Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mvdt4adPjjgBsbnD_sBgzHENRP0.cer
File:                     Mvdt4adPjjgBsbnD_sBgzHENRP0.cer (raw, json)
Hash identifier:          idT/6eYX6XrpONHYLrSYie226zHDb7Tyu6eiIL7nTKE=
Subject key identifier:   32:F7:6D:E1:A7:4F:8E:38:01:B1:B9:C3:FE:C0:60:CC:71:0D:44:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       A61129DAF0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/38/9d7c4c-b47d-4f73-85d8-4bfed602bb88/1/Mvdt4adPjjgBsbnD_sBgzHENRP0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/38/9d7c4c-b47d-4f73-85d8-4bfed602bb88/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 11:57:23 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 194.24.188.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713252526832 (0xa61129daf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 11:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32f76de1a74f8e3801b1b9c3fec060cc710d44fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a5:bb:59:e7:44:c5:88:a8:2a:a0:78:86:c6:
                    70:b6:54:ae:10:a1:9b:e7:bc:6e:23:61:3a:b4:e5:
                    f9:65:17:af:2b:ad:c3:32:52:3c:ea:76:cf:29:7c:
                    b7:9d:71:64:4e:bf:5f:52:19:9f:85:cd:a7:6c:fb:
                    b7:4f:b8:7f:ac:84:7e:7e:47:12:80:88:90:eb:a4:
                    9c:3a:e5:93:61:ce:13:ec:5c:4c:b5:92:94:5a:54:
                    5c:53:12:e2:6c:2d:70:4d:6e:57:05:fa:86:9d:cb:
                    c7:56:a5:d6:47:b5:34:cd:1d:68:aa:e2:1a:d9:f2:
                    3a:a8:1f:ad:cc:e0:e9:92:70:b6:7a:b9:0d:8d:25:
                    6f:31:ad:8d:37:68:5a:bf:d6:30:b9:35:05:a2:a2:
                    3c:a3:74:a0:8d:36:b0:5d:42:a6:ce:83:68:e2:89:
                    55:2c:e7:c8:57:3c:b7:6d:8e:09:76:1a:30:d6:b1:
                    4d:80:65:1a:83:d4:a0:71:03:9e:62:f7:41:4d:13:
                    e8:54:52:14:bd:ae:fb:a0:4d:80:e6:2f:b8:7a:1d:
                    82:13:ec:0b:94:22:ac:24:94:7a:67:77:90:e4:c3:
                    83:d0:ef:31:f8:a2:68:92:24:7b:30:9a:bc:97:b4:
                    e3:2b:9b:4d:86:2d:b4:cd:f9:92:4d:4e:df:a1:fe:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:6D:E1:A7:4F:8E:38:01:B1:B9:C3:FE:C0:60:CC:71:0D:44:FD
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9d7c4c-b47d-4f73-85d8-4bfed602bb88/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9d7c4c-b47d-4f73-85d8-4bfed602bb88/1/Mvdt4adPjjgBsbnD_sBgzHENRP0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.24.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:e1:83:37:b6:5f:cc:7f:05:5b:65:9e:e8:5a:58:65:9d:fb:
         e8:a7:1f:29:6f:f4:4f:d1:4b:4b:8c:81:80:ba:d0:45:3a:11:
         81:1d:42:da:f7:3e:39:40:3c:ca:52:83:74:b4:5e:58:24:89:
         33:0c:ac:7c:97:9d:f7:c3:1e:72:9e:7a:4d:01:e3:0a:8f:22:
         14:7c:27:3d:3c:71:03:2b:46:fe:1d:3d:44:e7:2a:d1:cb:f7:
         39:b5:15:72:f5:a7:fa:89:17:4f:0b:03:34:0c:37:3b:60:7e:
         2c:c8:a3:95:96:bd:a0:7d:12:55:5f:41:f1:b7:58:a5:dc:18:
         83:e2:9f:d6:36:26:4a:4c:7b:cc:7c:c1:07:39:84:b2:1d:50:
         99:dd:82:ae:f4:a1:f4:f9:8e:5c:f7:7b:44:d7:76:0f:46:ae:
         ab:a3:ac:50:6d:bd:cb:7d:d5:2b:71:68:c9:fc:8f:02:23:09:
         d9:95:8f:44:45:3c:3a:6a:fe:31:54:61:81:80:01:6d:00:87:
         43:b7:1c:74:77:54:08:d3:6b:d5:7d:86:2f:4c:5b:7a:80:9f:
         eb:7c:d1:9e:32:8e:39:b5:a4:e9:b1:f2:83:87:b3:e2:c8:c0:
         d2:7c:7e:5d:90:d1:8f:76:25:21:d0:65:04:d5:41:64:d6:94:
         9e:29:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:05 2024 by rpki-client on console-ams.rpki-client.org