Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VDFirBrSa5wVlTfH5VX7PTiJ3lA.cer
File:                     VDFirBrSa5wVlTfH5VX7PTiJ3lA.cer (raw, json)
Hash identifier:          07Qc9jUWzJtqV9ATvW0d9RDTqfKZBC5TAvcCE8WX5ls=
Subject key identifier:   54:31:62:AC:1A:D2:6B:9C:15:95:37:C7:E5:55:FB:3D:38:89:DE:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       9FE7864CE1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/15/c83f28-8a86-4c19-89f7-6e5e053a7ba9/1/VDFirBrSa5wVlTfH5VX7PTiJ3lA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/15/c83f28-8a86-4c19-89f7-6e5e053a7ba9/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 01 Jan 2022 06:06:50 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 195.226.223.0/24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686784138465 (0x9fe7864ce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:06:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=543162ac1ad26b9c159537c7e555fb3d3889de50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:9b:3d:18:1a:ca:dd:8f:6f:bf:0b:b8:12:
                    50:14:81:bb:47:3c:eb:84:80:a6:ac:2d:54:8c:f2:
                    86:99:0f:ae:19:a4:f8:f1:10:61:80:32:99:9e:4d:
                    d3:10:98:c9:64:ff:69:60:4f:fe:e7:e5:a6:09:08:
                    d1:fa:27:87:d7:93:e8:f0:59:f9:80:78:4e:98:2f:
                    ee:5f:90:15:e8:66:2b:97:80:39:37:e1:27:fd:b7:
                    4b:99:9a:22:cb:ce:71:c2:ab:44:62:4d:27:a4:4e:
                    16:93:82:fa:12:b3:22:b4:5e:06:50:e1:9d:ff:31:
                    e8:13:25:42:fb:e0:01:79:df:a8:1c:2b:96:4a:7a:
                    f1:d6:9d:2a:6c:7d:3a:5f:36:2b:c6:70:03:10:03:
                    43:bc:bb:7f:f5:3a:c8:c8:21:3c:36:f7:b9:2a:3b:
                    0c:73:1e:6a:72:b2:7e:23:28:fd:af:40:8b:e9:36:
                    13:24:f4:0f:d5:09:92:0a:02:2f:d2:26:a2:2f:5b:
                    60:b9:8f:26:8c:04:1f:1c:d1:e9:d4:46:88:84:17:
                    3f:7f:a2:48:84:a8:f3:3a:53:7b:6e:3e:51:cb:ec:
                    ef:55:6b:af:d6:1f:32:2a:4e:0d:f6:0d:c2:aa:fe:
                    78:44:fe:fb:fc:eb:5d:52:1c:44:9d:a1:f1:f7:91:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:62:AC:1A:D2:6B:9C:15:95:37:C7:E5:55:FB:3D:38:89:DE:50
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c83f28-8a86-4c19-89f7-6e5e053a7ba9/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c83f28-8a86-4c19-89f7-6e5e053a7ba9/1/VDFirBrSa5wVlTfH5VX7PTiJ3lA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.226.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:93:59:5b:7a:8f:5a:0f:26:3e:46:08:0e:ee:46:ff:03:85:
         b5:88:35:f2:9a:cf:c7:06:16:b2:6a:df:71:aa:27:2b:85:38:
         cf:d9:bf:b4:ea:82:3a:61:18:dd:37:73:19:c9:4b:2f:61:81:
         c4:e9:2b:b3:b2:df:5f:1b:f6:10:f6:18:91:bf:94:c7:0e:2c:
         ac:be:fb:31:f4:73:ce:a1:cd:87:d9:d3:f6:3f:8b:09:49:dd:
         05:98:d2:5c:cb:ef:e5:52:18:96:2f:e8:b7:f9:a2:62:e6:37:
         6f:2a:bd:a3:51:47:09:64:05:ed:4d:72:f7:bb:00:8b:61:25:
         95:e5:00:9f:8d:cf:be:e6:11:3d:68:87:fa:97:28:88:f0:a5:
         75:01:5d:21:d8:46:94:0c:f9:52:e3:6e:aa:ec:17:22:73:e4:
         86:02:ea:ef:ea:b0:c2:a8:ef:b3:b9:27:83:3d:5d:e5:cc:96:
         ae:01:44:d2:14:ff:7a:da:31:3d:40:dc:1f:44:3d:12:2a:60:
         b9:d3:71:3b:d2:5e:b2:62:03:51:ec:f1:d0:72:aa:fb:ad:b2:
         70:c0:14:c7:69:66:c6:74:e9:2f:a5:57:f3:9b:a9:b8:f2:d1:
         24:64:75:c3:ee:a8:e6:39:cc:51:b6:b9:ff:5a:27:f2:25:78:
         4a:ca:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:23 2024 by rpki-client on console-fra.rpki-client.org