Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8rLd10JXqP_7TGKYsbUExNWKjyI.cer
File:                     8rLd10JXqP_7TGKYsbUExNWKjyI.cer (raw, json)
Hash identifier:          6Q2tmsNS6m3kcZK+bYaan3g+4WMVbuWCLj1N4zE3+ts=
Subject key identifier:   F2:B2:DD:D7:42:57:A8:FF:FB:4C:62:98:B1:B5:04:C4:D5:8A:8F:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       ABCC64FD25
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a6/b8a22c-9207-4283-982d-79176e756767/1/8rLd10JXqP_7TGKYsbUExNWKjyI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a6/b8a22c-9207-4283-982d-79176e756767/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Jan 2022 11:25:25 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 206592

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737868578085 (0xabcc64fd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan 12 11:25:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2b2ddd74257a8fffb4c6298b1b504c4d58a8f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:e9:27:f8:65:ae:46:75:6d:f7:5c:db:55:
                    36:2e:b2:37:9a:33:ce:ed:47:11:e5:a2:b3:bf:74:
                    99:99:a1:6b:03:c1:b5:41:a5:d9:32:ff:7c:3b:6b:
                    78:b0:f7:63:8b:54:55:e1:27:3b:c0:84:36:36:83:
                    8b:e1:82:de:60:19:fe:32:a4:fc:3a:3c:f3:60:29:
                    a0:b6:d2:fc:3a:ae:50:96:aa:41:d0:53:4f:76:ce:
                    c5:e3:ae:21:32:89:d1:7c:72:7d:e3:c0:b4:91:54:
                    75:7e:60:8c:86:25:6c:1d:e2:88:47:33:d3:6f:37:
                    86:f9:32:be:7f:53:a2:44:3a:ca:10:2f:08:9f:56:
                    ec:58:4f:9d:d9:10:ea:cb:ae:dd:1e:71:0a:f0:2b:
                    a0:b1:18:d3:a7:13:63:8f:85:54:a7:11:87:e2:42:
                    10:a8:c6:41:4a:c2:a9:db:37:e1:1b:8f:08:12:2b:
                    98:81:76:1f:c5:b2:7c:0d:8a:50:6f:7c:ec:ec:1b:
                    f3:83:65:1b:b4:c6:ab:99:84:57:f0:c0:b4:75:93:
                    4e:6d:a9:46:46:4c:45:ee:18:96:8b:f4:ec:f8:c8:
                    a2:25:7b:0d:77:2a:ef:7a:05:ba:8c:41:e8:0d:4f:
                    1f:7c:32:0e:39:6b:6e:e2:0d:f1:f1:4b:d7:5a:79:
                    48:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B2:DD:D7:42:57:A8:FF:FB:4C:62:98:B1:B5:04:C4:D5:8A:8F:22
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b8a22c-9207-4283-982d-79176e756767/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b8a22c-9207-4283-982d-79176e756767/1/8rLd10JXqP_7TGKYsbUExNWKjyI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206592

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:1e:80:ed:b0:f7:06:72:91:5e:ab:d3:71:fc:7f:77:89:
         14:9c:50:b5:69:8f:ba:a5:8e:53:76:69:35:3c:2c:23:a6:40:
         24:63:cb:77:6b:55:0d:42:09:72:3c:23:26:ce:58:c3:37:b1:
         58:11:ec:8d:48:6f:eb:34:81:25:1a:f6:f3:15:97:23:6f:3e:
         58:c1:67:9f:7b:86:3d:df:eb:7d:ae:69:b7:28:40:d9:49:b1:
         a8:94:c6:27:3f:f6:2b:35:5f:de:c8:54:7a:58:43:83:3b:3c:
         43:d3:40:1e:bb:1d:6e:bf:ce:6f:7f:48:b2:e5:2f:64:72:e7:
         3b:2c:f3:b6:07:a6:9c:48:e3:7e:6e:12:65:43:52:62:5a:62:
         72:8c:8c:ca:00:f8:09:af:51:ab:97:2e:15:ca:00:14:00:57:
         d2:52:49:e5:df:16:cb:a4:88:b3:1e:5e:54:fb:b4:6f:0f:4d:
         35:63:db:ea:97:61:4c:a2:30:15:36:94:e3:0b:91:82:d7:80:
         31:d0:0d:eb:c4:4f:69:fa:b1:41:7f:92:59:13:57:c2:78:fb:
         e2:a1:0c:9c:7f:74:25:6f:c0:f9:65:d6:e0:e4:7f:28:56:ca:
         92:84:61:cb:25:d5:d0:40:41:c5:61:d9:43:14:30:d3:2d:51:
         0b:08:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:23 2023 by rpki-client on console-fra.rpki-client.org