Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9MoCx7U4u7NwlLMyqu9dgFb0NMA.cer
File:                     9MoCx7U4u7NwlLMyqu9dgFb0NMA.cer (raw, json)
Hash identifier:          spNooCWzbwobvI2B40qjHL4Yct2vrDegW7xSNTc1shc=
Subject key identifier:   F4:CA:02:C7:B5:38:BB:B3:70:94:B3:32:AA:EF:5D:80:56:F4:34:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       77FB30C864
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9d/cebb4c-9677-486b-955d-2ac95b1840ba/1/9MoCx7U4u7NwlLMyqu9dgFb0NMA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9d/cebb4c-9677-486b-955d-2ac95b1840ba/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 01:03:29 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 192.109.175.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515315386468 (0x77fb30c864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:03:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=f4ca02c7b538bbb37094b332aaef5d8056f434c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:73:ad:b3:d8:a7:45:b1:f8:21:fb:e8:04:
                    f4:48:e3:83:fe:37:bd:8c:75:00:ca:be:73:80:01:
                    5f:65:66:1c:9f:0b:d6:3b:99:c4:a5:fe:7a:c1:c4:
                    1a:86:8f:5c:c6:25:97:b0:41:d6:68:d9:84:99:f9:
                    78:b3:ef:e8:db:5a:12:48:cf:1b:b8:76:b2:93:4a:
                    5c:64:c9:db:49:da:73:80:20:99:37:f7:13:19:2e:
                    06:3c:a9:d1:69:e2:ec:da:d3:7d:be:8a:39:0f:5a:
                    d8:e6:c5:ee:be:b0:2e:29:84:86:a4:70:91:f1:11:
                    40:0b:a1:fa:4b:d5:27:5c:be:84:c9:21:05:87:2a:
                    9a:4f:df:9f:f5:8f:5f:18:76:05:92:d7:62:2e:e1:
                    a8:2c:bb:ba:75:f9:f2:92:64:ef:0a:dd:2e:aa:bc:
                    54:fd:c8:95:ae:72:0a:4e:7c:ff:36:c2:c6:ef:1d:
                    96:00:43:c7:0b:fb:37:de:42:63:46:18:1a:6e:8e:
                    b9:7c:73:24:4f:00:bf:06:57:c4:f3:84:e1:98:fd:
                    8e:ca:16:09:31:3c:f8:12:dd:59:f6:2b:48:54:4a:
                    ca:0e:d0:30:ef:06:c9:74:0d:76:55:27:6a:6d:4f:
                    d4:3f:e5:4e:0b:4d:7c:c8:29:50:c1:5c:72:17:d7:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CA:02:C7:B5:38:BB:B3:70:94:B3:32:AA:EF:5D:80:56:F4:34:C0
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/cebb4c-9677-486b-955d-2ac95b1840ba/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/cebb4c-9677-486b-955d-2ac95b1840ba/1/9MoCx7U4u7NwlLMyqu9dgFb0NMA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:1f:4d:36:74:04:b9:28:cf:6c:73:9d:33:37:f1:ce:2f:7c:
         a2:59:a9:5c:81:3b:cf:e5:fc:56:7c:b5:18:27:50:dc:99:b1:
         3b:7a:4a:48:02:4e:8f:16:8a:f1:ab:57:52:27:43:46:63:d0:
         48:43:4e:dd:b6:0e:58:84:5b:c9:09:07:30:e0:27:8b:ae:83:
         e8:ab:ca:1e:27:36:35:c8:26:3d:4e:d6:23:2c:e5:4c:3f:ce:
         2f:bd:85:61:c1:81:89:aa:0a:00:61:a9:30:04:f7:05:fc:48:
         13:3c:54:a2:89:ad:63:84:31:67:5c:ec:2f:c0:a6:f1:99:62:
         42:ec:89:4d:68:cf:7a:0b:e3:03:87:3e:69:07:27:7a:7c:44:
         4a:c3:e4:35:21:28:75:f8:dc:99:3b:54:89:0d:58:d6:f5:24:
         12:20:ae:66:46:0d:f7:05:8d:9f:a5:33:0f:21:89:dd:6d:4e:
         60:5a:72:ba:02:58:fb:f4:da:31:d9:47:c6:52:96:3d:ad:d1:
         6d:6d:cb:9b:83:26:2e:ab:9b:ea:52:15:6d:27:44:6c:5a:9b:
         f6:62:90:6a:6a:9e:3c:b7:1a:b5:e0:b4:2a:c8:15:a1:62:0c:
         33:d9:9d:88:39:cd:7f:0e:d2:5e:1e:cf:d2:04:af:43:0e:6b:
         8a:86:56:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-ams.rpki-client.org