Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E49Da16v7Ig1yy8v-_7bUbCMTz0.cer
File:                     E49Da16v7Ig1yy8v-_7bUbCMTz0.cer (raw, json)
Hash identifier:          Np4s07Q/dVFEvab8cy9knl8+Vrvbff8q+oKv6tQncF0=
Subject key identifier:   13:8F:43:6B:5E:AF:EC:88:35:CB:2F:2F:FB:FE:DB:51:B0:8C:4F:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9E397FA3A9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7c/e73ec9-6e98-4972-8b83-8577bb93e83e/1/E49Da16v7Ig1yy8v-_7bUbCMTz0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7c/e73ec9-6e98-4972-8b83-8577bb93e83e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 05:00:33 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 6729
                          AS: 42505
                          AS: 43668
                          AS: 47893
                          AS: 47945
                          AS: 57415
                          IP: 91.197.184.0/22
                          IP: 185.155.88.0/22
                          IP: 185.225.196.0/24
                          IP: 2001:67c:15d8::/48
                          IP: 2a10:a480::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679569499049 (0x9e397fa3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 05:00:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=138f436b5eafec8835cb2f2ffbfedb51b08c4f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:8f:a8:b6:ba:dd:a7:60:0b:68:47:95:83:
                    92:9e:de:39:c6:71:b1:71:ac:f6:c0:52:47:84:e3:
                    90:3b:3a:30:e9:4a:ce:0c:50:16:86:b5:fe:d2:84:
                    88:a4:ff:0d:7d:d1:ee:4e:cf:e8:63:47:a9:16:ff:
                    a8:fb:b4:27:1c:8e:4a:86:10:47:7a:f4:18:db:b5:
                    47:e4:7e:de:ad:6f:3e:f9:f8:b3:35:64:9c:76:6e:
                    2f:2f:c7:24:20:d1:86:d3:c0:0d:87:47:6c:fe:7b:
                    9c:1d:4f:56:41:45:0f:f8:96:a6:28:77:f0:21:98:
                    c1:15:41:c3:2c:0f:5a:ca:11:79:c7:0c:45:9d:0a:
                    c6:71:cd:50:36:a6:90:15:a8:91:ab:33:e5:6f:1b:
                    f1:69:51:84:bc:65:ed:40:40:03:ca:4a:ac:05:16:
                    d9:50:59:f4:bb:6f:98:b7:59:d6:cd:18:e1:cb:77:
                    10:de:52:50:59:cc:5d:fa:65:3d:14:ac:6f:1c:9c:
                    55:7c:85:ce:08:cf:f0:e5:a0:75:b2:08:93:48:fe:
                    24:ff:ae:7d:fc:ce:3a:9b:2e:2f:ba:4f:95:44:e9:
                    92:00:69:ed:1d:3f:0e:c4:ff:8c:c1:c4:2e:f4:b8:
                    73:e7:90:e0:3f:8b:19:69:58:c9:e8:66:ce:51:af:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:43:6B:5E:AF:EC:88:35:CB:2F:2F:FB:FE:DB:51:B0:8C:4F:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e73ec9-6e98-4972-8b83-8577bb93e83e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e73ec9-6e98-4972-8b83-8577bb93e83e/1/E49Da16v7Ig1yy8v-_7bUbCMTz0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.197.184.0/22
                  185.155.88.0/22
                  185.225.196.0/24
                IPv6:
                  2001:67c:15d8::/48
                  2a10:a480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6729
                  42505
                  43668
                  47893
                  47945
                  57415

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:69:83:16:57:e9:a6:07:da:0a:d1:77:dc:f1:24:57:9e:
         7f:1a:c3:e1:28:4e:b3:2a:f8:8c:6e:81:52:46:09:86:3f:8b:
         95:96:b1:06:04:e6:b8:31:92:0f:41:74:b8:13:f8:7d:77:2c:
         7b:74:27:4d:6c:4e:86:e4:55:51:81:01:87:01:1a:65:64:7b:
         85:39:21:5e:1a:af:0c:27:0b:38:58:6e:80:61:b1:b4:9e:6e:
         04:78:cf:9e:e4:f2:ad:c3:53:d9:d7:e0:5a:cc:b7:c8:7a:c4:
         38:aa:84:71:fb:30:2e:36:5d:c4:a2:08:cf:89:eb:6a:d4:09:
         88:d2:b7:cc:6a:3b:31:bb:9c:7d:6c:5a:b8:a5:f5:1c:25:53:
         d7:4c:01:6d:46:a1:96:b8:86:3e:3f:8d:9d:6a:df:61:08:b6:
         7c:fb:f0:da:32:c4:f2:e1:d2:75:8f:fe:76:72:3c:8f:37:6e:
         56:c7:50:03:c1:d9:96:ff:69:17:73:a5:96:a9:a9:8a:25:6f:
         4f:6e:c6:59:d5:44:a6:e6:74:b0:2f:2e:b0:df:60:2b:b4:a9:
         84:bb:56:9c:d4:78:70:d8:8a:b6:04:4b:48:c4:88:0d:e1:4a:
         49:48:b0:71:f4:89:52:b6:37:ab:23:65:fc:73:b1:b3:3f:b6:
         8d:cb:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:10 2024 by rpki-client on console-ams.rpki-client.org