Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8pv8PxlMuaOAEvLPwFiu-hjIH90.cer
File:                     8pv8PxlMuaOAEvLPwFiu-hjIH90.cer (raw, json)
Hash identifier:          m6pWLnFOjIEJqr+vQUt9bUTvGPg41ww/HiGQsZ/+Q3g=
Subject key identifier:   F2:9B:FC:3F:19:4C:B9:A3:80:12:F2:CF:C0:58:AE:FA:18:C8:1F:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       82A0C76489
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1d/de8131-8a00-486f-9a2e-cc08ba157209/1/8pv8PxlMuaOAEvLPwFiu-hjIH90.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1d/de8131-8a00-486f-9a2e-cc08ba157209/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 06:40:38 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 185.161.188.0/22
                          IP: 2a07:c6c0::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561043170441 (0x82a0c76489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:40:38 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f29bfc3f194cb9a38012f2cfc058aefa18c81fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:95:f9:a6:9d:be:b7:82:f9:b4:6e:15:78:
                    3f:bb:4b:e5:d7:08:10:cf:16:0d:83:33:c7:86:e2:
                    38:6c:4e:df:be:0f:e7:85:c9:e1:c5:d2:3b:5b:e8:
                    d2:16:3f:9b:0f:ae:c2:6b:6c:40:44:b2:d1:c0:33:
                    93:af:cc:7c:03:fc:65:f8:6f:86:15:96:95:8b:7e:
                    6a:a0:e1:4f:8b:0e:bf:8f:c8:b3:50:cf:f2:de:17:
                    86:5b:91:55:34:0b:5d:75:de:2c:69:22:cc:61:bb:
                    2c:6b:66:3e:13:3e:cd:75:56:31:70:f0:f7:73:64:
                    d7:d2:55:1a:a2:e5:ef:f5:e4:42:cb:80:39:81:80:
                    2a:af:8b:34:20:92:9e:53:cb:68:b7:c7:17:bb:3d:
                    9e:d0:62:ab:e5:20:0d:43:24:d8:a0:cf:b8:66:ca:
                    68:13:f1:27:6e:7d:07:54:49:e9:8e:5d:85:84:af:
                    21:10:80:82:9f:29:57:ba:90:7d:bd:c9:6e:8a:40:
                    84:0a:59:07:46:69:d1:68:74:b4:84:ab:b0:9e:03:
                    6b:f3:3f:35:d9:ad:12:c3:a3:ba:25:a8:30:ca:26:
                    b3:89:04:87:c0:37:1a:1a:73:1d:19:fe:b8:53:7f:
                    a8:6f:6f:12:e3:70:f8:e2:ea:24:61:7a:ce:d7:19:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9B:FC:3F:19:4C:B9:A3:80:12:F2:CF:C0:58:AE:FA:18:C8:1F:DD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/de8131-8a00-486f-9a2e-cc08ba157209/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/de8131-8a00-486f-9a2e-cc08ba157209/1/8pv8PxlMuaOAEvLPwFiu-hjIH90.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.188.0/22
                IPv6:
                  2a07:c6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:99:52:5c:7e:e3:c9:0c:4f:e2:4d:c8:17:f2:22:2d:82:07:
         5a:e6:63:35:80:a4:18:d9:d9:bc:56:6e:0e:fc:c7:45:70:9f:
         75:7f:4b:36:3a:6b:33:07:24:11:1a:d3:82:ae:33:80:ae:09:
         f8:21:62:dd:c4:ed:be:07:9d:08:91:7e:68:e8:ec:fa:ed:a3:
         e8:c3:52:b2:c5:eb:d7:6e:fd:45:08:19:4a:27:d3:0b:84:d9:
         75:d3:52:5e:15:e0:4e:92:63:5f:d9:ee:1f:70:76:77:5c:52:
         fd:2c:76:15:79:9f:df:99:52:bd:9c:49:94:d1:b7:2e:62:e2:
         3b:0d:bc:c8:85:76:85:2a:57:e2:29:33:d1:a9:09:bf:24:39:
         c3:d8:b2:7e:b0:68:49:10:72:2a:a8:f7:c6:d9:fc:2f:26:cd:
         7e:4a:62:9e:8d:c9:19:cb:62:a8:0b:a5:1c:3c:07:4c:0c:ef:
         5f:ba:a2:c6:db:e2:38:e0:8b:49:60:48:be:22:56:dd:b3:fe:
         83:9d:e9:f1:bc:09:56:e6:93:36:2f:59:7a:0d:4e:b5:ed:50:
         93:cb:94:78:2e:56:88:30:55:15:87:9d:55:08:c2:39:79:bb:
         be:88:64:bd:65:59:ab:7b:42:d6:97:e3:f5:fe:0e:3a:c2:a2:
         10:91:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:11 2023 by rpki-client on console-ams.rpki-client.org