Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cN--AlEmeqejpa68Xk_D2JWKMI4.cer
File:                     cN--AlEmeqejpa68Xk_D2JWKMI4.cer (raw, json)
Hash identifier:          VMqEhU3EA3nlcUVIURbrNROCc6QH9k7AjDmlGpKw4Ro=
Subject key identifier:   70:DF:BE:02:51:26:7A:A7:A3:A5:AE:BC:5E:4F:C3:D8:95:8A:30:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01856CAD4446081638390E3FCEE0EDBC491D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/f6/d00835-4d62-4ee8-bdea-e48c4fec2886/1/cN--AlEmeqejpa68Xk_D2JWKMI4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/f6/d00835-4d62-4ee8-bdea-e48c4fec2886/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sun 01 Jan 2023 09:32:52 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 31015
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ad:44:46:08:16:38:39:0e:3f:ce:e0:ed:bc:49:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 09:32:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70dfbe0251267aa7a3a5aebc5e4fc3d8958a308e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:f0:fd:ef:df:a3:25:f9:66:4a:67:b6:58:
                    68:b2:28:be:72:b5:26:21:10:a8:4c:35:4e:eb:39:
                    4d:2c:5e:49:13:73:be:86:10:71:2d:1a:5f:f6:5d:
                    c0:44:55:e7:50:c4:11:c1:2c:f7:63:8a:3e:42:9f:
                    8d:b8:42:5f:f7:08:eb:c5:b7:38:3b:52:63:cc:4f:
                    9c:15:8f:62:bd:df:71:7a:13:c9:32:f1:ab:31:e1:
                    6f:eb:19:84:c8:ca:20:b4:7a:fb:3c:51:4d:ae:ab:
                    37:50:dc:6a:6a:b5:c7:f9:42:9a:d0:b2:ec:0a:43:
                    16:04:64:c2:67:2f:b4:02:dc:34:3e:84:e6:1e:20:
                    a5:8a:44:5f:a3:cb:f3:53:56:de:83:4a:92:22:24:
                    ac:4d:88:f2:10:9d:55:d9:e3:f1:47:a2:18:a2:bd:
                    74:ad:41:04:67:57:e8:28:e5:53:3f:28:c5:b4:f8:
                    9c:89:4a:ac:31:8d:b9:3c:ff:26:f0:e6:35:36:3e:
                    bc:cd:72:9c:72:36:2c:6a:82:dd:a1:42:70:24:92:
                    16:aa:e9:83:f5:ad:82:99:e7:06:a6:8d:25:71:88:
                    ed:a1:b2:19:be:00:a4:f6:8b:0c:65:22:41:a5:33:
                    9c:9a:58:89:58:72:e7:23:3c:fe:bf:5b:9f:a5:ac:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DF:BE:02:51:26:7A:A7:A3:A5:AE:BC:5E:4F:C3:D8:95:8A:30:8E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d00835-4d62-4ee8-bdea-e48c4fec2886/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d00835-4d62-4ee8-bdea-e48c4fec2886/1/cN--AlEmeqejpa68Xk_D2JWKMI4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31015

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:5e:29:76:bb:c1:e1:95:95:82:9b:5a:ca:9d:0f:30:47:
         3c:39:f0:b5:43:08:5b:a2:de:63:91:1d:d6:24:dc:14:ac:e1:
         9d:a2:90:b6:c6:f6:3d:c2:d5:45:f5:05:74:1c:6d:c4:cc:da:
         80:d1:53:d6:ef:6e:fe:43:66:be:94:6b:00:f2:d9:75:f0:ec:
         9f:15:36:0c:b9:23:d1:51:5a:bb:4c:8c:b2:61:dd:fa:a4:bc:
         f3:42:cf:c2:2c:25:62:b0:5e:c2:f6:53:2b:d2:71:c3:a5:95:
         ab:25:be:a7:d1:bc:25:1d:c7:1d:c3:52:cd:f2:3e:ca:f0:d8:
         00:b3:f1:10:be:56:fe:1f:1e:07:f6:2a:8c:db:6b:81:c8:6e:
         bc:be:30:4b:94:3b:8b:ac:46:36:a5:28:7f:65:c5:aa:38:94:
         de:46:d0:ac:11:f9:ae:7a:fe:57:4a:f2:07:92:35:e5:08:92:
         90:ea:ff:00:0a:70:63:65:a4:c4:5e:03:66:bd:de:96:bd:db:
         9f:f0:37:f5:66:49:16:52:40:7f:4f:5e:6d:3d:06:8e:85:d7:
         9d:e4:3e:df:99:22:22:15:ab:4d:2b:38:d5:cc:34:37:9c:11:
         32:5f:f1:48:07:67:0e:82:72:d1:0c:e5:ed:30:36:23:f4:60:
         d9:62:4f:8f
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAYVsrURGCBY4OQ4/zuDtvEkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDkzMjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGRmYmUwMjUxMjY3YWE3YTNhNWFlYmM1ZTRmYzNkODk1OGEzMDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaTw/e/foyX5Zkpntlhosii+crUm
IRCoTDVO6zlNLF5JE3O+hhBxLRpf9l3ARFXnUMQRwSz3Y4o+Qp+NuEJf9wjrxbc4
O1JjzE+cFY9ivd9xehPJMvGrMeFv6xmEyMogtHr7PFFNrqs3UNxqarXH+UKa0LLs
CkMWBGTCZy+0Atw0PoTmHiClikRfo8vzU1beg0qSIiSsTYjyEJ1V2ePxR6IYor10
rUEEZ1foKOVTPyjFtPiciUqsMY25PP8m8OY1Nj68zXKccjYsaoLdoUJwJJIWqumD
9a2CmecGpo0lcYjtobIZvgCk9osMZSJBpTOcmliJWHLnIzz+v1ufpawQZwIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFHDfvgJRJnqno6WuvF5Pw9iVijCOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2QwMDgz
NS00ZDYyLTRlZTgtYmRlYS1lNDhjNGZlYzI4ODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZDAwODM1
LTRkNjItNGVlOC1iZGVhLWU0OGM0ZmVjMjg4Ni8xL2NOLS1BbEVtZXFlanBhNjhY
a19EMkpXS01JNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAnknMA0GCSqGSIb3DQEBCwUAA4IBAQClWF4pdrvB4ZWV
gptayp0PMEc8OfC1Qwhbot5jkR3WJNwUrOGdopC2xvY9wtVF9QV0HG3EzNqA0VPW
727+Q2a+lGsA8tl18OyfFTYMuSPRUVq7TIyyYd36pLzzQs/CLCVisF7C9lMr0nHD
pZWrJb6n0bwlHccdw1LN8j7K8NgAs/EQvlb+Hx4H9iqM22uByG68vjBLlDuLrEY2
pSh/ZcWqOJTeRtCsEfmuev5XSvIHkjXlCJKQ6v8ACnBjZaTEXgNmvd6Wvduf8Df1
ZkkWUkB/T15tPQaOhded5D7fmSIiFatNKzjVzDQ3nBEyX/FIB2cOgnLRDOXtMDYj
9GDZYk+P
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:43 2025 by rpki-client