Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DluS9M7sIji4BCy1sNmQ4ZxVarI.cer
File:                     DluS9M7sIji4BCy1sNmQ4ZxVarI.cer (raw, json)
Hash identifier:          Mk5ylkVEoJ3JV9k7fCXt3fqDzbsFvlrs0jEw7DnioUc=
Subject key identifier:   0E:5B:92:F4:CE:EC:22:38:B8:04:2C:B5:B0:D9:90:E1:9C:55:6A:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018514533428B9D97F15DECD245EE3E2F689
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/225ff9-5df8-42aa-b2b6-ba902df1f8c1/1/DluS9M7sIji4BCy1sNmQ4ZxVarI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/225ff9-5df8-42aa-b2b6-ba902df1f8c1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 15 Dec 2022 05:47:55 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 200558

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:14:53:34:28:b9:d9:7f:15:de:cd:24:5e:e3:e2:f6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 15 05:47:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e5b92f4ceec2238b8042cb5b0d990e19c556ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:2f:7d:1a:4a:36:db:9c:cc:94:8b:39:6d:
                    6f:f4:f8:e5:af:86:fa:68:f3:5a:be:25:50:81:d1:
                    ad:21:f0:33:8f:77:61:94:36:4e:b9:48:5e:a3:a2:
                    fa:6f:45:db:c7:22:6a:46:6f:bf:0b:a8:27:51:39:
                    cf:23:9d:f8:00:e8:73:58:f8:13:fc:b4:f5:e8:d4:
                    e8:69:de:1d:88:23:37:f8:3e:d9:20:1c:72:7f:31:
                    fb:fc:f2:9f:eb:2d:c8:a4:ca:ff:3f:bf:8e:12:06:
                    22:1c:d3:b3:2e:c5:d0:f6:5a:75:da:2d:bc:ac:86:
                    d6:31:41:da:7e:32:6a:98:7e:51:96:63:33:30:7c:
                    89:54:d0:4a:37:eb:c3:80:ba:a0:e1:2f:7e:4a:68:
                    d8:e7:00:72:d1:ea:8e:b6:8a:49:9d:8d:13:a5:56:
                    0e:a8:ab:85:ee:04:03:a3:6c:43:05:f3:30:e1:98:
                    76:19:28:1f:89:62:ad:4d:3d:10:ee:c0:5d:b6:fe:
                    50:b3:5b:30:e1:45:ca:41:e4:c0:27:b4:cf:48:20:
                    6f:ba:96:c3:0d:c4:e7:00:23:d4:49:4c:23:3e:4c:
                    8b:6e:06:9e:9c:14:b2:31:f3:a8:97:d8:e3:43:e3:
                    92:cb:2a:2f:31:61:bd:b4:00:35:44:a4:61:c6:f5:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5B:92:F4:CE:EC:22:38:B8:04:2C:B5:B0:D9:90:E1:9C:55:6A:B2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/225ff9-5df8-42aa-b2b6-ba902df1f8c1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/225ff9-5df8-42aa-b2b6-ba902df1f8c1/1/DluS9M7sIji4BCy1sNmQ4ZxVarI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200558

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:3b:93:b3:88:81:d1:fb:5e:3b:bb:b3:22:f5:3b:b5:97:
         78:28:e7:da:40:7d:42:2a:c5:63:e6:bb:15:5a:01:19:ef:94:
         e1:3e:f0:aa:1a:bf:1e:28:70:1f:35:42:c4:4c:37:6d:e1:2f:
         64:a3:d8:b3:86:ab:6b:f9:e5:db:8b:f0:a0:6d:e5:6b:49:eb:
         43:cb:c9:d1:3e:fe:52:9c:2a:c0:d0:d8:3f:60:b7:2a:64:fb:
         96:fa:00:3b:1e:3a:41:b2:31:33:d3:02:c6:f3:76:26:35:bc:
         6e:27:27:fc:d8:a4:b1:25:d2:6e:21:dd:2f:12:ad:50:42:ad:
         ab:df:86:01:0a:7b:2d:3b:3e:8f:e8:5d:78:81:ba:b5:64:bb:
         f4:f1:ee:6f:65:41:0a:fc:d6:29:23:b5:1c:48:b6:88:52:16:
         6e:7b:b5:31:f6:29:3e:1d:19:5b:48:17:b5:75:90:9c:be:a7:
         12:b4:52:d4:bc:25:5a:26:ba:dc:e7:e8:75:fe:cb:93:74:48:
         05:58:76:c6:a4:3d:73:c6:02:f9:cf:96:6a:7f:31:04:02:ad:
         cc:3c:05:3e:e5:e4:84:a7:62:6c:8c:85:9f:51:4f:50:45:83:
         ee:af:19:d4:8b:d5:8e:73:42:1d:a5:f5:f7:45:fb:78:72:83:
         27:85:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:05 2024 by rpki-client on console-ams.rpki-client.org