Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/__wT_rmikKCNIA1xnyyzGwwQWDs.cer
File:                     __wT_rmikKCNIA1xnyyzGwwQWDs.cer (raw, json)
Hash identifier:          TacLCylHozOA+HFoV9YmJyQimwq80qzL0vEjzVaPOd0=
Subject key identifier:   FF:FC:13:FE:B9:A2:90:A0:8D:20:0D:71:9F:2C:B3:1B:0C:10:58:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856C3F15B5A091F64F6699A9661A37A8DB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/6f/b5f2ec-b77f-4c8f-9e7d-e183342ea882/1/__wT_rmikKCNIA1xnyyzGwwQWDs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/6f/b5f2ec-b77f-4c8f-9e7d-e183342ea882/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 07:32:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 201554
                          IP: 185.71.84.0/22
                          IP: 2a05:30c0::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:3f:15:b5:a0:91:f6:4f:66:99:a9:66:1a:37:a8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 07:32:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fffc13feb9a290a08d200d719f2cb31b0c10583b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:2f:c5:d8:e3:6a:8d:96:df:58:45:47:56:
                    d4:15:8c:c7:2c:e1:10:d7:61:66:9e:47:8b:aa:b7:
                    a7:ad:48:82:87:07:73:3c:cf:f4:49:23:9d:18:64:
                    9d:93:e9:3d:be:71:ec:e7:89:d9:a7:50:7c:86:b6:
                    4c:18:d4:fb:ca:20:1a:c5:e6:ab:08:d1:e9:64:90:
                    03:e2:54:ed:c3:ac:11:f6:5e:b7:d1:42:c0:86:88:
                    fd:b6:2a:0e:5f:09:c8:f0:07:13:22:33:90:07:04:
                    80:08:27:d7:a1:d5:02:c1:c9:5e:7c:df:3e:78:ab:
                    32:d6:af:35:1f:6a:9f:04:f4:cf:15:b4:49:9f:9c:
                    f8:16:62:c5:90:9e:55:92:4a:5e:4e:35:b2:c5:de:
                    0e:ed:d7:bd:4d:e8:90:e2:62:73:d4:9b:2d:5b:5f:
                    19:25:de:e4:ba:97:78:97:a0:6d:20:e3:44:ea:6e:
                    ad:8e:48:51:c2:15:0f:76:dd:95:1c:8d:74:b2:08:
                    be:61:a3:c1:d7:fb:60:c7:83:c1:e3:91:47:d6:01:
                    c2:70:e7:c4:d4:af:47:55:7a:2d:a3:e7:4a:8a:3d:
                    df:3c:91:c6:99:71:5f:9a:62:c9:60:dd:6b:06:80:
                    7f:f5:e1:e9:67:dd:82:0c:b0:ac:53:b4:15:a8:f5:
                    a7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:13:FE:B9:A2:90:A0:8D:20:0D:71:9F:2C:B3:1B:0C:10:58:3B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b5f2ec-b77f-4c8f-9e7d-e183342ea882/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b5f2ec-b77f-4c8f-9e7d-e183342ea882/1/__wT_rmikKCNIA1xnyyzGwwQWDs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.71.84.0/22
                IPv6:
                  2a05:30c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201554

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:f2:2d:46:2e:32:46:a4:79:b9:c1:5b:0e:1c:85:4c:38:
         2e:3e:5d:b4:9f:e2:4b:c4:bc:bd:06:a6:2e:c4:e3:0e:a0:4a:
         1a:50:b4:fb:56:0c:c1:6b:2b:e3:02:c3:7a:0e:f5:07:92:76:
         98:b6:df:74:7c:8b:16:cd:f2:3b:8e:29:1b:d8:a6:10:5e:1e:
         73:de:c3:f2:ea:e7:ea:ba:cf:a7:f1:3e:d0:30:1a:9c:6b:4b:
         11:57:27:3f:5d:1e:a8:78:31:85:f7:57:f4:60:af:02:26:80:
         cb:1a:8d:54:7e:f1:5a:bf:62:3a:f1:f1:04:a7:98:de:83:67:
         45:63:66:df:f9:44:56:c7:41:74:d4:33:38:f2:fc:a6:75:55:
         79:5d:86:ad:9b:9c:a4:99:10:44:e5:d6:8a:76:09:d8:75:59:
         ff:22:c0:3e:46:be:6d:37:fa:12:5a:ca:99:22:aa:ad:8b:10:
         58:23:ec:79:74:06:c1:79:45:8d:41:37:07:3a:d7:78:92:0e:
         48:46:b4:75:d5:1a:ff:3a:27:42:fe:54:c1:f2:58:2b:cf:89:
         9f:6e:4c:31:d9:4b:80:57:eb:7a:d5:20:bb:68:36:55:9e:e6:
         57:0a:aa:c5:d6:32:da:3f:c0:8b:7f:e3:ef:87:99:2d:37:54:
         37:d7:87:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:56:04 2025 by rpki-client