Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F5JXzNX7AD8P6KqkM4SSR664ED0.cer
File:                     F5JXzNX7AD8P6KqkM4SSR664ED0.cer (raw, json)
Hash identifier:          S19gEBYuJ0DlaAKFD31ShWimILhUyHyg8SfQugQ7FH0=
Subject key identifier:   17:92:57:CC:D5:FB:00:3F:0F:E8:AA:A4:33:84:92:47:AE:B8:10:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       AA4F1B2226
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e9/013ada-2534-46e7-9f36-ad26def6de9d/1/F5JXzNX7AD8P6KqkM4SSR664ED0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e9/013ada-2534-46e7-9f36-ad26def6de9d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 15:07:09 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 193.22.251.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731471618598 (0xaa4f1b2226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 15:07:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=179257ccd5fb003f0fe8aaa433849247aeb8103d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:07:41:13:63:a5:95:90:eb:3d:ca:3c:0b:
                    bd:26:dd:01:f8:2a:49:44:13:de:59:ea:0f:84:8d:
                    a5:d2:76:98:54:cd:fc:b4:d5:be:51:0a:d5:52:d8:
                    01:17:3d:94:a8:a9:fe:ce:2e:ea:99:27:22:0f:0d:
                    5d:68:92:f3:6a:af:5e:4a:1d:24:1b:78:ff:e2:6a:
                    e3:e9:3c:54:29:5e:61:c0:82:30:a0:b0:92:08:7f:
                    58:70:b8:41:1b:fc:f6:a0:89:ba:7a:fb:5c:bc:da:
                    5d:b6:52:2d:45:95:7d:4f:80:6c:e0:2f:37:6e:7c:
                    95:60:89:ef:d7:3e:21:50:61:c7:23:7e:1c:83:32:
                    4e:f3:b6:b3:1a:fd:8f:c2:5e:9a:43:5f:72:2e:55:
                    9f:07:bf:5c:06:c0:b3:82:68:d8:36:a5:2b:fc:72:
                    13:6d:6d:dd:8c:03:9d:fb:a8:e3:f2:81:09:81:90:
                    e1:79:2c:fe:fe:37:15:12:77:17:fd:4d:5b:21:f8:
                    d1:99:0e:6f:37:7c:9f:fd:2a:05:87:29:47:03:e5:
                    fc:7d:28:df:ee:1c:69:2a:a3:34:b6:03:08:a5:99:
                    1a:68:b8:21:2c:41:27:df:76:45:60:50:f8:19:c1:
                    ec:35:62:4e:8a:e2:9d:23:1c:ee:d5:95:5a:d8:3c:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:92:57:CC:D5:FB:00:3F:0F:E8:AA:A4:33:84:92:47:AE:B8:10:3D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/013ada-2534-46e7-9f36-ad26def6de9d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/013ada-2534-46e7-9f36-ad26def6de9d/1/F5JXzNX7AD8P6KqkM4SSR664ED0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:32:83:95:e1:46:80:01:41:f6:e8:78:e3:5b:b3:af:6d:dd:
         29:0e:55:b6:c0:41:89:55:b9:7a:bd:ed:ee:ec:48:8b:ec:5d:
         46:66:ca:b6:87:3d:b4:2a:a4:71:27:5c:8c:55:07:eb:5f:03:
         65:ae:f5:16:8e:06:6d:0d:11:d8:4f:1f:0f:10:28:06:05:c3:
         d3:d0:b8:a9:ec:77:be:50:64:af:ac:10:ee:85:10:ea:19:94:
         58:34:46:69:2e:ef:b8:78:15:b9:ed:9f:8f:e6:86:5d:c9:d6:
         da:1e:3e:41:c6:8c:dd:21:3b:2f:86:fb:da:8b:b7:1d:59:ec:
         43:07:17:e8:d9:12:c7:c1:b5:51:80:27:45:e2:22:c1:2c:fb:
         a2:ed:35:d3:5b:c6:13:f9:f2:92:50:38:04:6d:26:b6:55:7f:
         b1:50:0f:e4:22:40:95:47:ab:54:e5:90:67:be:3f:b4:57:ac:
         3d:2a:fa:7d:50:96:f1:79:71:6e:f9:e0:08:a1:3e:e8:26:bc:
         8a:90:d5:6f:2d:fe:af:29:60:04:be:eb:ae:bc:10:25:dc:23:
         c8:44:b2:4d:82:8b:1f:bc:55:46:cc:7b:05:31:e1:b5:f3:f4:
         ea:23:c0:63:80:e7:c2:8c:29:9d:fe:94:6c:cc:06:b2:b5:47:
         2a:ad:dd:86
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIGAKpPGyImMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTUwNzA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxNzkyNTdjY2Q1
ZmIwMDNmMGZlOGFhYTQzMzg0OTI0N2FlYjgxMDNkMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsFYHQRNjpZWQ6z3KPAu9Jt0B+CpJRBPeWeoPhI2l0naY
VM38tNW+UQrVUtgBFz2UqKn+zi7qmSciDw1daJLzaq9eSh0kG3j/4mrj6TxUKV5h
wIIwoLCSCH9YcLhBG/z2oIm6evtcvNpdtlItRZV9T4Bs4C83bnyVYInv1z4hUGHH
I34cgzJO87azGv2Pwl6aQ19yLlWfB79cBsCzgmjYNqUr/HITbW3djAOd+6jj8oEJ
gZDheSz+/jcVEncX/U1bIfjRmQ5vN3yf/SoFhylHA+X8fSjf7hxpKqM0tgMIpZka
aLghLEEn33ZFYFD4GcHsNWJOiuKdIxzu1ZVa2DyiYwIDAQABo4IChDCCAoAwHQYD
VR0OBBYEFBeSV8zV+wA/D+iqpDOEkkeuuBA9MB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzAxM2FkYS0yNTM0LTQ2ZTct
OWYzNi1hZDI2ZGVmNmRlOWQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMDEzYWRhLTI1MzQtNDZlNy05
ZjM2LWFkMjZkZWY2ZGU5ZC8xL0Y1Slh6Tlg3QUQ4UDZLcWtNNFNTUjY2NEVEMC5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwRb7MA0GCSqGSIb3DQEBCwUAA4IBAQAkMoOV4UaAAUH26HjjW7Ov
bd0pDlW2wEGJVbl6ve3u7EiL7F1GZsq2hz20KqRxJ1yMVQfrXwNlrvUWjgZtDRHY
Tx8PECgGBcPT0Lip7He+UGSvrBDuhRDqGZRYNEZpLu+4eBW57Z+P5oZdydbaHj5B
xozdITsvhvvai7cdWexDBxfo2RLHwbVRgCdF4iLBLPui7TXTW8YT+fKSUDgEbSa2
VX+xUA/kIkCVR6tU5ZBnvj+0V6w9Kvp9UJbxeXFu+eAIoT7oJryKkNVvLf6vKWAE
vuuuvBAl3CPIRLJNgosfvFVGzHsFMeG18/TqI8BjgOfCjCmd/pRszAaytUcqrd2G
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:29 2024 by rpki-client on console-ams.rpki-client.org