:41:e7:68:dd:af:
         be:95:31:f5:30:55:3b:0a:5f:e2:d6:db:0b:cb:ef:df:cc:94:
         a5:9a:78:5f:e7:82:57:78:1c:c3:7e:a2:6c:15:b7:47:fd:f2:
         e6:5b:60:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:24 2023 by rpki-client on console-fra.rpki-client.org