Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75DTc_o8iHdhomnS3Ox7jyyxfto.cer
File:                     75DTc_o8iHdhomnS3Ox7jyyxfto.cer (raw, json)
Hash identifier:          cGhbVKnpwbXedlB9OkY/ojEq1hZbG2fR2Mrp1mRFO2w=
Subject key identifier:   EF:90:D3:73:FA:3C:88:77:61:A2:69:D2:DC:EC:7B:8F:2C:B1:7E:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0182D94742BF2879B3F345F7CF834FD37780
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0c/78cec4-4d13-4e9d-b6b9-4afce0c9ab7a/1/75DTc_o8iHdhomnS3Ox7jyyxfto.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0c/78cec4-4d13-4e9d-b6b9-4afce0c9ab7a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 26 Aug 2022 08:31:42 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 209984
                          IP: 2a0c:1380::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d9:47:42:bf:28:79:b3:f3:45:f7:cf:83:4f:d3:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 26 08:31:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef90d373fa3c887761a269d2dcec7b8f2cb17eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:62:0c:5a:db:39:55:22:d8:46:51:ed:6c:
                    ee:77:4b:77:db:00:9b:40:5a:a4:e6:4e:6d:c8:e2:
                    b0:0e:b8:88:d2:36:14:9c:d6:ea:37:59:d1:fb:30:
                    a7:23:c1:f3:7e:3b:32:ae:e3:54:5d:ec:93:e1:69:
                    0e:02:af:aa:1d:dd:48:5f:44:ca:8f:db:9c:3d:54:
                    e4:89:ef:6c:93:aa:e9:96:cc:31:0b:db:21:1a:92:
                    f7:3f:05:0e:62:b4:e7:3a:83:7b:db:5f:81:71:f8:
                    24:c5:7e:bd:57:02:0f:32:ba:fc:d4:be:57:47:38:
                    08:5a:d4:4c:c8:9f:ed:c5:43:21:b9:c2:2b:7c:b9:
                    c5:ed:59:0a:78:fb:23:32:75:cf:20:e3:34:76:e0:
                    63:0e:fb:c4:99:4d:47:33:23:0c:03:f1:c1:51:b0:
                    70:ef:0a:83:16:f3:ce:5b:6f:41:ab:bc:b6:cc:3b:
                    df:71:e9:56:64:10:7d:12:e8:80:f3:90:b7:55:41:
                    49:8e:38:b7:3e:0f:9e:d6:14:de:e2:6e:83:e3:55:
                    5d:09:54:63:6d:5c:ca:48:1b:dd:4d:0c:a7:c5:46:
                    60:37:a0:fc:cc:5b:f0:a9:90:29:66:78:2a:da:44:
                    e9:d7:62:12:c6:d4:06:ae:08:aa:24:46:dd:fe:ca:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:90:D3:73:FA:3C:88:77:61:A2:69:D2:DC:EC:7B:8F:2C:B1:7E:DA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/78cec4-4d13-4e9d-b6b9-4afce0c9ab7a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/78cec4-4d13-4e9d-b6b9-4afce0c9ab7a/1/75DTc_o8iHdhomnS3Ox7jyyxfto.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:1380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209984

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:d2:57:f6:2d:02:ab:64:1f:1f:b4:8e:2f:78:81:c7:0c:
         02:ce:7e:5e:29:3e:a3:fe:ef:b4:b8:e8:40:40:31:17:0a:9e:
         48:69:eb:3c:ac:53:f1:eb:b8:54:48:ac:5b:14:0d:de:c0:cb:
         81:f4:b8:65:0b:3f:57:d5:41:0e:b6:25:57:95:34:5f:eb:ec:
         32:58:62:b1:9f:4b:05:80:b4:3a:11:1b:a0:e3:1b:64:0f:72:
         6e:15:6a:07:79:cd:b9:54:66:c1:50:f1:6a:4d:cb:6d:16:2a:
         31:20:0a:87:58:e4:59:50:5a:37:a4:5c:22:80:64:19:c1:81:
         51:b4:39:f4:1f:c8:1a:4b:b1:17:7e:6a:6c:d1:0d:8f:60:79:
         60:3a:47:a2:1a:1b:03:95:a7:0a:bb:58:b0:4e:94:95:da:94:
         76:a0:0a:e1:a2:7c:90:02:8a:68:b7:46:4c:37:54:8f:55:88:
         24:2f:14:97:cc:69:df:4f:13:75:27:99:6a:97:3f:ae:f3:d2:
         d0:bb:43:00:d3:0a:78:92:1c:77:5e:f9:26:9e:02:b5:26:4c:
         dd:91:eb:84:6d:2a:ad:e6:f5:c5:6f:cf:96:f2:01:a2:9e:74:
         c2:c4:b5:91:7c:44:3a:6b:8d:2a:a2:1d:fb:b9:d0:a1:4d:02:
         cd:94:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:03 2023 by rpki-client on console-fra.rpki-client.org