Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/De-9TgBsF17-1lAqQ6rO7b9ekIQ.cer
File:                     De-9TgBsF17-1lAqQ6rO7b9ekIQ.cer (raw, json)
Hash identifier:          j50Y2wp4YSAn91DoJSFqLKeIE2OrztWulryBHsCrYvE=
Subject key identifier:   0D:EF:BD:4E:00:6C:17:5E:FE:D6:50:2A:43:AA:CE:ED:BF:5E:90:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0182ECCE962C811DBCDBA3C682FFDED83FC3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6e/a1ab21-6132-41dc-be8d-8504021d7e04/1/De-9TgBsF17-1lAqQ6rO7b9ekIQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6e/a1ab21-6132-41dc-be8d-8504021d7e04/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 30 Aug 2022 03:32:18 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 203083

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ec:ce:96:2c:81:1d:bc:db:a3:c6:82:ff:de:d8:3f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Aug 30 03:32:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0defbd4e006c175efed6502a43aaceedbf5e9084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:1f:ad:53:06:b1:52:d0:f0:65:e6:ba:bb:
                    0a:83:3b:f8:a6:79:6d:2d:89:4d:e9:65:a4:e2:be:
                    1b:55:63:8c:c5:4b:02:b9:73:4b:18:16:04:d0:01:
                    08:79:9f:2d:be:01:d3:29:25:ac:23:bf:0e:d3:82:
                    7c:5f:63:bb:d7:64:cb:ee:3c:3e:6a:35:7b:1f:b9:
                    a2:1c:31:4c:b9:f9:c0:24:aa:b7:11:a5:41:74:81:
                    8f:a7:75:32:d0:48:5f:a9:be:78:10:2f:96:70:9f:
                    19:41:f7:66:d5:2a:72:82:2b:4e:52:46:73:8d:0d:
                    4f:75:ef:0d:f9:9a:45:af:bf:49:e0:54:13:43:12:
                    55:7c:2c:9d:1a:5a:ee:11:ab:fb:33:0b:d0:8e:53:
                    e6:8e:d1:52:42:4e:26:12:7a:e2:0b:70:bd:c6:4d:
                    30:e2:a8:f9:7b:f2:b6:cd:1e:c9:b2:db:3d:5b:85:
                    6c:9b:2b:d2:ab:d5:b5:bb:fb:0f:10:95:1c:0c:86:
                    24:7e:bc:4b:17:32:7b:7d:69:80:f9:08:c3:e1:55:
                    06:20:2f:8c:6c:13:83:76:c2:a8:ca:7f:de:5a:0e:
                    c3:86:96:f7:d4:9b:1f:43:21:ff:9f:1d:eb:78:90:
                    d9:a5:01:47:90:8b:9d:75:67:17:1b:a2:7e:48:a1:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EF:BD:4E:00:6C:17:5E:FE:D6:50:2A:43:AA:CE:ED:BF:5E:90:84
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1ab21-6132-41dc-be8d-8504021d7e04/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1ab21-6132-41dc-be8d-8504021d7e04/1/De-9TgBsF17-1lAqQ6rO7b9ekIQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203083

    Signature Algorithm: sha256WithRSAEncryption
         91:a7:fb:6f:31:b2:72:af:da:f9:df:89:f3:ea:58:1d:30:3e:
         11:1b:f8:23:ca:2f:91:13:a1:56:8f:9c:78:2b:4b:48:99:2d:
         8b:78:74:a5:4f:39:71:80:83:94:02:a4:2a:d5:6f:4d:8d:46:
         4c:b7:d3:20:66:bb:18:3b:ff:ec:dd:f1:f6:d4:c8:d3:9d:a6:
         c8:04:82:1f:1d:b2:c7:14:85:dc:74:c2:ea:50:c2:99:75:81:
         3b:75:0d:a8:43:a0:d0:9e:01:c0:8d:7a:22:ad:36:09:a8:c3:
         b5:17:28:65:f1:1d:3a:c4:9c:c4:07:e1:45:73:3f:58:4a:1d:
         ca:93:56:af:58:99:39:aa:5c:28:f9:02:14:4c:79:eb:e1:49:
         93:1c:e1:d2:69:09:4e:cd:e4:39:dd:ea:ce:79:25:72:f9:83:
         6a:f2:fd:8f:58:f3:e1:ac:83:5b:a4:42:32:08:57:92:97:3e:
         92:f5:e3:7f:5f:89:2d:3a:9e:f4:1a:16:41:2e:50:98:ca:25:
         65:af:3f:37:b9:53:20:54:08:1f:bb:a2:dc:45:e1:44:7b:5a:
         4a:03:d9:d6:ac:5b:7a:ed:a9:b3:18:1a:10:b0:e4:a0:b8:a2:
         1c:ef:cf:c9:e2:fb:4a:05:85:a9:23:e6:50:83:b9:19:cb:d8:
         3f:45:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:13 2024 by rpki-client on console-fra.rpki-client.org