Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eZuRieI58d6kejCBJZnFUMCw5hQ.cer
File:                     eZuRieI58d6kejCBJZnFUMCw5hQ.cer (raw, json)
Hash identifier:          N0Iwij6kXOYi3dUAwSGFePRpk36eI9SjGZQivRe1PgU=
Subject key identifier:   79:9B:91:89:E2:39:F1:DE:A4:7A:30:81:25:99:C5:50:C0:B0:E6:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018318CDDCF8934EBA283D80CE1524E42EDC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/180984-ebdb-4c62-9dac-fbc9ded621dd/1/eZuRieI58d6kejCBJZnFUMCw5hQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/180984-ebdb-4c62-9dac-fbc9ded621dd/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 07 Sep 2022 16:34:48 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a01:6c40::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:18:cd:dc:f8:93:4e:ba:28:3d:80:ce:15:24:e4:2e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep  7 16:34:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=799b9189e239f1dea47a30812599c550c0b0e614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:9f:8f:ff:fe:72:6c:b6:f3:b7:cd:8e:9c:
                    07:03:cc:c4:39:43:55:b1:0c:fc:f9:26:3f:36:b2:
                    c5:08:c0:8d:ff:46:50:3a:ea:3b:bd:a2:0a:2d:1a:
                    ed:1d:16:eb:8f:9d:cd:42:f2:c1:55:77:7f:83:df:
                    30:f0:43:fb:2c:85:65:c0:c2:d4:b2:be:e6:21:3f:
                    1a:a2:11:04:f3:c9:b6:51:6e:8e:7f:c9:96:6f:2f:
                    e3:75:cb:c1:49:b6:a7:e0:e6:ee:78:ff:12:f9:6b:
                    b0:59:1d:af:fb:28:9b:e9:68:80:96:60:15:27:b7:
                    03:50:f1:ae:4a:eb:19:63:6c:16:6a:77:db:07:4c:
                    5f:e7:74:74:1c:ea:c5:e3:06:25:56:0a:a5:bb:5f:
                    47:f9:9b:6f:e7:92:e2:95:67:3a:f1:2e:7a:23:03:
                    d5:87:d6:0e:be:13:d7:f2:84:aa:41:44:d0:72:bd:
                    58:00:36:fe:a6:33:69:6a:d7:46:fb:4e:f3:10:41:
                    c1:f2:e4:4b:8b:07:e3:37:bd:e8:2c:35:46:28:53:
                    16:9d:05:79:d0:44:ae:cf:73:d8:5c:94:00:eb:53:
                    86:63:7a:0e:59:37:4c:b7:d8:cf:2e:e5:e7:77:50:
                    28:20:cb:31:b8:ee:46:93:68:1d:af:f2:c2:ae:8f:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9B:91:89:E2:39:F1:DE:A4:7A:30:81:25:99:C5:50:C0:B0:E6:14
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/180984-ebdb-4c62-9dac-fbc9ded621dd/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/180984-ebdb-4c62-9dac-fbc9ded621dd/1/eZuRieI58d6kejCBJZnFUMCw5hQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:05:6c:62:4a:b3:32:9a:4e:c4:b7:c2:ca:a5:13:9a:56:36:
         35:fe:a6:bd:11:a5:16:67:c8:09:09:98:e7:b6:89:55:13:0e:
         26:08:86:ed:d1:5d:d8:7e:b5:f3:15:43:d3:d8:21:fa:2c:f9:
         b8:86:f5:40:2d:ef:f2:82:2b:35:03:2d:d9:44:f6:07:07:35:
         72:3d:db:0c:18:94:b7:e5:77:51:b9:fa:9c:1c:95:a1:16:60:
         83:66:af:e4:a5:09:c2:a9:e4:75:30:24:a5:66:85:d3:52:93:
         89:f5:ea:15:a9:b0:5d:f9:a2:a0:74:f5:1b:9c:9d:85:43:06:
         56:2c:d8:79:ad:fc:7b:ae:98:9d:bd:d7:ac:52:b8:3d:4d:f9:
         4d:e3:5f:c2:29:bf:68:a6:26:63:16:f3:21:f3:ee:9a:c6:0a:
         06:26:4d:1b:b0:69:b7:c8:7d:39:45:75:51:9b:2e:01:c9:83:
         b3:e1:23:a0:00:06:24:34:a7:dc:44:63:38:99:7e:cb:39:1a:
         15:4b:23:74:b4:72:ac:cf:22:85:2c:d3:17:fe:80:fd:ab:e0:
         a4:cd:d5:8f:64:e4:4e:35:dc:75:36:fb:ce:15:a7:f1:34:75:
         6d:c1:5d:be:27:81:be:ed:5e:46:54:c1:42:23:be:05:ff:70:
         20:a6:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:39 2024 by rpki-client on console-ams.rpki-client.org