Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8WSTRVTt0nIXtNdys1mnJwCl-a0.cer
File:                     8WSTRVTt0nIXtNdys1mnJwCl-a0.cer (raw, json)
Hash identifier:          iAFyVHq2WoH5W42I1/6OZcrx/JcTfo/hlp7Q5HpRbz8=
Subject key identifier:   F1:64:93:45:54:ED:D2:72:17:B4:D7:72:B3:59:A7:27:00:A5:F9:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7A92AEA4AE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a0/45295b-4e59-436a-848f-8d3bafbaff15/1/8WSTRVTt0nIXtNdys1mnJwCl-a0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a0/45295b-4e59-436a-848f-8d3bafbaff15/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:17:50 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.9.176.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526446929070 (0x7a92aea4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:17:50 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f164934554edd27217b4d772b359a72700a5f9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:74:76:71:b6:9d:70:a3:dc:c4:05:c1:8f:
                    74:9e:85:ab:aa:7f:53:aa:ba:c0:1b:44:cf:0c:3e:
                    5e:b3:8f:b1:21:34:6d:df:2c:f3:a9:c0:1b:a5:ca:
                    e9:eb:3f:85:a2:31:3f:5f:f4:24:b3:33:91:80:9d:
                    17:c6:b2:fe:d0:e2:2f:90:c7:12:fe:62:b5:74:87:
                    5b:42:fa:c1:b3:10:79:74:88:f9:29:6b:3a:f2:6c:
                    73:ed:fa:e3:a8:e0:51:22:76:64:6f:36:72:7c:78:
                    5c:2f:39:f3:47:14:0b:c6:49:6c:93:dc:8a:3d:dc:
                    24:fc:2b:74:7a:04:5e:d0:de:e7:40:85:8c:cc:08:
                    11:d4:28:8a:f5:9a:15:67:4d:60:00:51:a5:ec:02:
                    3d:a3:ce:83:de:7c:97:23:53:84:73:35:be:42:2c:
                    ea:d4:0c:2d:03:97:e1:f2:a5:06:94:d1:4c:c4:71:
                    1f:02:fe:dc:1e:93:ae:d9:f9:83:7b:42:08:1a:47:
                    91:8f:72:f8:99:4b:40:3b:b0:68:1c:01:89:d1:36:
                    99:15:68:24:71:33:db:da:45:7b:12:92:c8:43:c6:
                    2b:0d:d1:13:c5:07:f1:92:ad:65:00:9e:69:ba:e7:
                    29:78:38:04:38:69:11:c6:9e:c6:8b:9a:ee:86:bd:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:93:45:54:ED:D2:72:17:B4:D7:72:B3:59:A7:27:00:A5:F9:AD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45295b-4e59-436a-848f-8d3bafbaff15/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45295b-4e59-436a-848f-8d3bafbaff15/1/8WSTRVTt0nIXtNdys1mnJwCl-a0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:8b:9d:d6:a2:dd:28:00:c7:df:6e:1c:e9:01:21:bb:d6:70:
         9d:88:af:7d:94:5d:b5:de:54:55:59:53:e8:b0:14:d0:e9:e6:
         95:3d:8f:de:7a:32:e8:0b:21:7c:1a:80:85:24:41:e8:a1:1b:
         ab:e7:0a:ce:12:cc:a4:90:43:0b:f9:7a:8e:a5:eb:37:3d:91:
         cd:9f:76:e1:0b:8d:a6:6f:21:0f:0a:1e:74:a9:ea:bc:d1:df:
         41:8a:ff:81:ea:7c:17:b8:55:5d:d7:62:ed:18:9c:e4:a2:22:
         28:2a:7b:98:a1:bf:a8:6f:89:44:ad:b1:0a:3c:03:c3:27:e2:
         75:78:95:c7:99:7b:06:72:13:2f:82:3c:55:cb:a7:1c:f5:3d:
         99:d2:f4:83:c7:f6:0b:e0:b1:d8:6c:93:15:f0:2b:3e:7e:ce:
         43:10:b6:7c:de:ca:05:b6:ad:b0:3a:84:0d:c8:61:0a:d6:0d:
         6f:22:09:cf:f0:cb:0e:d5:5a:40:54:90:05:a3:c4:e1:ec:f1:
         bb:a1:1c:ae:64:fe:e6:ff:52:8a:e7:05:58:39:70:44:d6:38:
         65:2b:15:c0:4b:67:a7:82:a4:7f:46:59:33:9b:51:af:a7:ca:
         74:60:ec:ef:a6:11:60:13:a5:d9:26:e7:04:8a:08:85:81:7a:
         7a:88:c0:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:45 2023 by rpki-client on console-ams.rpki-client.org