Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70dMQBqqISadjlRQ6KNGaLbPCWA.cer
File:                     70dMQBqqISadjlRQ6KNGaLbPCWA.cer (raw, json)
Hash identifier:          IFbJFlUmC03FS9lwHF8XOncFRzzJyUaD17Vs1RMyqW8=
Subject key identifier:   EF:47:4C:40:1A:AA:21:26:9D:8E:54:50:E8:A3:46:68:B6:CF:09:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       82FBC45CB7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/39/030fea-1eae-4933-afde-a2cf1456c9e3/1/70dMQBqqISadjlRQ6KNGaLbPCWA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/39/030fea-1eae-4933-afde-a2cf1456c9e3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:56:51 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.129.56.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562569698487 (0x82fbc45cb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:56:51 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=ef474c401aaa21269d8e5450e8a34668b6cf0960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:b4:4d:cb:d7:79:76:8a:54:ec:cc:22:fb:
                    ec:c2:39:92:2d:fd:ed:67:cd:43:b3:05:db:82:d2:
                    c9:c7:da:42:09:1f:db:1e:c6:21:73:6d:74:5a:ba:
                    41:e5:f2:3f:35:72:c8:d1:92:be:de:25:4b:f7:d8:
                    ab:1e:c8:9f:0c:c1:e6:a3:8c:1c:cd:6b:1a:58:40:
                    93:26:39:f4:b7:8d:9b:a8:a7:81:cc:b0:14:9c:f0:
                    5f:56:33:85:87:6a:ac:7f:62:dc:d4:2e:e5:62:d8:
                    9c:e2:33:e5:a7:f8:d5:d2:a2:11:90:73:7d:14:4d:
                    93:af:56:bd:3b:7e:94:2b:ff:09:df:84:f2:1e:d4:
                    7c:4a:b3:f4:ad:3d:49:93:72:37:c5:54:39:ce:8b:
                    46:22:ba:e8:70:fe:a8:60:ad:91:d5:25:be:9a:55:
                    27:77:70:72:ae:0d:c5:e6:8b:0d:66:4e:a0:1d:a7:
                    f1:70:5d:31:36:46:18:47:6e:29:2d:df:17:fb:5f:
                    10:5f:7e:24:d6:fb:00:8f:bd:fd:bd:65:f6:9d:af:
                    ff:ed:a3:32:74:99:e0:bb:d7:68:a1:b4:1c:ac:0a:
                    cf:1f:20:50:b6:fc:b2:23:c2:4a:2e:83:74:4c:f1:
                    74:f5:e6:15:f6:40:02:a8:23:a7:78:a1:c2:30:33:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:47:4C:40:1A:AA:21:26:9D:8E:54:50:E8:A3:46:68:B6:CF:09:60
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/030fea-1eae-4933-afde-a2cf1456c9e3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/030fea-1eae-4933-afde-a2cf1456c9e3/1/70dMQBqqISadjlRQ6KNGaLbPCWA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:36:70:59:1f:72:05:11:a0:53:7b:e6:78:0b:53:98:c0:eb:
         9f:17:6e:30:d7:77:06:44:7b:33:4e:8d:c0:2d:95:38:ab:49:
         cf:6e:8c:21:20:27:db:37:50:7c:dc:6f:96:75:22:ba:43:cc:
         c9:f1:aa:ed:70:81:bd:28:33:c6:59:c4:ee:41:d6:ab:3c:28:
         4f:68:f6:7a:98:b3:58:ec:da:fe:33:36:b7:15:2b:27:7a:fc:
         cc:b9:65:cb:20:bc:ee:59:4e:8f:2d:e5:fa:d5:26:7f:d5:a8:
         27:f9:fa:4d:8b:d5:14:31:2b:2e:71:89:48:f9:f2:8b:f2:1b:
         43:9e:92:b2:b0:38:f2:1a:01:8f:8b:6b:9d:f1:50:f4:36:29:
         19:ee:bd:c7:bc:10:66:41:3c:f5:c6:5d:4a:d1:25:3f:a4:68:
         30:30:06:79:3c:f8:87:4b:c9:74:78:d4:33:d7:08:c4:06:df:
         d5:93:c2:de:f8:d8:1f:69:4e:cc:a4:8e:4f:6a:48:d3:b8:8e:
         61:34:2f:5e:0d:e5:fe:ee:04:b8:9d:56:c4:0b:45:57:29:f2:
         08:4e:79:28:c9:86:d4:ef:32:85:df:06:5a:0b:48:5a:a2:75:
         0c:c1:fd:76:f1:07:03:fe:a1:6a:b9:b9:f5:ca:08:03:8e:19:
         a8:9c:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:48 2023 by rpki-client on console-fra.rpki-client.org