Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/__TJXHvHqKfLnLtzGcgbCsqkaV4.cer
File:                     __TJXHvHqKfLnLtzGcgbCsqkaV4.cer (raw, json)
Hash identifier:          Z8pO4r2l5tBPuPw/vs6VP2lZBiFyjiIcxn+F1p9kdRs=
Subject key identifier:   FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183122BA5A746321A3FFC4525A919651AFE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/__TJXHvHqKfLnLtzGcgbCsqkaV4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 06 Sep 2022 09:39:53 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 57870

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:12:2b:a5:a7:46:32:1a:3f:fc:45:25:a9:19:65:1a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  6 09:39:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fff4c95c7bc7a8a7cb9cbb7319c81b0acaa4695e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:cb:21:5f:00:79:11:f7:07:fe:73:3c:d1:
                    ac:72:05:71:5e:b9:89:02:bc:0b:50:cf:b3:a3:b5:
                    fd:22:73:50:9c:3f:57:e0:e3:cb:66:03:20:2f:d9:
                    fd:dd:2b:6f:f6:ef:38:9b:4c:5f:b9:d8:be:bd:01:
                    68:43:09:4d:60:8f:32:9b:0a:b3:bf:aa:04:2e:71:
                    b4:94:9c:fe:47:1c:69:aa:4c:20:51:8e:16:2b:64:
                    18:ea:fc:80:6c:90:19:82:1f:35:6f:00:3d:29:55:
                    26:e7:7d:4d:55:01:fe:34:ca:e9:75:b5:da:74:bf:
                    ed:9c:67:b1:ab:6f:61:7a:18:d2:1c:1d:af:3b:1f:
                    29:2d:a8:94:e2:9c:e9:b8:d9:ac:53:7a:38:b9:f5:
                    4e:16:f8:8f:2d:73:88:7c:8c:25:38:de:8a:79:1d:
                    7b:08:30:33:b6:c1:44:0e:73:57:04:d2:59:4f:5f:
                    6e:fa:f2:19:98:bf:c4:0c:d3:04:92:32:a5:76:31:
                    9a:c0:d2:2c:ab:3c:e7:60:ba:e9:57:c0:8e:2e:a6:
                    14:ee:8e:d1:15:60:6c:9c:fd:a5:02:86:32:e9:3d:
                    cc:be:4e:85:30:0e:1b:48:44:7b:98:2f:24:da:9e:
                    72:21:5d:47:68:4b:a2:62:03:5d:6e:c1:b1:7a:fc:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/__TJXHvHqKfLnLtzGcgbCsqkaV4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57870

    Signature Algorithm: sha256WithRSAEncryption
         28:8e:f7:c2:96:10:ee:d3:a7:d5:26:f0:79:9a:ed:f3:5b:ce:
         6e:2d:f6:e4:10:63:dc:35:2c:11:22:fa:a0:40:c3:15:20:a5:
         9f:15:9d:96:92:65:5a:d9:c0:f9:fb:fb:22:2a:5a:b8:32:9d:
         21:c6:31:36:8d:bc:72:ad:96:c2:d1:09:04:5b:f6:28:46:ac:
         ce:c8:4b:b2:9c:88:46:fa:ee:98:e8:b1:7e:e1:2c:32:89:11:
         7f:db:3a:12:ad:f2:d1:1d:90:8c:1c:c1:83:27:0c:eb:8f:49:
         8b:e4:99:58:f6:58:0d:cd:9e:54:79:93:32:68:a7:5b:fd:81:
         8b:59:b8:2d:64:d9:66:dd:92:27:bd:c1:ef:f4:fd:7a:ee:72:
         fd:80:3e:da:af:16:1d:5f:28:91:25:14:56:ea:d0:3b:b8:4d:
         3c:e8:47:f1:76:c0:d6:36:6e:4a:6c:41:1d:91:cb:ab:f6:31:
         05:33:b5:19:ca:9c:d6:8d:aa:73:36:f2:07:8b:e7:52:c9:66:
         8a:da:15:55:05:80:a5:2b:b8:4d:cd:12:ec:aa:45:26:36:07:
         d4:6b:b3:e3:2c:42:94:a8:3d:e1:dc:cb:6a:b2:c4:65:b8:8f:
         c2:5d:15:7a:8e:45:d6:15:52:bd:6a:0b:8e:ab:5d:cd:6c:e1:
         dc:c5:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:34 2024 by rpki-client on console-ams.rpki-client.org