Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7flG7rEUesW5P0yJjqeHPalLNJY.cer
File:                     7flG7rEUesW5P0yJjqeHPalLNJY.cer (raw, json)
Hash identifier:          FYCfWW/ePAXx7XpBROsdkKvGUlVLoijyPvQgRIW46ZE=
Subject key identifier:   ED:F9:46:EE:B1:14:7A:C5:B9:3F:4C:89:8E:A7:87:3D:A9:4B:34:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7F773AF671
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/23/00697a-99b0-42c6-9b00-6f5dc4214860/1/7flG7rEUesW5P0yJjqeHPalLNJY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/23/00697a-99b0-42c6-9b00-6f5dc4214860/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 04:19:43 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.10.76.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547461199473 (0x7f773af671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:19:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=edf946eeb1147ac5b93f4c898ea7873da94b3496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:67:de:be:08:b6:71:e6:d0:6c:35:c1:14:
                    5c:6b:87:b3:64:fa:8b:8b:7e:08:97:ca:45:d8:9b:
                    d1:79:c3:67:31:d6:7b:b9:1e:de:b0:8d:f3:36:b3:
                    0e:e3:c2:ed:20:9f:7b:a6:84:2c:62:e8:19:bf:49:
                    f4:f5:34:a6:d8:96:62:24:0b:06:fa:c2:c6:c2:e4:
                    ef:25:5c:08:97:4d:2a:d6:33:0b:4f:61:00:fa:cd:
                    90:88:c8:ec:6b:69:98:d3:73:fa:6b:25:9b:65:9d:
                    d4:2a:35:da:73:9e:20:a7:91:12:0d:5b:33:de:62:
                    21:fd:9e:db:5c:73:92:10:7d:92:c0:34:2d:0f:22:
                    0f:a5:72:5b:62:15:0a:9d:82:b3:f4:a0:5a:bc:76:
                    c9:96:78:43:80:ce:2a:f9:89:6e:b5:dd:2c:18:2f:
                    74:86:16:f6:4b:35:eb:a7:cc:a9:81:b9:42:98:f7:
                    c9:8b:c6:7f:07:8a:94:07:ce:25:66:03:fd:a7:e0:
                    66:5e:ab:6b:bb:b4:a3:df:9b:99:27:67:47:1f:ca:
                    0c:29:08:e6:1f:40:d9:46:94:af:4f:43:f1:48:92:
                    b2:61:88:d8:a3:c6:02:75:08:da:47:35:54:f5:2a:
                    06:21:32:4a:39:b6:d9:1b:7f:3b:c8:cb:81:ba:21:
                    ba:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F9:46:EE:B1:14:7A:C5:B9:3F:4C:89:8E:A7:87:3D:A9:4B:34:96
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/00697a-99b0-42c6-9b00-6f5dc4214860/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/00697a-99b0-42c6-9b00-6f5dc4214860/1/7flG7rEUesW5P0yJjqeHPalLNJY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:ff:bc:eb:22:16:37:06:1e:ff:80:81:84:a7:17:9e:1a:c3:
         4e:c2:29:b1:36:03:a0:74:59:9e:7f:1f:5f:64:b1:39:a1:67:
         88:fe:2e:a0:6c:94:10:9a:e1:7e:60:76:64:e6:3e:a4:84:2b:
         bd:f0:6d:27:9f:47:be:6c:7b:63:c1:c7:01:7d:47:22:a0:08:
         f5:8a:59:97:78:42:a4:72:06:05:e2:dd:d3:8f:8e:40:81:de:
         b2:7a:3f:3c:06:c4:0d:22:5f:88:af:b1:9a:de:84:eb:4b:28:
         e1:c5:27:5d:e6:c4:06:3e:1d:ab:dd:84:39:a9:03:d0:50:78:
         3d:32:47:ec:83:a5:a8:dd:be:9b:d9:cd:07:ab:4c:9e:33:3d:
         8e:9e:98:cf:78:66:57:7b:08:0c:eb:84:f3:c3:a4:a5:c2:2f:
         41:9a:06:74:78:c6:06:a3:51:9d:5f:6e:cd:6c:7a:4f:62:cd:
         9e:2d:7f:4d:98:06:ba:09:93:fc:94:0d:64:3e:03:2e:00:06:
         99:96:26:80:8a:c9:08:53:39:4e:8c:64:fd:2b:9e:f0:47:70:
         ca:50:e1:ab:49:30:9b:c5:f0:bb:e2:c7:9d:a7:eb:79:c5:15:
         62:17:16:e0:02:53:d1:b2:1e:d9:0f:b3:4f:b2:7c:8c:22:1f:
         ad:18:24:e0
-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIFf3c69nEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwNDE5NDNaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGVkZjk0NmVlYjEx
NDdhYzViOTNmNGM4OThlYTc4NzNkYTk0YjM0OTYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXQWfevgi2cebQbDXBFFxrh7Nk+ouLfgiXykXYm9F5w2cx
1nu5Ht6wjfM2sw7jwu0gn3umhCxi6Bm/SfT1NKbYlmIkCwb6wsbC5O8lXAiXTSrW
MwtPYQD6zZCIyOxraZjTc/prJZtlndQqNdpzniCnkRINWzPeYiH9nttcc5IQfZLA
NC0PIg+lcltiFQqdgrP0oFq8dsmWeEOAzir5iW613SwYL3SGFvZLNeunzKmBuUKY
98mLxn8HipQHziVmA/2n4GZeq2u7tKPfm5knZ0cfygwpCOYfQNlGlK9PQ/FIkrJh
iNijxgJ1CNpHNVT1KgYhMko5ttkbfzvIy4G6IbpbAgMBAAGjggKEMIICgDAdBgNV
HQ4EFgQU7flG7rEUesW5P0yJjqeHPalLNJYwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCC
ASMGCCsGAQUFBwELBIIBFTCCAREwXQYIKwYBBQUHMAWGUXJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvMDA2OTdhLTk5YjAtNDJjNi05
YjAwLTZmNWRjNDIxNDg2MC8xLzB8BggrBgEFBQcwCoZwcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMDY5N2EtOTliMC00MmM2LTli
MDAtNmY1ZGM0MjE0ODYwLzEvN2ZsRzdyRVVlc1c1UDB5SmpxZUhQYWxMTkpZLm1m
dDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLnJpcGUubmV0L25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAItCkwwDQYJKoZIhvcNAQELBQADggEBAG7/vOsiFjcGHv+AgYSnF54a
w07CKbE2A6B0WZ5/H19ksTmhZ4j+LqBslBCa4X5gdmTmPqSEK73wbSefR75se2PB
xwF9RyKgCPWKWZd4QqRyBgXi3dOPjkCB3rJ6PzwGxA0iX4ivsZrehOtLKOHFJ13m
xAY+HavdhDmpA9BQeD0yR+yDpajdvpvZzQerTJ4zPY6emM94Zld7CAzrhPPDpKXC
L0GaBnR4xgajUZ1fbs1sek9izZ4tf02YBroJk/yUDWQ+Ay4ABpmWJoCKyQhTOU6M
ZP0rnvBHcMpQ4atJMJvF8Lvix52n63nFFWIXFuACU9GyHtkPs0+yfIwiH60YJOA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:11 2023 by rpki-client on console-ams.rpki-client.org