Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j3x5Ro0q7PzxQoGrm7YHsc6Bb28.cer
File:                     j3x5Ro0q7PzxQoGrm7YHsc6Bb28.cer (raw, json)
Hash identifier:          rQj7CKjmIomSpkaLUwm9xfQf6bf+e07dtdjpphVdF98=
Subject key identifier:   8F:7C:79:46:8D:2A:EC:FC:F1:42:81:AB:9B:B6:07:B1:CE:81:6F:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0183380717FDE5E2DA3F6C51E6659E71371F
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1e/6e0cbf-b557-48e5-8436-e5beaec80962/1/j3x5Ro0q7PzxQoGrm7YHsc6Bb28.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1e/6e0cbf-b557-48e5-8436-e5beaec80962/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 13 Sep 2022 18:05:32 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 47540

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:38:07:17:fd:e5:e2:da:3f:6c:51:e6:65:9e:71:37:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 13 18:05:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f7c79468d2aecfcf14281ab9bb607b1ce816f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:51:33:16:50:41:1b:09:dd:63:ad:71:9d:
                    62:ef:fe:77:54:d2:0c:9c:a4:7f:90:95:c2:27:74:
                    b5:d0:33:ac:1e:10:e5:c3:d3:9c:0e:90:5e:3a:ec:
                    ae:e8:bf:73:9e:e7:fc:02:0e:be:c3:71:28:47:f2:
                    d7:1e:26:28:24:00:8d:00:95:b6:42:52:07:0d:97:
                    30:d1:f1:85:3d:fe:4c:25:b3:84:77:98:15:62:da:
                    3f:0e:66:8d:cf:69:93:49:60:41:d2:d0:fc:63:dd:
                    8e:60:69:ad:c3:a4:0f:f4:98:d3:b8:c6:eb:95:04:
                    e2:28:ce:8d:59:d4:71:87:3a:bf:56:c7:92:5b:9b:
                    bd:87:fa:67:92:6b:a8:4b:cf:1d:ec:ff:f5:0a:a9:
                    3f:cb:a4:9e:fb:f0:37:81:1e:a6:1c:04:c9:b6:15:
                    26:db:1e:49:44:43:4f:af:c9:eb:f1:0e:4b:5e:b6:
                    ff:b5:f2:7e:10:25:db:52:54:1b:5c:d9:08:ab:80:
                    a6:48:b2:a5:f6:ae:f7:87:6c:d2:24:e1:91:11:51:
                    f8:80:01:ff:4a:42:43:d3:4d:3a:45:48:77:c2:9e:
                    72:8d:24:db:2d:78:d4:c3:d9:dc:84:8b:70:72:73:
                    6a:5e:55:99:99:46:3b:30:bd:28:1a:fc:f7:e3:fb:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:79:46:8D:2A:EC:FC:F1:42:81:AB:9B:B6:07:B1:CE:81:6F:6F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6e0cbf-b557-48e5-8436-e5beaec80962/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6e0cbf-b557-48e5-8436-e5beaec80962/1/j3x5Ro0q7PzxQoGrm7YHsc6Bb28.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47540

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:30:62:53:eb:b6:c3:93:be:14:2b:b3:70:42:1d:03:a9:
         48:61:dc:c3:1f:9e:ea:b5:44:b3:7a:df:71:6a:fe:38:07:90:
         93:05:5a:00:2e:80:4e:c3:74:80:55:11:ac:1e:48:03:c7:ee:
         bb:d8:e1:5b:90:f7:7a:79:78:08:82:d9:ae:9c:13:c0:0b:32:
         b7:37:a5:cd:5b:48:9f:b1:de:ed:33:ce:65:d4:77:d9:17:91:
         8a:b3:5a:83:8d:8d:2a:05:7e:66:84:0a:36:1f:69:a6:ae:c8:
         06:f6:a6:f7:55:8e:b4:e4:6d:bc:30:9c:bb:a6:ca:79:e3:59:
         f3:bc:d7:d8:e1:6e:66:f2:e5:30:b1:17:2d:e7:2a:81:f2:8b:
         f4:0e:36:bc:9b:b4:5c:91:90:35:c8:c9:c5:a7:9b:66:5c:93:
         89:a9:b1:35:9c:b3:17:79:4d:c6:cf:f3:d0:1e:dc:2c:90:50:
         ee:0b:0a:00:a0:4b:b7:83:37:f8:7b:99:18:71:49:a6:f7:d0:
         b6:8c:e2:7d:ca:ae:55:6a:2a:0c:bf:80:e8:d7:e1:42:eb:dd:
         e9:a6:90:c9:ee:0d:31:48:06:5b:e2:6a:0c:b6:30:39:e8:aa:
         cd:be:47:09:54:16:1c:6d:91:c5:d6:b4:5e:a6:a5:07:79:ca:
         91:c0:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:34 2024 by rpki-client on console-ams.rpki-client.org