Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lCQpSBHOdDktgHyhhWmtSR6kx9E.cer
File:                     lCQpSBHOdDktgHyhhWmtSR6kx9E.cer (raw, json)
Hash identifier:          1RS1vsPe8oxN0Nn/J/XVIgfStZwcKD5HnL8g11cp0CE=
Subject key identifier:   94:24:29:48:11:CE:74:39:2D:80:7C:A1:85:69:AD:49:1E:A4:C7:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01820478DFE11984B1DFFF7E2071AFFD80C3
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ed/ef92bf-f0a6-4f98-a04b-21696786c9ed/1/lCQpSBHOdDktgHyhhWmtSR6kx9E.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ed/ef92bf-f0a6-4f98-a04b-21696786c9ed/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Sat 16 Jul 2022 00:46:46 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 203868

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:04:78:df:e1:19:84:b1:df:ff:7e:20:71:af:fd:80:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 16 00:46:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9424294811ce74392d807ca18569ad491ea4c7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:bf:4c:2b:c0:c2:27:1c:77:14:e8:9e:c1:
                    44:61:5e:d7:f4:05:5f:24:36:61:3c:c9:1b:47:18:
                    f7:6b:f6:98:ba:8d:88:64:34:82:6d:11:8a:8d:76:
                    8a:05:24:ff:26:61:72:df:c8:c6:64:63:dd:f6:a8:
                    8b:b0:cd:6d:70:3c:d1:91:cd:d9:7c:b6:5e:48:25:
                    f7:7a:ff:c4:5c:eb:e3:3a:07:55:03:b0:1a:b5:9f:
                    29:2f:b5:06:d8:e6:fd:28:87:61:0a:07:42:82:de:
                    3a:13:bd:84:0a:83:0d:ec:7d:5a:94:b6:d4:e6:81:
                    ab:83:71:78:f9:f4:3d:88:01:b5:e2:13:5f:50:23:
                    2a:e9:9b:9a:ca:6b:5f:09:64:b0:b7:e7:3b:d7:28:
                    34:2e:d9:32:f7:bd:af:29:cb:dc:3a:90:d5:a0:aa:
                    62:32:31:f9:47:cb:78:1b:f9:76:6a:45:61:fc:ec:
                    cd:33:8e:ee:18:03:1b:62:21:61:6a:0a:d9:3b:dd:
                    2a:3c:6d:76:e4:2c:93:8d:8b:9b:75:cd:9d:81:bc:
                    0f:76:50:72:f4:ec:d9:62:f6:10:e8:59:03:a8:66:
                    07:fe:79:b6:f7:4d:d5:e3:e3:95:62:ed:60:2f:63:
                    fe:e5:aa:a1:63:11:d6:0c:d2:3a:d7:c6:07:1b:11:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:24:29:48:11:CE:74:39:2D:80:7C:A1:85:69:AD:49:1E:A4:C7:D1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ef92bf-f0a6-4f98-a04b-21696786c9ed/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ef92bf-f0a6-4f98-a04b-21696786c9ed/1/lCQpSBHOdDktgHyhhWmtSR6kx9E.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203868

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:11:b0:16:73:8d:2e:06:75:65:cd:49:48:bd:38:d8:bf:
         72:2f:3b:1d:45:95:02:f8:58:71:3e:9f:87:d7:a8:60:68:84:
         06:72:59:a4:33:36:8e:18:a0:1d:e3:b2:b1:ba:0b:f3:47:9e:
         d2:c7:57:6c:44:2b:20:5d:d7:da:11:38:f8:da:c5:61:db:ef:
         c7:fb:4f:73:b8:92:79:9e:54:55:80:9b:f5:d2:0c:43:b4:bc:
         bd:de:63:ae:0f:33:cf:b2:83:8d:b1:90:87:c4:2f:cb:cf:d9:
         26:46:77:14:16:a5:9c:cd:1e:e2:16:89:35:c0:56:fe:bb:b1:
         f3:63:dc:29:d7:b1:f4:53:f9:bf:2a:50:a9:ea:e3:53:0f:b0:
         f3:23:24:bb:0b:29:4a:84:86:79:5c:aa:ec:2d:84:aa:a5:64:
         f8:51:72:61:a0:2e:0e:c9:82:a5:93:ae:de:43:62:db:ad:90:
         bf:80:e3:73:48:68:cf:17:93:09:dd:2b:fa:34:8b:71:de:65:
         89:b6:08:ca:26:50:86:7e:18:e8:4f:50:8a:38:af:bb:b0:11:
         37:77:50:cd:71:b6:c1:a7:ec:51:f4:5c:53:4d:da:e7:3e:5d:
         3e:69:a7:bb:3a:1d:5b:22:56:bc:37:19:bd:47:f6:93:25:f3:
         55:4a:f1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:01 2024 by rpki-client on console-ams.rpki-client.org