Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9zb4hfDNHA2uK3oNP-zl8oJU7c8.cer
File:                     9zb4hfDNHA2uK3oNP-zl8oJU7c8.cer (raw, json)
Hash identifier:          d9j/q0xZy0iqhRh/6EF94bK7fW9Nro/sFjoC7iKKNoc=
Subject key identifier:   F7:36:F8:85:F0:CD:1C:0D:AE:2B:7A:0D:3F:EC:E5:F2:82:54:ED:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0182169E3F707FFC4BADD1E47AAC633771A8
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b0/44db8a-e3ec-43d1-b202-eea92364618c/1/9zb4hfDNHA2uK3oNP-zl8oJU7c8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b0/44db8a-e3ec-43d1-b202-eea92364618c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 19 Jul 2022 13:20:45 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 203852

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:16:9e:3f:70:7f:fc:4b:ad:d1:e4:7a:ac:63:37:71:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 19 13:20:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f736f885f0cd1c0dae2b7a0d3fece5f28254edcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:91:d3:91:b4:52:ee:83:fa:ef:53:de:36:
                    c7:f4:5a:33:be:b6:b5:69:f4:14:4f:7b:f9:32:20:
                    ca:64:9f:80:60:ea:f5:5f:7f:4f:60:da:f3:76:97:
                    fe:72:d5:ac:c6:83:f5:8a:67:64:8b:ad:ae:88:0e:
                    e4:f4:4e:16:98:bd:35:27:51:b8:a8:1d:84:d4:8a:
                    07:9c:6d:af:2f:e6:df:9f:79:fc:1f:f8:07:58:29:
                    aa:19:e6:7e:2a:49:91:50:8d:63:36:21:94:ba:1c:
                    ad:da:39:63:66:9c:e4:84:07:a2:93:ad:06:34:88:
                    bc:80:e6:74:ae:8a:03:a6:94:56:0c:7a:26:64:74:
                    ab:19:b3:9f:a8:bf:d9:b7:f5:db:46:45:7c:06:ec:
                    62:84:20:58:0e:1e:0e:a7:c1:8c:6f:c8:07:89:9c:
                    fe:6f:46:f9:a4:e1:85:ca:98:aa:db:e7:a3:3d:5c:
                    34:34:b8:91:0c:af:3a:3b:7d:36:29:45:9f:af:56:
                    4c:b9:9d:25:49:c2:a1:36:f5:d7:f9:c1:f5:15:20:
                    df:65:c4:3f:1a:03:17:0b:ab:9f:15:98:0e:09:47:
                    65:31:70:91:27:ee:f0:c7:a0:78:9f:0b:1a:d0:30:
                    84:a1:01:a3:03:0a:ed:e5:52:da:24:3d:60:42:aa:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:F8:85:F0:CD:1C:0D:AE:2B:7A:0D:3F:EC:E5:F2:82:54:ED:CF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44db8a-e3ec-43d1-b202-eea92364618c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44db8a-e3ec-43d1-b202-eea92364618c/1/9zb4hfDNHA2uK3oNP-zl8oJU7c8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203852

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:50:3e:e3:e3:0d:cd:eb:7b:f6:69:9f:ee:c9:b9:21:51:
         6a:d1:7c:f1:60:97:16:39:d4:15:cc:3c:00:38:2d:e7:df:ba:
         14:d7:bd:19:0d:54:06:b0:3c:8b:b3:23:b9:c4:03:d4:d1:ef:
         db:8a:91:b8:16:cd:12:48:05:c5:6c:20:9c:e4:40:d9:8c:47:
         43:5e:8a:40:9d:d4:64:01:3a:38:51:8f:1d:9e:fc:cf:b1:8f:
         06:c6:7f:af:61:1c:48:7c:9c:bd:32:03:b8:9d:c1:e6:b2:0b:
         bc:4a:3e:7c:05:ae:cd:c1:99:53:32:8d:79:b8:33:4c:51:cf:
         8b:bc:0a:a5:69:dd:e0:d2:5f:49:ae:07:54:71:84:0f:95:08:
         a1:0e:e7:f9:42:e3:44:1b:81:30:9f:48:ec:ca:b8:84:57:f5:
         20:a0:c7:61:90:6e:31:d5:1e:f0:2c:3a:a8:e5:c8:17:df:c5:
         c5:6f:6c:7f:b1:30:56:94:f9:26:a5:2e:13:f2:c6:90:99:bc:
         a9:47:62:89:2e:70:1c:99:bd:68:dc:c8:d7:e6:d5:f5:d2:5a:
         a5:e8:1b:c9:e6:c6:1f:4c:b3:ed:fe:6d:40:bd:6e:79:62:7b:
         1d:74:7f:a1:4a:7e:ef:37:69:f6:a9:e9:a5:9a:35:82:e3:35:
         38:aa:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:20 2024 by rpki-client on console-fra.rpki-client.org