Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Zt07EQayEgZbAXMzlwk4Q65TXc.cer
File:                     6Zt07EQayEgZbAXMzlwk4Q65TXc.cer (raw, json)
Hash identifier:          Z1ko9x0Sx+EER3PPxpu+DnqBQeOLLolQcOkD97gfA8o=
Subject key identifier:   E9:9B:74:EC:44:1A:C8:48:19:6C:05:CC:CE:5C:24:E1:0E:B9:4D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7A79C28CF0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b7/844fec-71a4-4cac-b719-303a4d367d41/1/6Zt07EQayEgZbAXMzlwk4Q65TXc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b7/844fec-71a4-4cac-b719-303a4d367d41/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:15:32 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.129.12.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526028803312 (0x7a79c28cf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:15:32 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=e99b74ec441ac848196c05ccce5c24e10eb94d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:8a:16:a1:8c:89:1f:d3:eb:c0:a6:03:8e:
                    ab:7b:4b:36:75:a3:06:5a:15:bd:e1:d9:bb:c1:1f:
                    63:92:aa:46:7a:54:a5:c9:20:f8:2a:a8:88:17:2b:
                    4a:9e:3b:73:5e:41:e6:4c:07:99:a5:53:5f:8e:30:
                    ab:e5:38:ee:b2:21:8a:ed:86:1a:28:d2:07:20:c1:
                    8c:cf:cb:45:4a:18:3d:cc:b1:38:cb:e2:f2:06:81:
                    35:42:8f:a7:79:09:b5:89:74:d7:6a:5c:d8:50:78:
                    24:4e:6d:ee:94:b5:e5:ee:df:4d:08:50:91:43:30:
                    f1:77:22:f0:8e:6a:f7:df:70:e8:cb:92:07:c0:41:
                    86:9b:5b:43:20:c9:97:b2:e8:f0:bb:87:4c:8d:ac:
                    c6:c4:96:f3:1b:cf:46:fa:b5:f1:84:9f:a2:a1:7d:
                    06:80:3a:70:bb:8c:0c:8c:b2:18:54:7b:b7:a7:8b:
                    76:c4:56:7f:22:15:bf:bb:5d:0a:7b:85:9b:49:7d:
                    d5:63:5e:7d:c5:34:ff:42:11:9c:22:b8:c5:86:08:
                    5f:ed:74:8c:3c:cd:57:0b:40:d4:f8:fb:47:5d:48:
                    4b:1e:58:d1:70:8b:a7:81:d4:32:24:89:6b:bc:a4:
                    d5:37:c3:e7:02:c2:f2:1d:b9:b8:a5:9e:0f:17:64:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9B:74:EC:44:1A:C8:48:19:6C:05:CC:CE:5C:24:E1:0E:B9:4D:77
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/844fec-71a4-4cac-b719-303a4d367d41/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/844fec-71a4-4cac-b719-303a4d367d41/1/6Zt07EQayEgZbAXMzlwk4Q65TXc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:37:98:f6:8d:88:64:2d:70:9a:27:51:a0:e5:e8:44:5f:
         db:9d:3c:eb:da:1e:d3:81:60:75:d6:b2:e0:32:cb:9b:5e:92:
         77:75:1d:67:c4:98:ae:bc:4c:13:f9:a7:e8:ac:93:95:95:2a:
         04:43:e8:54:c2:1c:4f:16:85:fc:9e:ec:30:0d:e7:5c:9f:3a:
         85:3e:28:e1:2a:fa:f8:c5:fe:64:ce:5c:ed:a1:ea:98:e1:b6:
         3d:45:42:65:d3:81:01:66:82:5f:dc:4d:7f:f3:b4:b6:28:f2:
         72:2c:26:42:31:9c:f6:84:21:73:8a:7a:4c:f2:a9:90:5e:e5:
         12:df:25:65:1c:53:52:3a:bd:0d:7d:a1:5d:69:7f:62:e1:b1:
         03:8e:44:9c:0f:ab:63:53:29:32:12:f6:8c:f2:76:08:3c:d7:
         12:f6:b1:18:57:63:0c:ec:e0:21:74:df:c7:ef:95:e4:f1:e6:
         5b:29:2d:4e:5f:1f:80:ec:58:ab:d8:25:28:6e:c6:02:f2:ae:
         31:c1:6f:7b:1b:1a:81:20:4e:b0:7d:85:ca:92:0c:2f:68:6b:
         f1:d0:dd:09:88:48:8b:06:5e:e1:3e:f4:03:4a:a1:02:ed:6e:
         8f:7f:d3:28:62:c2:27:a0:a5:cc:74:4b:b4:59:13:ca:98:5c:
         99:01:1e:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:24 2023 by rpki-client on console-fra.rpki-client.org