Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9P05IAJQwHV_EYPx94n6xOAlKi0.cer
File:                     9P05IAJQwHV_EYPx94n6xOAlKi0.cer (raw, json)
Hash identifier:          boY1fMF1mI5/Is5ZncDO8BvkGqEt3O5q8uTdNRaTBqE=
Subject key identifier:   F4:FD:39:20:02:50:C0:75:7F:11:83:F1:F7:89:FA:C4:E0:25:2A:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       6872175B88
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/b10751-ad96-45c4-9f1b-750c13be1008/1/9P05IAJQwHV_EYPx94n6xOAlKi0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/b10751-ad96-45c4-9f1b-750c13be1008/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Apr 2020 09:21:52 +0000
Certificate not after:    Thu 01 Jul 2021 00:00:00 +0000
Subordinate resources:    AS: 33846

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448590732168 (0x6872175b88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr  2 09:21:52 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=f4fd39200250c0757f1183f1f789fac4e0252a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d6:23:e4:40:5f:30:43:bc:b8:52:97:8c:0d:
                    9f:8a:83:fd:2f:3f:0c:8c:d8:0e:89:75:fb:89:30:
                    e5:69:62:8c:b4:42:48:a2:ca:4d:3d:35:d4:39:39:
                    9b:4d:22:b0:55:5d:fa:65:ed:77:1d:af:d5:ae:5f:
                    6b:7c:15:e1:5a:c8:21:43:82:f6:d6:15:2f:ad:2c:
                    e6:bc:c0:18:ef:c3:e8:33:34:9a:72:fe:84:7f:65:
                    b3:07:70:e9:8f:17:43:e5:a0:8b:f7:82:f9:6f:3f:
                    1f:fd:6d:ae:21:e3:fa:c0:3c:f1:e0:ca:14:82:40:
                    34:56:e9:fd:2b:18:86:ec:8c:02:8e:50:d4:03:79:
                    d8:2c:b4:42:d2:4c:25:e2:af:17:ec:42:ac:f8:d9:
                    49:ae:64:39:39:31:d4:e0:f3:cd:f9:b1:c5:9f:43:
                    1b:a3:10:fb:86:d4:34:ee:5a:0a:38:6f:6e:d9:08:
                    f8:e4:5e:e1:98:12:0f:14:e2:53:b1:38:0b:2c:b2:
                    18:8d:03:4e:4a:c6:99:8c:a5:94:ce:12:d2:4c:b2:
                    69:cd:5c:fb:f6:29:4b:bf:57:70:fe:15:ac:0a:7e:
                    d9:06:3e:bb:47:5a:8c:4e:fd:85:2b:90:1f:fe:6d:
                    5c:54:c7:d0:45:40:4e:4e:7b:b2:90:1b:ae:d3:97:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FD:39:20:02:50:C0:75:7F:11:83:F1:F7:89:FA:C4:E0:25:2A:2D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b10751-ad96-45c4-9f1b-750c13be1008/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b10751-ad96-45c4-9f1b-750c13be1008/1/9P05IAJQwHV_EYPx94n6xOAlKi0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33846

    Signature Algorithm: sha256WithRSAEncryption
         9c:03:d9:fa:14:4d:50:33:8a:d8:39:34:45:ee:e3:55:5a:db:
         36:2e:91:09:19:eb:c4:c0:0c:c8:4a:79:ae:53:30:99:54:21:
         09:0e:b8:5a:44:df:cb:83:8e:90:79:68:b7:3d:ce:ef:ca:b0:
         36:6b:ff:da:cc:aa:0a:e7:75:3d:30:86:81:57:b5:f5:47:81:
         90:3f:86:c8:4a:3d:3f:28:0a:ef:66:a2:75:8c:d7:d4:d4:17:
         d0:87:04:c7:97:8a:90:10:79:7e:60:db:b3:d7:c4:1e:0e:19:
         5a:15:7c:40:05:07:b9:41:24:6d:ee:02:ce:1d:06:9d:70:99:
         89:2c:e3:a5:e2:ad:8c:b8:30:9d:0a:e3:0d:4b:2c:e8:e3:3a:
         15:85:f2:15:17:88:e7:b1:a2:f5:f4:2c:a8:95:15:fa:99:83:
         e6:03:a4:50:1e:21:be:37:68:a4:f9:62:f4:3c:e7:cf:b5:a0:
         d9:dd:c6:86:9d:35:e2:d6:23:80:5f:5f:18:c2:df:dd:0f:0e:
         82:68:50:0d:39:1c:5d:7c:bc:f9:d9:c6:d9:3d:9c:93:f1:76:
         2f:3f:73:1a:7b:b3:06:52:49:a6:de:ee:30:54:ef:ce:7a:ea:
         e3:3d:aa:fb:f4:1a:ae:6e:c6:d7:99:da:f2:f4:65:c0:f5:1a:
         ea:36:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:52 2023 by rpki-client on console-fra.rpki-client.org