Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FaisMPQi0sun76NUXQ6T167IdBg.cer
File:                     FaisMPQi0sun76NUXQ6T167IdBg.cer (raw, json)
Hash identifier:          XGwMfvF7cfS3eKZ0ThbIKXMI4cIblTJu3sR0agKRxCo=
Subject key identifier:   15:A8:AC:30:F4:22:D2:CB:A7:EF:A3:54:5D:0E:93:D7:AE:C8:74:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A143A4074C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/31/c4fc23-d19e-4130-a081-a9e87599df54/1/FaisMPQi0sun76NUXQ6T167IdBg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/31/c4fc23-d19e-4130-a081-a9e87599df54/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 07:54:21 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 208398
                          IP: 2001:678:ae4::/48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692624557900 (0xa143a4074c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:54:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15a8ac30f422d2cba7efa3545d0e93d7aec87418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0d:05:5f:af:c2:bf:ed:b2:db:b2:b9:4b:1f:
                    0b:87:d4:eb:a2:47:e2:0c:bb:1e:e9:c7:df:36:8a:
                    84:98:54:3b:96:ab:ba:11:2c:64:6e:17:f7:34:6f:
                    46:e5:a9:67:27:57:d2:7e:82:0d:74:aa:29:da:ac:
                    84:ab:38:69:96:1b:75:a5:8a:14:10:a0:45:1e:e7:
                    3d:57:db:06:8a:cf:42:cb:b3:6d:3e:34:02:37:d2:
                    4a:93:aa:0f:14:53:18:fc:91:36:ef:35:b4:83:bc:
                    ab:63:34:eb:ba:0b:c3:aa:10:67:a8:3d:a4:4e:fe:
                    d5:4c:83:59:3e:2f:0c:70:5a:e9:56:6d:83:e0:8b:
                    4c:2f:b6:bb:8c:d2:f4:ad:96:94:6e:c6:0d:26:c8:
                    bc:70:9b:6f:16:d7:71:3d:97:82:e3:04:b0:36:90:
                    b4:01:78:b6:fc:f0:7b:ec:f2:7c:89:19:78:89:cf:
                    68:29:dc:b5:26:3c:df:19:c1:7f:a2:53:b2:55:9f:
                    70:cf:8a:21:0d:c2:ca:79:d1:66:ad:e3:9f:45:c3:
                    ef:15:98:fe:98:dc:8b:9a:a5:04:cb:99:75:e8:65:
                    91:9c:d6:6f:1d:db:be:c9:68:89:fa:c6:14:6e:00:
                    3d:e7:c7:6b:b8:27:ee:82:f9:db:cd:dd:8e:2d:f8:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A8:AC:30:F4:22:D2:CB:A7:EF:A3:54:5D:0E:93:D7:AE:C8:74:18
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c4fc23-d19e-4130-a081-a9e87599df54/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c4fc23-d19e-4130-a081-a9e87599df54/1/FaisMPQi0sun76NUXQ6T167IdBg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ae4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208398

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:69:26:4e:8c:81:74:c9:2b:75:b6:c2:04:0f:8d:5e:d0:
         7c:d6:36:01:47:d8:00:f2:88:bd:26:3b:cd:da:75:71:69:48:
         17:55:43:52:6d:c2:50:28:d8:92:18:2a:8d:1f:9b:b7:80:4b:
         a9:90:89:ce:50:fa:31:74:82:cb:ca:43:1e:25:b7:a8:3c:9a:
         c9:e2:42:5e:98:f7:78:4a:6e:ba:bf:9e:09:99:89:c4:d4:df:
         f0:f9:fd:ce:0b:89:76:d2:43:4f:63:5f:e8:eb:0d:d4:ca:73:
         5d:a9:e1:8c:35:e9:97:39:1a:85:50:e2:a7:b8:9c:ca:15:d1:
         b5:07:a7:20:5c:a3:7d:22:4a:a4:60:57:7c:5b:e5:c3:3a:ad:
         8f:f8:b6:59:f6:72:ed:f2:be:9e:d3:b8:27:52:53:8c:33:82:
         46:09:49:c1:04:8b:7c:7b:95:39:e1:b4:b2:dd:64:81:ba:73:
         aa:93:71:76:34:53:80:ce:64:01:3f:37:de:71:b1:72:fc:57:
         b0:b1:c4:2a:c8:23:e6:88:22:ce:c0:9a:d3:9a:5c:2d:28:93:
         c1:e3:67:cb:1c:a4:b6:12:fc:22:97:4b:17:e0:f1:b5:7e:9c:
         5c:96:07:81:82:54:e9:99:ba:2b:ba:ee:e1:2b:b3:41:9a:3e:
         8b:ba:59:0d
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIGAKFDpAdMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDc1NDIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxNWE4YWMzMGY0
MjJkMmNiYTdlZmEzNTQ1ZDBlOTNkN2FlYzg3NDE4MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAjg0FX6/Cv+2y27K5Sx8Lh9TrokfiDLse6cffNoqEmFQ7
lqu6ESxkbhf3NG9G5alnJ1fSfoINdKop2qyEqzhplht1pYoUEKBFHuc9V9sGis9C
y7NtPjQCN9JKk6oPFFMY/JE27zW0g7yrYzTrugvDqhBnqD2kTv7VTINZPi8McFrp
Vm2D4ItML7a7jNL0rZaUbsYNJsi8cJtvFtdxPZeC4wSwNpC0AXi2/PB77PJ8iRl4
ic9oKdy1JjzfGcF/olOyVZ9wz4ohDcLKedFmreOfRcPvFZj+mNyLmqUEy5l16GWR
nNZvHdu+yWiJ+sYUbgA958druCfugvnbzd2OLfjlDwIDAQABo4ICozCCAp8wHQYD
VR0OBBYEFBWorDD0ItLLp++jVF0Ok9euyHQYMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2M0ZmMyMy1kMTllLTQxMzAt
YTA4MS1hOWU4NzU5OWRmNTQvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvYzRmYzIzLWQxOWUtNDEzMC1h
MDgxLWE5ZTg3NTk5ZGY1NC8xL0ZhaXNNUFFpMHN1bjc2TlVYUTZUMTY3SWRCZy5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEGeArkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuDjANBgkq
hkiG9w0BAQsFAAOCAQEAIm9pJk6MgXTJK3W2wgQPjV7QfNY2AUfYAPKIvSY7zdp1
cWlIF1VDUm3CUCjYkhgqjR+bt4BLqZCJzlD6MXSCy8pDHiW3qDyayeJCXpj3eEpu
ur+eCZmJxNTf8Pn9zguJdtJDT2Nf6OsN1MpzXanhjDXplzkahVDip7icyhXRtQen
IFyjfSJKpGBXfFvlwzqtj/i2WfZy7fK+ntO4J1JTjDOCRglJwQSLfHuVOeG0st1k
gbpzqpNxdjRTgM5kAT833nGxcvxXsLHEKsgj5ogizsCa05pcLSiTweNnyxykthL8
IpdLF+DxtX6cXJYHgYJU6Zm6K7ru4SuzQZo+i7pZDQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-fra.rpki-client.org