Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A4mXVd31jVZUGmc0Bh8rZup4WCM.cer
File:                     A4mXVd31jVZUGmc0Bh8rZup4WCM.cer (raw, json)
Hash identifier:          FNR6ke/82pinyRCPX/s1IJhJy4HQwE6yd78dBEdqzII=
Subject key identifier:   03:89:97:55:DD:F5:8D:56:54:1A:67:34:06:1F:2B:66:EA:78:58:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       80C6EEF74B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f4/5599ad-cfe1-4261-8d1b-416e0e26623a/1/A4mXVd31jVZUGmc0Bh8rZup4WCM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f4/5599ad-cfe1-4261-8d1b-416e0e26623a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 05:04:27 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 45.154.212.0/22
                          IP: 2a0f:db00::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553093363531 (0x80c6eef74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:04:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=03899755ddf58d56541a6734061f2b66ea785823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:dc:3b:01:e9:b4:77:fa:40:df:18:e1:e1:
                    0d:33:31:a3:34:b9:94:d7:e4:34:b4:1d:fe:28:e3:
                    85:9b:68:17:37:00:07:fe:cd:93:5e:9f:ef:25:d1:
                    45:3a:13:a2:ac:a5:d0:24:5b:98:74:da:2a:f8:22:
                    8b:82:65:c5:0a:7a:ec:6f:82:b3:ea:98:74:cf:dc:
                    13:ee:a1:b6:ab:bd:d9:ac:45:72:b8:23:7c:f4:3a:
                    34:e7:19:d6:27:d9:76:d5:28:a5:0a:ca:cf:e0:31:
                    a1:ac:74:38:b9:10:d2:33:72:23:c1:c9:0b:4b:f6:
                    ec:f2:2c:e9:cb:97:94:cf:b4:cc:69:84:a7:99:da:
                    2f:56:4f:06:12:bb:8e:3e:ff:80:38:e8:be:b2:8e:
                    41:b0:8c:97:88:27:f8:f4:8a:13:79:0d:85:09:ab:
                    33:ca:9b:85:63:f5:4f:0c:59:b3:a0:ab:a7:51:b7:
                    4b:65:7c:15:64:a6:d7:97:9c:3f:dd:a5:00:fa:81:
                    9b:49:15:db:c0:b8:cf:07:78:86:43:26:03:98:07:
                    2d:97:d8:50:f1:16:36:6b:23:df:32:e5:6c:a4:49:
                    92:ac:ff:a3:8b:6b:27:f2:80:0a:0f:5f:94:18:10:
                    83:23:d9:7c:ae:d1:98:98:9d:c1:c4:36:a4:7d:ff:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:97:55:DD:F5:8D:56:54:1A:67:34:06:1F:2B:66:EA:78:58:23
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5599ad-cfe1-4261-8d1b-416e0e26623a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5599ad-cfe1-4261-8d1b-416e0e26623a/1/A4mXVd31jVZUGmc0Bh8rZup4WCM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.212.0/22
                IPv6:
                  2a0f:db00::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:8f:e4:94:10:8b:13:af:d8:68:d5:e7:d5:a4:a5:e0:6b:
         3b:f4:1b:e4:6d:ab:e3:35:df:50:45:da:c1:69:7a:19:4f:03:
         7f:77:43:57:0c:44:a7:8e:a2:09:19:bf:bb:c9:2b:a8:52:43:
         e9:3c:2d:df:7c:e1:af:93:76:98:0b:b3:8a:ef:07:c4:f2:70:
         71:5e:8f:e3:d3:53:c7:f6:44:d6:9e:c5:42:30:aa:49:76:3e:
         e3:b6:c4:e8:1d:cf:4e:e3:22:b3:be:a3:08:1e:34:9b:12:2d:
         a2:36:9b:87:ac:74:f4:32:d7:8a:7c:d1:57:60:d2:c5:a7:b6:
         5c:9d:3c:f5:44:6b:60:f1:3a:f9:44:c6:13:85:f7:60:91:34:
         c7:74:97:e9:d6:b0:b9:cf:a7:4c:00:63:32:1b:2c:ca:de:d2:
         ac:2c:20:5c:a1:4d:70:ad:bb:18:f4:ea:61:f1:8d:81:e4:37:
         6e:3d:cf:1f:a8:b5:d0:ed:2c:83:be:b0:03:e8:0f:5f:31:35:
         94:b4:9e:cd:67:ba:96:f9:87:e7:05:09:01:45:5e:86:2f:1c:
         8d:8e:0f:ec:79:cd:4e:9c:20:3a:0c:8f:95:69:24:48:9f:35:
         25:99:ad:91:b2:3f:b9:9a:ed:4d:87:80:54:f3:68:cd:62:47:
         f0:6a:75:4c
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIGAIDG7vdLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjEw
MTAxMDUwNDI3WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMzg5OTc1NWRk
ZjU4ZDU2NTQxYTY3MzQwNjFmMmI2NmVhNzg1ODIzMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAnN/cOwHptHf6QN8Y4eENMzGjNLmU1+Q0tB3+KOOFm2gX
NwAH/s2TXp/vJdFFOhOirKXQJFuYdNoq+CKLgmXFCnrsb4Kz6ph0z9wT7qG2q73Z
rEVyuCN89Do05xnWJ9l21SilCsrP4DGhrHQ4uRDSM3IjwckLS/bs8izpy5eUz7TM
aYSnmdovVk8GEruOPv+AOOi+so5BsIyXiCf49IoTeQ2FCaszypuFY/VPDFmzoKun
UbdLZXwVZKbXl5w/3aUA+oGbSRXbwLjPB3iGQyYDmActl9hQ8RY2ayPfMuVspEmS
rP+ji2sn8oAKD1+UGBCDI9l8rtGYmJ3BxDakff/cNQIDAQABo4ICkzCCAo8wHQYD
VR0OBBYEFAOJl1Xd9Y1WVBpnNAYfK2bqeFgjMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzU1OTlhZC1jZmUxLTQyNjEt
OGQxYi00MTZlMGUyNjYyM2EvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNTU5OWFkLWNmZTEtNDI2MS04
ZDFiLTQxNmUwZTI2NjIzYS8xL0E0bVhWZDMxalZaVUdtYzBCaDhyWnVwNFdDTS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCLZrUMA0EAgACMAcDBQMqD9sAMA0GCSqGSIb3DQEBCwUAA4IBAQA/
+Y/klBCLE6/YaNXn1aSl4Gs79BvkbavjNd9QRdrBaXoZTwN/d0NXDESnjqIJGb+7
ySuoUkPpPC3ffOGvk3aYC7OK7wfE8nBxXo/j01PH9kTWnsVCMKpJdj7jtsToHc9O
4yKzvqMIHjSbEi2iNpuHrHT0MteKfNFXYNLFp7ZcnTz1RGtg8Tr5RMYThfdgkTTH
dJfp1rC5z6dMAGMyGyzK3tKsLCBcoU1wrbsY9Oph8Y2B5DduPc8fqLXQ7SyDvrAD
6A9fMTWUtJ7NZ7qW+YfnBQkBRV6GLxyNjg/sec1OnCA6DI+VaSRInzUlma2Rsj+5
mu1Nh4BU82jNYkfwanVM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:11 2023 by rpki-client on console-fra.rpki-client.org