Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c77kWdTUlGaIOEb4Ja5fqWcJDjg.cer
File:                     c77kWdTUlGaIOEb4Ja5fqWcJDjg.cer (raw, json)
Hash identifier:          mAaj5OywKk2ftP+e19zmDXs6Vs8+7Kg+UpKg+u+Rj0Y=
Subject key identifier:   73:BE:E4:59:D4:D4:94:66:88:38:46:F8:25:AE:5F:A9:67:09:0E:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0184F6D1F886027FCD9434852C4DD5C7EF6C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/68/156083-953d-48d7-83d2-bdcdab801b9b/1/c77kWdTUlGaIOEb4Ja5fqWcJDjg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/68/156083-953d-48d7-83d2-bdcdab801b9b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 09 Dec 2022 12:17:46 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 200676

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f6:d1:f8:86:02:7f:cd:94:34:85:2c:4d:d5:c7:ef:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  9 12:17:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73bee459d4d49466883846f825ae5fa967090e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:f3:0b:d7:ce:5f:ef:4e:5b:0f:2b:46:1c:
                    29:ed:e6:69:13:82:2f:c2:1e:cc:bb:b1:8e:54:e4:
                    13:5b:ea:11:68:49:01:88:82:f9:75:44:94:2c:01:
                    e4:ab:95:b8:c0:69:0f:33:c3:89:a0:1d:21:05:af:
                    3d:6c:30:85:f4:a1:d5:be:cf:67:24:d8:94:05:58:
                    0b:57:81:90:ce:ce:42:56:7f:b0:7e:39:4c:3f:1a:
                    e2:9c:0e:03:a9:7a:c7:b8:7a:68:c3:fb:89:ec:01:
                    ce:3c:47:4c:ff:a4:79:6b:26:72:7e:d0:c0:c6:bf:
                    1e:e0:ca:2b:d8:af:26:ee:4b:73:8f:37:9f:71:f0:
                    6b:61:0d:63:35:4c:15:5d:c5:7f:40:02:13:49:5f:
                    46:e6:33:05:33:42:ac:f2:fd:ee:41:36:91:bf:8f:
                    61:a1:46:4b:7f:a7:e9:50:39:f8:c1:6f:5a:b3:a8:
                    d8:86:6a:00:8b:1c:23:6b:8e:05:37:00:25:bb:07:
                    dc:91:f0:c9:b4:56:ce:9a:84:27:78:d1:eb:ea:ab:
                    a8:fe:73:fd:fc:1b:f8:46:63:f3:17:79:6c:eb:67:
                    3b:40:82:3e:96:b2:34:9f:6b:9c:0d:22:26:cc:5f:
                    d6:ae:fe:51:90:9b:ef:23:d6:77:5a:97:4c:65:07:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:E4:59:D4:D4:94:66:88:38:46:F8:25:AE:5F:A9:67:09:0E:38
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/156083-953d-48d7-83d2-bdcdab801b9b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/156083-953d-48d7-83d2-bdcdab801b9b/1/c77kWdTUlGaIOEb4Ja5fqWcJDjg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200676

    Signature Algorithm: sha256WithRSAEncryption
         95:08:b4:3b:9a:07:24:7e:a8:42:02:e8:b3:6d:bb:d3:a6:ad:
         ce:1d:60:3d:f2:25:8d:81:a3:1d:18:75:fe:83:6a:b2:af:32:
         9d:10:c7:47:a9:21:bc:d9:a3:12:72:54:d9:2d:06:7e:ad:a6:
         f2:69:28:0f:cc:92:7b:52:4f:93:44:42:b7:96:de:6a:c3:a7:
         70:2a:6b:21:17:d3:ff:77:d6:ee:78:15:4d:1a:a0:a4:21:47:
         06:e2:28:97:09:b8:7f:eb:3f:ea:8a:67:41:80:15:04:22:7c:
         07:e2:c9:91:82:7a:92:22:f2:b1:9b:09:47:41:df:66:b9:4c:
         8f:56:18:a4:c1:47:71:1c:f7:51:1c:fe:cb:64:f5:df:5a:93:
         4f:68:30:ae:7b:fe:9f:43:85:8f:c0:6e:fa:e2:77:a6:94:cf:
         25:b5:16:91:25:e2:24:fc:ea:8e:bd:f8:b0:2c:48:66:e3:78:
         4b:07:da:46:85:a8:a2:13:73:b2:9d:74:da:29:9d:54:80:6e:
         39:99:07:20:f2:a3:76:dd:c9:2b:4c:c3:b6:7d:b0:52:d7:48:
         6b:25:1b:49:d4:0f:75:50:f8:5b:09:38:d9:f5:dc:6c:85:a8:
         c9:4a:3f:4e:b8:a0:f2:27:1a:63:24:8b:58:fa:dc:45:30:53:
         fe:68:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:41 2024 by rpki-client on console-ams.rpki-client.org