Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AGXOUuqW8D2zDkWEQg64Z0PfMDI.cer
File:                     AGXOUuqW8D2zDkWEQg64Z0PfMDI.cer (raw, json)
Hash identifier:          BDw8Pj12SI7Le1iiFHl4qUjDvwhLwnZnRRs5t1iUm3E=
Subject key identifier:   00:65:CE:52:EA:96:F0:3D:B3:0E:45:84:42:0E:B8:67:43:DF:30:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       7561C75AE5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6c/6a0cee-e8b7-4211-abfb-71285a953ec4/1/AGXOUuqW8D2zDkWEQg64Z0PfMDI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6c/6a0cee-e8b7-4211-abfb-71285a953ec4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 01 Jan 2021 00:04:23 +0000
Certificate not after:    Fri 01 Jul 2022 00:00:00 +0000
Subordinate resources:    IP: 92.119.40.0/22
                          IP: 2a09:b440::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504151628517 (0x7561c75ae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:04:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0065ce52ea96f03db30e4584420eb86743df3032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:26:9a:59:e0:28:77:04:a0:bd:a2:65:ce:
                    c0:74:8c:16:41:5a:75:25:67:7b:38:18:2a:15:85:
                    e7:ad:e5:7b:2d:c5:7b:5c:54:36:5f:0c:5f:93:48:
                    cd:dc:66:1b:01:ee:2e:15:69:73:76:cd:17:58:e3:
                    01:d3:f9:33:00:e2:cc:21:ba:f5:9d:f8:fa:35:47:
                    54:d2:47:97:2a:7c:26:8b:da:16:f7:61:f7:87:7e:
                    57:5a:6c:1b:91:af:52:d7:c5:af:70:f1:a8:52:68:
                    36:03:5e:44:33:be:a7:f8:80:f0:14:12:55:1a:28:
                    58:c1:1f:65:18:d9:50:fc:7e:a6:5b:31:f1:0b:1b:
                    80:fe:2c:5e:ef:e0:af:eb:2e:de:67:ea:70:6a:83:
                    ac:1c:e3:0e:f8:19:24:17:ea:69:55:f5:62:28:e2:
                    6b:f2:fe:87:cc:ad:fe:2c:08:a0:40:d8:7a:76:1b:
                    c9:44:00:cf:5d:37:81:65:0d:ea:a0:e3:f3:1c:e0:
                    ce:d2:c8:0d:8d:48:9c:6a:c0:32:e2:4d:b6:e6:11:
                    09:a8:a1:a3:8a:05:33:90:c3:93:65:7f:c0:4e:9b:
                    d7:48:ba:0e:8d:63:30:80:11:21:7b:79:74:0a:99:
                    84:78:46:ac:3e:a4:ae:3d:df:e4:6e:04:3b:56:ee:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:65:CE:52:EA:96:F0:3D:B3:0E:45:84:42:0E:B8:67:43:DF:30:32
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a0cee-e8b7-4211-abfb-71285a953ec4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a0cee-e8b7-4211-abfb-71285a953ec4/1/AGXOUuqW8D2zDkWEQg64Z0PfMDI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.40.0/22
                IPv6:
                  2a09:b440::/29

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:3a:42:bc:d6:c3:13:5a:a5:e8:81:9e:bf:48:19:4e:5f:
         57:d0:e4:74:4b:b2:80:1f:29:51:18:1c:70:2b:a7:6f:c2:31:
         3c:92:8c:8b:79:e0:77:67:63:50:db:0b:89:27:42:cf:ba:9a:
         f1:91:82:9f:e3:d2:5b:7a:a3:36:14:2e:33:1b:05:00:5b:42:
         50:17:f8:09:b7:e1:3e:37:96:0f:15:7f:94:6e:a7:ec:5a:9a:
         41:b1:f5:bf:29:4b:6b:3f:d4:75:49:f0:01:eb:57:96:81:d0:
         1e:ea:3a:af:4d:99:90:a5:19:da:c1:f4:68:f7:b2:2a:7e:b0:
         23:e6:53:b6:eb:4e:b0:77:ab:e1:64:c2:84:60:b5:95:d6:70:
         74:85:36:79:f7:48:61:24:75:49:59:c7:ad:69:29:15:47:fa:
         80:3f:20:a3:e0:89:b4:67:18:88:90:11:bc:ca:32:d8:3e:a4:
         59:3f:b9:de:b4:25:6e:cf:aa:c4:38:44:6b:cd:1d:f5:48:d1:
         bf:91:ac:f6:0a:98:28:eb:43:20:0b:f0:86:15:db:67:e7:d8:
         58:b3:28:51:9d:d4:7d:70:ae:35:92:68:19:f4:2f:0d:c3:fb:
         69:01:86:ec:e8:e4:b4:1d:4a:60:91:dd:df:bd:97:80:c5:80:
         a1:9a:65:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:11 2023 by rpki-client on console-fra.rpki-client.org