Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8FlMTIX8zXsMUKMyEaxwyMo5YUk.cer
File:                     8FlMTIX8zXsMUKMyEaxwyMo5YUk.cer (raw, json)
Hash identifier:          wYVH5jGznPVoDtYFCeOIegVPkOLtIG/fK9iOHsU6sno=
Subject key identifier:   F0:59:4C:4C:85:FC:CD:7B:0C:50:A3:32:11:AC:70:C8:CA:39:61:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       642465E89C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/06/056a8f-790b-4e1f-9be1-7e34a1aac5a3/1/8FlMTIX8zXsMUKMyEaxwyMo5YUk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/06/056a8f-790b-4e1f-9be1-7e34a1aac5a3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:37:54 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    IP: 81.161.236.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430107388060 (0x642465e89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb 24 15:37:54 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f0594c4c85fccd7b0c50a33211ac70c8ca396149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:1b:d7:dc:23:94:b5:80:22:2b:19:16:b7:
                    8f:bc:b2:fd:a8:da:25:fa:57:87:0e:39:e8:ae:05:
                    a4:a8:9f:41:98:b6:15:48:66:3a:9d:5f:73:81:bd:
                    e1:bc:04:11:8e:a4:20:eb:71:9e:91:9c:5c:d5:e3:
                    c4:d1:6d:66:06:8f:86:63:fd:d4:dd:f4:f3:af:eb:
                    c1:ee:fe:25:6f:76:98:47:05:d8:76:1a:ac:98:5f:
                    c0:c9:12:03:80:39:6d:5a:32:67:76:c2:9e:b2:d0:
                    35:fd:ad:0d:f2:4c:db:c2:dc:bf:96:0b:f4:21:d9:
                    42:e8:54:92:8b:7b:bf:b3:5f:27:c5:fa:03:d6:e3:
                    64:d1:12:97:80:7c:9e:5d:59:61:23:a4:0a:79:ae:
                    21:00:6d:16:36:b3:ea:ee:59:ab:a5:8e:c1:e3:aa:
                    c9:36:46:21:7a:14:a0:07:ca:84:95:52:46:cf:a4:
                    d3:d8:d4:56:d8:b5:1a:cd:d8:51:99:d5:10:1b:c0:
                    1a:08:5f:9e:d8:bd:a1:89:a8:3e:38:31:f4:c8:02:
                    ba:bd:03:e6:83:5b:a0:af:27:9e:85:e4:99:73:55:
                    d9:90:79:81:04:f3:f0:0c:70:2e:e8:b9:a3:8f:2c:
                    c9:8c:ee:9b:01:27:58:56:58:50:47:7a:81:43:64:
                    8c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:59:4C:4C:85:FC:CD:7B:0C:50:A3:32:11:AC:70:C8:CA:39:61:49
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/056a8f-790b-4e1f-9be1-7e34a1aac5a3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/056a8f-790b-4e1f-9be1-7e34a1aac5a3/1/8FlMTIX8zXsMUKMyEaxwyMo5YUk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.161.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:ff:21:c6:db:e5:16:7d:ec:e0:fd:8e:bf:0f:cb:0e:1b:
         2a:ea:f2:be:dc:ed:ed:9a:0c:27:fd:19:04:1c:91:fe:e0:f2:
         96:2c:d6:8c:dc:c5:33:74:e9:08:b0:72:03:c9:55:bc:97:8c:
         bc:ee:a5:5f:00:02:25:f6:b6:fa:9b:6f:3d:82:f4:9b:24:96:
         b0:45:62:5c:c7:09:9c:73:28:d3:66:b1:f5:2f:96:0d:4a:36:
         aa:99:4a:ad:c6:79:d8:74:0a:93:8f:98:b4:3a:a7:64:8d:5e:
         e4:18:f1:32:db:0b:8c:3a:17:f0:f6:ca:71:5d:67:b6:a9:4d:
         c2:e8:31:45:03:f6:1e:91:a8:18:cc:3b:1b:a2:97:86:e8:ba:
         4c:4a:62:1f:6c:5d:40:6d:0d:79:d2:07:ad:4d:66:6f:85:f8:
         db:90:ee:43:dd:fe:31:b2:fa:3a:2d:f0:3c:3b:91:9e:8c:36:
         f7:e9:a8:58:d8:ba:1d:b2:4f:a7:de:62:31:fa:37:20:58:e6:
         45:0e:e1:8c:4e:b9:05:aa:6d:45:3e:95:b3:d2:ad:4c:4c:36:
         1e:9d:b8:c1:14:43:94:fc:9f:b1:3b:1c:f3:35:cf:5c:c9:1f:
         98:20:f1:f5:66:60:8e:a2:7b:8f:e0:42:a2:db:bc:43:07:d5:
         32:15:5a:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:05 2023 by rpki-client on console-fra.rpki-client.org