Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mg7HIMDpY6Azb84yaxeY2_riiTU.cer
File:                     Mg7HIMDpY6Azb84yaxeY2_riiTU.cer (raw, json)
Hash identifier:          Fr+YRZ6sWoV6/rF+7LGrOftT0BnWjzzNhVkA8KZH6fE=
Subject key identifier:   32:0E:C7:20:C0:E9:63:A0:33:6F:CE:32:6B:17:98:DB:FA:E2:89:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183CDDA45E675D67443C5CF1F50E0CC7A19
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5c/66431f-6e9b-4bf2-a471-85374c3345d3/1/Mg7HIMDpY6Azb84yaxeY2_riiTU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5c/66431f-6e9b-4bf2-a471-85374c3345d3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 12 Oct 2022 20:19:37 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 185.204.102.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:cd:da:45:e6:75:d6:74:43:c5:cf:1f:50:e0:cc:7a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Oct 12 20:19:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=320ec720c0e963a0336fce326b1798dbfae28935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:c1:00:eb:48:a9:88:14:54:c6:17:30:77:
                    f2:48:c8:2e:f5:36:eb:28:39:7a:2b:b2:6b:bf:f2:
                    0c:f7:25:4d:6c:ae:0b:40:c8:3e:0f:91:4d:c3:2f:
                    ab:78:26:1b:3c:44:5a:f9:0b:3e:18:de:87:31:53:
                    e9:a5:06:92:34:7e:ea:3d:87:0e:f0:f1:49:dc:0f:
                    1d:72:3b:a4:f3:63:0f:b0:7d:a4:01:ed:4f:31:9c:
                    cb:9c:0e:b2:96:0f:43:81:e7:c8:31:12:4b:b3:ec:
                    62:41:2d:b1:1b:74:87:53:f1:ce:0d:0d:87:94:60:
                    65:70:17:81:c4:96:61:d2:4f:4b:20:12:38:4c:c7:
                    7e:bb:3a:0b:14:1e:26:40:ff:2f:29:39:11:45:11:
                    bb:b4:20:fe:d7:84:4b:e1:07:fb:6a:67:15:82:db:
                    82:08:65:a5:60:d2:a2:c4:6c:9c:28:f3:76:7f:ce:
                    94:2b:52:03:6a:80:5a:e2:cf:62:05:40:79:2c:22:
                    4d:4d:e6:e9:d5:02:b5:24:ee:de:c3:7c:e3:04:e2:
                    18:d0:46:40:e4:b8:94:b5:a6:95:d0:de:cb:ae:c8:
                    38:f3:23:03:96:d1:a2:4a:3d:ee:7e:25:13:6b:2d:
                    6b:5c:ed:ed:35:ea:84:90:29:a8:1c:4a:5c:1a:1e:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0E:C7:20:C0:E9:63:A0:33:6F:CE:32:6B:17:98:DB:FA:E2:89:35
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/66431f-6e9b-4bf2-a471-85374c3345d3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/66431f-6e9b-4bf2-a471-85374c3345d3/1/Mg7HIMDpY6Azb84yaxeY2_riiTU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:26:38:02:16:a7:d2:a9:23:84:fc:9f:70:66:97:0f:dd:5a:
         0d:79:44:de:c0:8b:0f:1d:57:81:86:97:df:85:de:45:8c:24:
         8e:47:10:da:7e:8c:5e:9b:b7:99:90:0c:11:32:7f:ba:cd:47:
         c6:34:b7:c3:ef:cf:21:a7:71:c8:ac:a9:63:38:02:2e:60:7b:
         c3:6c:4b:c3:58:97:4b:60:72:05:2e:19:3b:74:cb:70:38:53:
         3c:28:3c:57:c2:b7:bd:bd:08:f3:42:bf:85:3b:04:cb:57:58:
         1a:12:df:cc:be:b7:6a:f2:62:2a:21:c6:5c:e7:79:bb:c9:40:
         22:98:fc:d0:01:10:e5:d9:3b:b8:2a:59:74:23:b7:c2:2b:3e:
         e7:3c:ea:ce:5a:9c:7f:5b:9d:41:a4:3e:c1:bd:cf:01:37:71:
         85:54:6c:56:cb:60:f6:3d:38:3c:a5:11:a8:25:9b:67:9d:46:
         0e:a5:40:80:d2:20:92:15:ad:e3:10:e5:4b:88:aa:b9:e8:e1:
         6d:41:ed:9a:4e:f8:97:88:52:d7:31:9f:d1:67:e4:34:f1:a7:
         87:2c:a2:ea:9d:19:72:f8:82:bb:15:60:f5:96:10:34:05:f6:
         e9:fd:9e:7a:ac:13:3c:76:da:ac:72:f8:d3:92:25:a0:1a:01:
         06:3a:16:ed
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYPN2kXmddZ0Q8XPH1DgzHoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIxMDEyMjAxOTM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjBlYzcyMGMwZTk2M2EwMzM2ZmNlMzI2YjE3OThkYmZhZTI4OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzETBAOtIqYgUVMYXMHfySMgu9Tbr
KDl6K7Jrv/IM9yVNbK4LQMg+D5FNwy+reCYbPERa+Qs+GN6HMVPppQaSNH7qPYcO
8PFJ3A8dcjuk82MPsH2kAe1PMZzLnA6ylg9DgefIMRJLs+xiQS2xG3SHU/HODQ2H
lGBlcBeBxJZh0k9LIBI4TMd+uzoLFB4mQP8vKTkRRRG7tCD+14RL4Qf7amcVgtuC
CGWlYNKixGycKPN2f86UK1IDaoBa4s9iBUB5LCJNTebp1QK1JO7ew3zjBOIY0EZA
5LiUtaaV0N7Lrsg48yMDltGiSj3ufiUTay1rXO3tNeqEkCmoHEpcGh5YgwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFDIOxyDA6WOgM2/OMmsXmNv64ok1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzY2NDMx
Zi02ZTliLTRiZjItYTQ3MS04NTM3NGMzMzQ1ZDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvNjY0MzFm
LTZlOWItNGJmMi1hNDcxLTg1Mzc0YzMzNDVkMy8xL01nN0hJTURwWTZBemI4NHlh
eGVZMl9yaWlUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAucxmMA0GCSqGSIb3DQEBCwUAA4IBAQAwJjgC
FqfSqSOE/J9wZpcP3VoNeUTewIsPHVeBhpffhd5FjCSORxDafoxem7eZkAwRMn+6
zUfGNLfD788hp3HIrKljOAIuYHvDbEvDWJdLYHIFLhk7dMtwOFM8KDxXwre9vQjz
Qr+FOwTLV1gaEt/Mvrdq8mIqIcZc53m7yUAimPzQARDl2Tu4Kll0I7fCKz7nPOrO
Wpx/W51BpD7Bvc8BN3GFVGxWy2D2PTg8pRGoJZtnnUYOpUCA0iCSFa3jEOVLiKq5
6OFtQe2aTviXiFLXMZ/RZ+Q08aeHLKLqnRly+IK7FWD1lhA0Bfbp/Z56rBM8dtqs
cvjTkiWgGgEGOhbt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-fra.rpki-client.org