Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IGTR3pcoZp9P3K9Mhu917kxHUR0.cer
File:                     IGTR3pcoZp9P3K9Mhu917kxHUR0.cer (raw, json)
Hash identifier:          MsK+8fe4gawCjpuiL5xgJvfgfAHhR0VPiEI8dFT1tn0=
Subject key identifier:   20:64:D1:DE:97:28:66:9F:4F:DC:AF:4C:86:EF:75:EE:4C:47:51:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01852F86B3B135444D8C89F200A69F42E92C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/44/5bda04-a277-4066-95ea-51e1769500d9/1/IGTR3pcoZp9P3K9Mhu917kxHUR0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/44/5bda04-a277-4066-95ea-51e1769500d9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 20 Dec 2022 12:33:55 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 204509

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2f:86:b3:b1:35:44:4d:8c:89:f2:00:a6:9f:42:e9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 20 12:33:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2064d1de9728669f4fdcaf4c86ef75ee4c47511d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:4d:c0:68:94:dc:f4:d5:d2:df:96:bf:69:
                    11:8c:95:29:21:bc:84:1e:f4:9c:bf:24:9b:38:cd:
                    ce:af:e4:ad:f3:8c:4d:8a:35:f6:7a:6e:d2:dc:cf:
                    d9:bb:c3:76:bc:08:40:89:aa:1f:b4:05:75:94:cb:
                    d0:f7:16:13:7d:5e:33:51:d3:c6:92:44:1e:24:97:
                    25:2b:fe:5f:8d:51:55:e3:30:d4:da:81:36:44:97:
                    94:c4:4e:ed:a4:f7:a8:69:57:e7:dc:6d:00:35:5b:
                    7d:76:11:b4:8c:70:77:cf:c7:b4:05:66:6b:b4:96:
                    72:8e:7a:97:33:61:72:ff:77:62:02:32:ee:1f:7e:
                    99:e0:90:2d:80:b9:3c:86:b9:7e:47:0c:28:9b:95:
                    2c:5d:7a:27:06:17:e4:89:d8:81:0e:dc:16:ae:6b:
                    40:54:41:86:50:e8:f5:62:7a:10:57:8f:f0:f7:6e:
                    69:89:f8:31:23:1c:5e:7e:a1:c6:d5:86:f3:11:c0:
                    5d:dd:d9:6a:a5:95:94:73:c4:9c:c8:ad:64:08:96:
                    6c:ba:7e:45:e5:3d:4a:e8:4f:33:74:e4:42:85:fa:
                    f2:18:db:3d:b2:cd:25:d1:3b:3b:59:b4:7b:17:ea:
                    f8:a8:2f:ae:e6:f3:0a:0d:6b:e5:ca:4e:b9:93:81:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:64:D1:DE:97:28:66:9F:4F:DC:AF:4C:86:EF:75:EE:4C:47:51:1D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5bda04-a277-4066-95ea-51e1769500d9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5bda04-a277-4066-95ea-51e1769500d9/1/IGTR3pcoZp9P3K9Mhu917kxHUR0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204509

    Signature Algorithm: sha256WithRSAEncryption
         a8:69:a5:b6:81:10:ed:6a:63:08:51:28:63:3d:8a:f1:31:04:
         41:e2:20:d3:72:9c:4f:89:de:ac:0a:9e:b9:0a:6c:85:c6:c9:
         44:43:9f:7d:3d:91:21:ce:c4:d5:47:47:09:73:b2:cd:9f:b0:
         44:25:f6:e3:1d:c5:65:56:c2:75:c4:e8:21:bf:01:93:d7:5f:
         c1:f0:b9:33:00:6a:de:c3:62:49:bb:45:aa:4d:d2:d8:80:46:
         83:f0:69:0b:78:e7:28:a6:06:86:a4:76:84:e7:26:4c:2d:23:
         f1:22:86:35:29:15:e5:a6:fd:22:f6:85:8f:a5:ab:69:86:80:
         7d:0e:4e:11:30:d9:3d:e2:03:95:45:21:f7:ca:43:a7:db:87:
         d5:d4:ae:2a:1a:7d:f1:39:89:a8:f1:b8:63:5b:a5:dd:d7:81:
         6b:8f:20:cd:5f:01:b6:85:47:4b:4b:8c:6e:e4:7e:13:81:7b:
         a9:e0:fa:bf:81:27:93:87:95:5a:94:02:2c:c2:81:44:f1:57:
         26:9e:e7:22:be:bd:7b:bd:10:39:b7:ac:8d:7e:8f:19:77:ea:
         49:35:02:fb:64:53:0c:ad:c5:b6:05:fb:5a:32:58:6a:ff:2f:
         73:7b:7c:9a:09:b5:1f:90:e4:29:1a:fc:20:32:87:a6:e7:05:
         ee:a8:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:18 2024 by rpki-client on console-fra.rpki-client.org