Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C1nJpRbjPL2iDBmS8x-SNeUQ76E.cer
File:                     C1nJpRbjPL2iDBmS8x-SNeUQ76E.cer (raw, json)
Hash identifier:          z4j4Y9nflpUgp6wXToPotbiB/SBAcszrHJcKwDyKlsI=
Subject key identifier:   0B:59:C9:A5:16:E3:3C:BD:A2:0C:19:92:F3:1F:92:35:E5:10:EF:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AA60E8FBA5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/b5/fd1428-cc5b-4220-9a4b-c3ec9141a950/1/C1nJpRbjPL2iDBmS8x-SNeUQ76E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/b5/fd1428-cc5b-4220-9a4b-c3ec9141a950/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:55:06 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.141.76.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731770321829 (0xaa60e8fba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:55:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b59c9a516e33cbda20c1992f31f9235e510efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:06:9c:d3:a1:a0:06:e6:1d:c1:51:10:eb:
                    10:03:6e:62:30:bb:1d:9a:af:55:26:46:e0:0d:92:
                    71:a9:ce:85:3f:f1:fb:ca:a2:74:57:57:2d:2c:74:
                    e4:3a:5a:78:8d:67:c9:2d:21:29:7d:b6:c4:67:14:
                    3e:f7:d8:68:fe:7b:36:07:7a:74:e7:e0:73:26:fe:
                    08:43:1d:b9:3b:4b:9e:be:32:2e:5b:32:7b:ab:d4:
                    72:8a:50:63:e2:80:0a:37:54:49:a1:d2:bd:38:7f:
                    20:57:56:09:44:b8:7a:37:cf:f3:ed:9a:ec:9e:09:
                    af:c6:94:8a:77:ae:81:d6:61:a6:7d:ca:0b:7f:ce:
                    4b:fb:be:d5:79:76:e1:d0:cf:86:2d:43:99:db:a1:
                    f9:3b:77:d9:27:1a:52:31:8e:aa:ec:8b:0f:39:fb:
                    11:02:f6:09:85:f4:04:79:85:1a:ad:aa:7f:05:14:
                    e7:44:d1:9e:da:87:dd:f3:35:4e:d8:9f:32:16:f8:
                    0e:95:30:30:a6:24:9a:85:0c:26:8d:49:08:44:03:
                    36:b3:68:5f:22:99:02:8e:c4:1a:e1:f4:0a:ef:f5:
                    3b:d7:6f:be:fd:62:5c:a0:ef:8d:0d:4c:6e:c8:54:
                    bb:75:d8:60:fa:bb:e4:f9:96:29:85:75:41:64:12:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:C9:A5:16:E3:3C:BD:A2:0C:19:92:F3:1F:92:35:E5:10:EF:A1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/fd1428-cc5b-4220-9a4b-c3ec9141a950/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/fd1428-cc5b-4220-9a4b-c3ec9141a950/1/C1nJpRbjPL2iDBmS8x-SNeUQ76E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:99:5d:e6:87:e2:80:1b:ca:14:0f:1d:83:ef:2f:70:7a:84:
         9a:06:88:d2:da:ae:c1:fb:64:ab:96:d2:a4:b6:fd:59:77:16:
         ef:0e:a2:aa:0c:98:ed:26:bb:58:e9:e1:0b:e5:be:56:67:21:
         9c:1e:e5:57:1b:9f:d9:44:c3:0c:f1:b5:8f:f8:68:00:44:25:
         30:2d:89:9d:6d:7a:74:73:a3:4c:7f:8f:39:7c:1b:3b:e4:9e:
         a8:b3:ac:ba:d1:9c:5d:de:65:63:6d:bc:51:28:1e:1e:eb:60:
         98:cb:0c:6e:48:97:fc:0d:7a:4e:77:95:30:f6:0e:c4:b5:15:
         ff:90:85:94:4f:8d:58:b8:4e:68:f7:8d:5f:15:d1:b4:fc:0a:
         4d:30:20:e2:50:cc:10:75:6d:d6:a7:d0:6d:c8:b7:ff:d1:69:
         93:1b:c2:25:8d:37:de:5b:54:70:59:ee:d2:20:03:80:1f:02:
         3c:29:db:8d:82:66:ca:ae:fe:7c:7a:e7:58:38:1b:56:ea:e4:
         23:0f:0f:b7:d2:67:98:a9:32:51:af:86:e2:ab:3a:f7:06:5e:
         ff:59:75:24:9f:a0:02:5c:57:0b:94:be:94:c7:98:52:39:37:
         85:13:37:a4:7c:80:6c:1e:ac:f9:4e:c9:72:c0:47:bc:d9:9c:
         78:35:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:29 2024 by rpki-client on console-ams.rpki-client.org