Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7m-Hk7Blsi9dvGU8evHeVtpLah8.cer
File:                     7m-Hk7Blsi9dvGU8evHeVtpLah8.cer (raw, json)
Hash identifier:          xWlJxo+TDswP49wX2CYk7yZkWaZ6JRdGakTLCedLm18=
Subject key identifier:   EE:6F:87:93:B0:65:B2:2F:5D:BC:65:3C:7A:F1:DE:56:DA:4B:6A:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01834187D7A02DF55F7288E43F8B5EC4A710
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/7m-Hk7Blsi9dvGU8evHeVtpLah8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 15 Sep 2022 14:22:45 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a01:6580::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:41:87:d7:a0:2d:f5:5f:72:88:e4:3f:8b:5e:c4:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 15 14:22:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee6f8793b065b22f5dbc653c7af1de56da4b6a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:cd:a1:8e:47:20:31:23:df:98:57:1a:65:
                    96:ca:b6:36:46:1b:46:59:cb:a9:3d:ef:18:7d:ca:
                    62:29:c0:8b:73:b1:cc:eb:3d:36:a6:db:ab:36:4d:
                    55:bb:fa:76:c2:70:43:46:85:2d:4e:a4:7f:1a:59:
                    c8:27:fa:ad:b4:a2:43:3f:0a:84:99:e8:1b:78:4c:
                    b3:f1:b1:1c:ce:15:80:22:6c:d6:09:17:7b:b1:b1:
                    e8:65:0b:ff:ff:56:fe:4f:66:72:8a:7c:17:a9:04:
                    63:47:7b:e7:09:56:e8:e3:6c:f0:54:fb:7b:54:40:
                    2a:00:fe:70:40:0f:33:9f:be:36:9e:9f:ab:87:60:
                    45:a0:49:8c:56:87:34:8c:65:1b:ee:9c:c0:ef:fc:
                    9e:3e:e9:3e:c5:d0:27:e9:6a:f8:eb:f8:75:11:01:
                    e7:46:e2:52:1d:5e:f0:a1:97:c7:89:c2:c8:81:60:
                    36:d5:55:6d:1f:f4:65:40:46:4a:b4:50:a3:67:47:
                    d9:25:dd:12:ff:90:92:35:99:4f:e1:3d:b2:82:be:
                    ca:59:2a:19:64:b9:ff:98:2c:ae:7e:0b:6e:8d:41:
                    19:63:df:97:52:61:3e:d2:d7:37:c4:25:52:0f:fe:
                    c2:a9:b4:7a:fe:91:cc:3c:c2:77:ad:0c:78:23:9e:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6F:87:93:B0:65:B2:2F:5D:BC:65:3C:7A:F1:DE:56:DA:4B:6A:1F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/7m-Hk7Blsi9dvGU8evHeVtpLah8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6580::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:05:44:8a:52:8e:6e:72:3c:09:5d:9f:5a:be:11:a4:0b:b2:
         6f:1f:de:7b:b7:6a:ae:cc:66:cc:de:1b:60:08:a1:e6:06:4c:
         99:ee:dc:13:0f:7a:81:49:4c:be:33:0a:81:e4:a3:47:b7:ee:
         21:3c:dd:fd:79:99:0d:01:8e:dd:f3:ed:0f:44:88:05:76:48:
         af:8c:36:b2:2b:c1:15:73:c1:18:b1:55:e4:67:b0:32:4b:9d:
         0d:ee:ed:97:36:f9:4e:0f:88:df:1d:21:51:fc:05:f7:52:57:
         9b:a9:37:19:f7:b7:6f:fd:7e:37:9a:e9:03:56:c9:bf:c1:bc:
         76:4b:50:cb:58:6b:03:6c:3a:1d:35:6b:80:fb:62:b9:48:95:
         e4:2c:ed:a0:83:5e:7d:ae:21:9b:f2:63:4d:92:36:ca:ed:53:
         40:9a:3b:07:dc:d0:45:57:4d:b4:be:08:8a:c7:0e:21:75:dc:
         b7:55:0b:4d:e9:0d:2b:73:3e:5f:00:40:cd:33:c4:af:4c:53:
         e4:4e:f2:03:b3:9d:92:65:2e:e7:5a:24:c7:ad:5b:1d:59:94:
         fd:bf:32:05:90:e8:26:6b:36:ea:5d:85:2e:5c:41:44:67:8d:
         b3:b1:8f:b8:ca:72:13:04:d8:53:c6:44:3e:51:03:b2:3f:69:
         37:ae:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:11 2023 by rpki-client on console-ams.rpki-client.org