Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/brXGt5P1UMlg_fmlT-7psxc_Go8.cer
File:                     brXGt5P1UMlg_fmlT-7psxc_Go8.cer (raw, json)
Hash identifier:          gXaE7nLM/5DnI4hvUkZ79PHm7/WyW4us+d0bUhjit7w=
Subject key identifier:   6E:B5:C6:B7:93:F5:50:C9:60:FD:F9:A5:4F:EE:E9:B3:17:3F:1A:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018217F201FECF55B6A11274CBE6D1944ACC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/4c/56ec33-4af8-4232-9180-a21da8d46978/1/brXGt5P1UMlg_fmlT-7psxc_Go8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/4c/56ec33-4af8-4232-9180-a21da8d46978/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 19 Jul 2022 19:31:52 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 203852

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:17:f2:01:fe:cf:55:b6:a1:12:74:cb:e6:d1:94:4a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 19 19:31:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6eb5c6b793f550c960fdf9a54feee9b3173f1a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:e7:81:fa:37:83:1d:6b:e5:5e:67:bb:6a:
                    7d:94:f0:65:30:fe:22:cc:42:cd:9a:97:c0:4e:78:
                    84:63:da:4c:bd:74:c8:0c:bf:a9:c9:8e:ed:13:0b:
                    36:47:16:64:48:55:6e:cd:bc:e9:62:21:d5:e5:97:
                    c6:86:cf:2a:40:c3:c9:65:e7:a9:92:54:33:f2:0d:
                    bb:2d:8d:43:fd:1b:9f:31:19:e6:48:50:60:36:0f:
                    0f:1f:d7:12:ec:02:e2:47:d6:c6:68:24:b8:6c:5a:
                    41:4e:18:d7:c6:47:ec:3b:10:58:57:e2:33:d4:04:
                    06:cf:42:fa:01:a7:e3:24:57:b1:97:3c:f0:bc:9d:
                    43:26:7c:9f:4a:0a:31:1d:0f:2a:1d:27:da:22:06:
                    1d:90:1e:52:61:26:21:be:ad:6f:b9:2d:bb:20:e8:
                    31:1b:6b:f8:88:c1:8f:fd:27:ad:2d:50:84:a6:5a:
                    19:f7:f6:a2:f0:dc:44:55:25:be:ad:d5:9e:a7:4b:
                    13:e5:e9:85:14:1b:d7:b6:8b:18:9a:3a:e6:1b:bf:
                    24:d2:19:f2:0d:e5:8d:52:6d:88:7b:2d:00:e1:d9:
                    72:28:7a:ad:e6:28:b8:6e:1b:bd:1e:ad:f2:e2:db:
                    dd:63:28:23:ee:65:ec:a4:0c:fb:2c:b3:4f:e1:96:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B5:C6:B7:93:F5:50:C9:60:FD:F9:A5:4F:EE:E9:B3:17:3F:1A:8F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56ec33-4af8-4232-9180-a21da8d46978/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56ec33-4af8-4232-9180-a21da8d46978/1/brXGt5P1UMlg_fmlT-7psxc_Go8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203852

    Signature Algorithm: sha256WithRSAEncryption
         0b:96:6b:49:1f:4f:48:4c:51:cb:3b:d1:8d:9c:98:f4:1a:9d:
         ed:94:b9:8b:98:55:22:32:7d:8b:47:af:78:d1:f5:b6:a9:2d:
         52:9e:90:f1:91:a8:7f:57:0a:3a:d0:86:a6:1f:7f:79:7b:07:
         e7:c6:f0:89:60:0c:96:f6:4c:50:9e:a1:51:95:f5:fb:f0:cc:
         dd:25:16:a6:1d:f4:17:e6:08:5c:f6:2c:55:fe:cd:11:38:67:
         50:19:65:67:db:ee:82:32:71:e1:ec:3a:8c:7b:3a:7d:62:f8:
         6c:14:3b:78:e3:e2:21:bc:1e:83:4c:84:f9:3f:5b:00:66:5d:
         00:c2:b1:e2:93:11:b5:67:50:b7:bc:6b:bf:99:e7:6b:72:0d:
         cd:24:37:1a:0e:3f:b0:42:eb:c0:66:74:12:25:9f:a9:5b:03:
         fd:59:3f:2b:98:27:20:ca:3f:66:d6:0a:2c:64:03:fe:34:6b:
         97:30:81:1c:c1:d4:8e:62:4e:a5:a1:f5:47:c5:22:f4:3f:8d:
         52:4e:0a:86:22:a1:47:c3:4d:5d:9d:12:17:7a:52:83:07:f0:
         09:36:54:ad:a0:79:f8:ff:fe:36:72:0a:92:9f:31:05:f2:19:
         29:9c:43:09:9d:36:39:39:e9:f0:21:3e:d3:17:b6:ba:bf:8d:
         bc:c5:90:4d
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYIX8gH+z1W2oRJ0y+bRlErMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjIwNzE5MTkzMTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWI1YzZiNzkzZjU1MGM5NjBmZGY5YTU0ZmVlZTliMzE3M2YxYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy7ngfo3gx1r5V5nu2p9lPBlMP4i
zELNmpfATniEY9pMvXTIDL+pyY7tEws2RxZkSFVuzbzpYiHV5ZfGhs8qQMPJZeep
klQz8g27LY1D/RufMRnmSFBgNg8PH9cS7ALiR9bGaCS4bFpBThjXxkfsOxBYV+Iz
1AQGz0L6AafjJFexlzzwvJ1DJnyfSgoxHQ8qHSfaIgYdkB5SYSYhvq1vuS27IOgx
G2v4iMGP/SetLVCEploZ9/ai8NxEVSW+rdWep0sT5emFFBvXtosYmjrmG78k0hny
DeWNUm2Iey0A4dlyKHqt5ii4bhu9Hq3y4tvdYygj7mXspAz7LLNP4ZZK8QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFG61xreT9VDJYP35pU/u6bMXPxqPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzU2ZWMz
My00YWY4LTQyMzItOTE4MC1hMjFkYThkNDY5NzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNTZlYzMz
LTRhZjgtNDIzMi05MTgwLWEyMWRhOGQ0Njk3OC8xL2JyWEd0NVAxVU1sZ19mbWxU
LTdwc3hjX0dvOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMcTDANBgkqhkiG9w0BAQsFAAOCAQEAC5ZrSR9PSExR
yzvRjZyY9Bqd7ZS5i5hVIjJ9i0eveNH1tqktUp6Q8ZGof1cKOtCGph9/eXsH58bw
iWAMlvZMUJ6hUZX1+/DM3SUWph30F+YIXPYsVf7NEThnUBllZ9vugjJx4ew6jHs6
fWL4bBQ7eOPiIbweg0yE+T9bAGZdAMKx4pMRtWdQt7xrv5nna3INzSQ3Gg4/sELr
wGZ0EiWfqVsD/Vk/K5gnIMo/ZtYKLGQD/jRrlzCBHMHUjmJOpaH1R8Ui9D+NUk4K
hiKhR8NNXZ0SF3pSgwfwCTZUraB5+P/+NnIKkp8xBfIZKZxDCZ02OTnp8CE+0xe2
ur+NvMWQTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:18 2024 by rpki-client on console-fra.rpki-client.org