Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8yhpKNUPoFTdrycwkX5xY_OIaPQ.cer
File:                     8yhpKNUPoFTdrycwkX5xY_OIaPQ.cer (raw, json)
Hash identifier:          v0dYJE7AZqKTE+kd/uREJvg5fj0gHTZ7bZiIFWwDQRM=
Subject key identifier:   F3:28:69:28:D5:0F:A0:54:DD:AF:27:30:91:7E:71:63:F3:88:68:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7A9231B744
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/c3/8fcad7-ab08-4201-9fc2-a5dcbc2ce4b6/1/8yhpKNUPoFTdrycwkX5xY_OIaPQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/c3/8fcad7-ab08-4201-9fc2-a5dcbc2ce4b6/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 02:17:47 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 2001:678:70c::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526438741828 (0x7a9231b744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:17:47 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f3286928d50fa054ddaf2730917e7163f38868f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:03:a7:50:42:8f:43:64:24:7b:10:4a:0e:
                    fe:4c:44:42:56:73:dd:91:0e:44:03:95:d4:c9:ef:
                    ff:36:23:a4:88:a3:a8:8a:85:97:1b:62:a6:9e:14:
                    d3:7b:2a:fa:63:a7:e3:26:c1:0d:e5:2e:79:32:20:
                    db:87:2a:df:e8:6b:d1:e8:58:25:f4:27:d3:b0:dc:
                    3b:33:4d:bf:22:35:8e:84:25:29:51:e7:74:b3:e0:
                    cd:94:1d:60:b8:69:5d:0a:ef:af:5d:43:c4:4b:62:
                    08:f4:8f:0f:b6:9b:bd:bd:2c:23:af:1c:85:70:fb:
                    a2:16:15:9a:95:55:95:28:82:29:4e:fc:87:3a:ec:
                    2d:55:6c:03:6c:88:79:4a:16:01:a6:c9:0e:18:74:
                    91:9c:ee:18:26:f4:4f:d3:35:99:f3:34:d7:2d:0b:
                    39:68:50:04:62:78:12:4a:b9:95:19:ef:dd:9a:53:
                    51:96:97:04:6e:52:af:d8:81:22:32:a6:ba:4d:65:
                    e6:22:be:91:e7:4d:7d:9e:b1:b8:b5:e3:37:c9:9a:
                    9e:3d:46:2d:2f:99:8c:2e:17:25:82:72:57:c1:ca:
                    78:2c:29:9c:14:b8:66:29:19:75:29:f2:51:46:5c:
                    c3:1c:29:3a:94:27:b1:f2:f4:6b:4f:49:80:cb:00:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:28:69:28:D5:0F:A0:54:DD:AF:27:30:91:7E:71:63:F3:88:68:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8fcad7-ab08-4201-9fc2-a5dcbc2ce4b6/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8fcad7-ab08-4201-9fc2-a5dcbc2ce4b6/1/8yhpKNUPoFTdrycwkX5xY_OIaPQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:70c::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:7a:16:a1:75:de:69:63:b2:3d:bd:fd:37:77:88:6c:db:5e:
         26:de:b8:0b:57:6c:de:fb:1c:92:af:26:67:85:52:65:db:1c:
         3a:39:84:f2:9d:84:bf:05:6c:72:2a:68:02:12:43:4c:fb:2a:
         4c:1e:39:04:16:6e:7f:5e:5c:0e:45:b8:b9:9a:2b:d2:2b:0c:
         52:23:f2:80:34:fb:7f:9f:30:c1:9d:89:c2:7e:c4:80:97:c4:
         5a:7d:32:ef:ab:d7:24:e2:46:90:c3:96:5e:10:80:98:f2:1d:
         d4:9f:a8:30:2c:4f:eb:99:c7:ca:cb:b8:00:13:25:47:b1:72:
         d3:ed:18:58:d2:c1:1a:81:55:1f:47:78:77:ba:f5:b5:b0:1f:
         55:36:bf:d7:91:b4:c7:b0:e5:5a:dc:0a:fb:6d:95:53:4c:ab:
         cf:00:f8:9e:68:cb:47:42:18:95:af:c3:aa:1d:97:f5:5c:92:
         97:99:99:f5:73:5c:f1:e9:7d:38:e2:56:bf:ac:ed:80:09:30:
         82:0e:85:91:5f:19:c6:ea:80:4a:e6:01:5e:18:af:2d:16:4e:
         95:e1:6c:bd:1b:67:55:77:f9:76:4d:99:77:90:2f:95:4a:46:
         4e:70:b1:ed:2b:6d:ca:26:b0:7f:40:4f:f9:53:6d:fb:e1:0b:
         db:fb:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:23 2023 by rpki-client on console-fra.rpki-client.org