Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6zSKS9YkCdyKnN7zPV80wzTAsVY.cer
File:                     6zSKS9YkCdyKnN7zPV80wzTAsVY.cer (raw, json)
Hash identifier:          VKw/xk62PB3lCIkS8b4ffB7XD8EXrN9AxNbN0Q7ckBg=
Subject key identifier:   EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       98BCF4F084
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft
caRepository:             rsync://rpki.roa.net/rrdp/xTom/31
Notify URL:               https://rpki.roa.net/rrdp/notification.xml
Certificate not before:   Sat 01 Jan 2022 00:01:43 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.142.164.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656005197956 (0x98bcf4f084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:01:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb348a4bd62409dc8a9cdef33d5f34c334c0b156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4d:d1:3f:67:d4:3e:3e:5a:5d:7a:4c:23:62:
                    26:3e:a5:c2:1f:a3:0d:db:b5:d9:59:05:4f:ba:37:
                    77:47:56:7a:4c:ff:9c:3e:0b:76:e2:e9:70:97:90:
                    a7:97:22:f1:b7:9b:00:96:8f:bf:a9:2e:96:90:03:
                    f6:6c:fb:40:db:8b:23:dc:dc:0a:4f:54:c6:90:f4:
                    c5:de:f8:a1:da:c7:d5:28:25:de:43:75:f8:81:5a:
                    4b:95:ed:a9:e9:c3:f8:ab:39:61:71:3a:fd:e2:02:
                    d5:89:88:cd:f1:f9:82:1a:a1:03:19:d9:3d:95:21:
                    7b:f7:01:03:56:46:70:03:15:7d:a3:17:e0:db:a2:
                    40:5c:80:c5:5c:73:37:7d:9e:63:00:47:a0:ab:8d:
                    68:83:eb:ac:c0:0b:16:f1:9e:b0:0c:2e:26:09:5f:
                    60:ae:b6:6a:2e:34:89:34:f3:e6:4f:ab:fe:6e:a4:
                    3a:d0:1c:bf:fb:0a:92:ed:1a:c6:3a:e0:f6:1b:0e:
                    2b:6e:e6:b4:b4:d5:15:5f:b7:cb:86:d6:61:a0:b1:
                    d1:5f:2b:3e:58:c4:06:c2:eb:fe:b0:39:a3:83:e8:
                    e8:9d:a9:bf:fa:1e:20:ac:fa:8b:8e:6e:8b:46:a7:
                    9d:76:0c:19:f6:06:d8:bd:6a:3e:66:49:dc:1b:83:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:8A:4B:D6:24:09:DC:8A:9C:DE:F3:3D:5F:34:C3:34:C0:B1:56
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/31
                RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/31/EB348A4BD62409DC8A9CDEF33D5F34C334C0B156.mft
                RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:4f:d3:c0:b7:55:7a:f1:1e:cb:2e:3e:13:33:92:6c:8d:
         8e:3d:21:46:a0:4b:5a:2f:97:d1:1d:5d:4d:06:f4:50:f8:af:
         c4:2b:df:43:08:83:4b:25:6c:a5:44:a8:ce:2f:ec:4e:49:7a:
         52:da:cc:98:bf:91:cc:00:c2:98:29:e0:fa:8b:04:ef:3b:ca:
         fd:89:35:b5:70:d4:e2:f7:1e:0a:36:ae:58:6d:e1:a8:ae:68:
         04:70:4e:ca:86:ff:35:2a:40:e0:2c:30:e0:84:77:72:74:98:
         59:23:25:c0:34:2b:09:d3:68:25:51:28:9b:e3:a2:30:09:36:
         18:b4:88:85:50:27:07:9b:73:df:a7:de:68:01:59:07:bc:cd:
         db:f2:5e:55:88:bc:cd:66:7b:99:f0:9c:50:4f:a9:53:89:b1:
         e6:41:d7:fa:9c:8b:e2:2c:c4:7e:2f:8c:ad:87:eb:c3:20:cf:
         11:17:65:59:16:57:a0:5e:dc:86:9e:53:a5:c8:d1:db:07:6f:
         a1:e3:91:c4:dd:9f:a1:7a:98:cf:d3:96:9f:25:cf:d9:d4:a2:
         91:40:4f:10:ea:7f:e4:c5:78:28:ee:ae:40:af:3e:8b:8d:b6:
         94:94:d1:63:72:e6:46:9b:50:11:e3:25:34:f9:8d:98:53:55:
         73:22:45:45
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIGAJi89PCEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDAwMTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlYjM0OGE0YmQ2
MjQwOWRjOGE5Y2RlZjMzZDVmMzRjMzM0YzBiMTU2MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA8E3RP2fUPj5aXXpMI2ImPqXCH6MN27XZWQVPujd3R1Z6
TP+cPgt24ulwl5CnlyLxt5sAlo+/qS6WkAP2bPtA24sj3NwKT1TGkPTF3vih2sfV
KCXeQ3X4gVpLle2p6cP4qzlhcTr94gLViYjN8fmCGqEDGdk9lSF79wEDVkZwAxV9
oxfg26JAXIDFXHM3fZ5jAEegq41og+uswAsW8Z6wDC4mCV9grrZqLjSJNPPmT6v+
bqQ60By/+wqS7RrGOuD2Gw4rbua0tNUVX7fLhtZhoLHRXys+WMQGwuv+sDmjg+jo
nam/+h4grPqLjm6LRqeddgwZ9gbYvWo+ZkncG4OzZwIDAQABo4ICMzCCAi8wHQYD
VR0OBBYEFOs0ikvWJAncipze8z1fNMM0wLFWMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
gdMGCCsGAQUFBwELBIHGMIHDMC0GCCsGAQUFBzAFhiFyc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vMzEwWgYIKwYBBQUHMAqGTnJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS8zMS9FQjM0OEE0QkQ2MjQwOURDOEE5Q0RFRjMzRDVGMzRD
MzM0QzBCMTU2Lm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycGtpLnJvYS5uZXQv
cnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8v
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpu
SEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY6kMA0GCSqGSIb3DQEBCwUAA4IBAQAT
j0/TwLdVevEeyy4+EzOSbI2OPSFGoEtaL5fRHV1NBvRQ+K/EK99DCINLJWylRKjO
L+xOSXpS2syYv5HMAMKYKeD6iwTvO8r9iTW1cNTi9x4KNq5YbeGormgEcE7Khv81
KkDgLDDghHdydJhZIyXANCsJ02glUSib46IwCTYYtIiFUCcHm3Pfp95oAVkHvM3b
8l5ViLzNZnuZ8JxQT6lTibHmQdf6nIviLMR+L4yth+vDIM8RF2VZFlegXtyGnlOl
yNHbB2+h45HE3Z+hepjP05afJc/Z1KKRQE8Q6n/kxXgo7q5Arz6LjbaUlNFjcuZG
m1AR4yU0+Y2YU1VzIkVF
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:41 2023 by rpki-client on console-fra.rpki-client.org