Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9eg2EQFNWpn4cV3QW9AiNMa0a9U.cer
File:                     9eg2EQFNWpn4cV3QW9AiNMa0a9U.cer (raw, json)
Hash identifier:          mbm0hLk6TMWvNBIvpBH0KSu6PkP8cC3zejQq1Ied9Z4=
Subject key identifier:   F5:E8:36:11:01:4D:5A:99:F8:71:5D:D0:5B:D0:22:34:C6:B4:6B:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9E1E82F96C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/9eg2EQFNWpn4cV3QW9AiNMa0a9U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 04:59:06 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 213.139.224.0/22
                          IP: 2a09:3d80::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679116732780 (0x9e1e82f96c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:59:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f5e83611014d5a99f8715dd05bd02234c6b46bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:77:1e:f3:91:5d:11:f3:71:45:cf:62:bf:0c:
                    43:f9:ae:11:26:8c:fd:0d:da:ef:16:38:6b:15:b8:
                    47:be:6b:ce:82:1e:36:b6:c5:7e:e0:5f:53:a5:f5:
                    2d:d6:44:22:df:1c:f4:bf:09:0d:72:17:f0:6c:cf:
                    a4:81:86:92:dd:fc:ad:fe:61:e2:22:7f:0b:8a:c3:
                    76:2c:b3:3d:e3:76:f7:b9:e0:66:9c:39:74:dd:2f:
                    20:07:8b:a7:76:35:c2:ab:0e:7c:bb:fa:05:e4:45:
                    c1:7a:de:80:46:5d:b9:64:2a:c8:69:f3:16:7f:a9:
                    9e:ed:22:a2:23:ea:2e:f8:ee:a3:4e:b9:a4:2f:d8:
                    b2:fd:41:74:06:d3:e6:cc:6d:03:3a:d9:d2:b1:32:
                    76:ef:0f:8f:8a:50:e8:5d:53:e6:bf:ab:ea:cc:6a:
                    28:4c:aa:66:62:b9:f6:64:28:ee:1b:51:e6:6b:fd:
                    9e:d4:f9:8f:f9:c9:ff:4b:98:e4:b6:05:f4:29:29:
                    1a:27:a9:41:c4:84:91:04:cc:e5:47:20:e8:bc:d3:
                    d9:90:54:53:d5:95:25:94:b1:8f:85:15:f5:92:f5:
                    a7:85:5b:42:b4:2c:4c:47:a1:26:a0:42:ee:2f:67:
                    fb:4b:ed:d9:3b:24:a8:1f:24:ea:14:36:7c:71:96:
                    53:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:36:11:01:4D:5A:99:F8:71:5D:D0:5B:D0:22:34:C6:B4:6B:D5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/9eg2EQFNWpn4cV3QW9AiNMa0a9U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.224.0/22
                IPv6:
                  2a09:3d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:60:99:06:6d:18:ed:26:cf:37:01:96:4f:78:71:82:4d:9e:
         92:0e:78:f5:49:a3:d2:47:a2:90:4d:ce:4f:f9:74:a8:07:91:
         68:df:34:bf:62:54:f9:42:5d:d7:83:6f:8c:ce:b3:f4:37:b4:
         c4:1f:6d:df:c6:a2:74:df:5f:56:76:6a:7b:8c:42:87:56:d3:
         28:73:cf:f9:69:2e:9c:58:7f:98:8e:75:f0:f5:77:da:0b:11:
         c7:ec:65:83:a3:b9:07:d9:9b:f2:0f:8f:50:78:62:00:06:cf:
         d7:3b:d1:1c:8a:38:e4:0f:78:85:25:8e:77:26:7c:9b:e1:f2:
         03:d9:e5:1f:9a:86:a6:79:e6:51:99:4b:2f:b5:ab:ec:b4:75:
         d0:3d:28:11:3a:8c:67:fd:49:77:a0:34:2a:3b:ef:ca:3c:ef:
         fd:88:69:fe:98:38:f7:82:8e:e2:e8:9a:48:b4:b5:20:26:ef:
         a5:4f:de:f1:67:b4:01:64:36:0f:4f:f7:69:30:39:05:8a:dd:
         15:4f:53:2f:97:18:51:9c:97:bd:e8:e6:c9:8a:6d:1a:20:08:
         6c:ce:2a:91:6b:7e:56:4a:5d:57:22:9d:1b:fb:5d:bc:ad:32:
         7b:c6:fd:96:99:cf:63:11:54:73:ff:dc:da:61:03:a3:cf:46:
         81:17:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-ams.rpki-client.org