Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tWheh2Fme24E4kKYHqeH95wQHDk.cer
File:                     tWheh2Fme24E4kKYHqeH95wQHDk.cer (raw, json)
Hash identifier:          dlZTP23QXz2Ci2u2QRz9KzzxNzcGNwj+nY5wj9O0gOo=
Subject key identifier:   B5:68:5E:87:61:66:7B:6E:04:E2:42:98:1E:A7:87:F7:9C:10:1C:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0184995B88C97FDE13AB92A11077378E0773
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/27/344f89-6d14-473e-b605-47e8f84478b4/1/tWheh2Fme24E4kKYHqeH95wQHDk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/27/344f89-6d14-473e-b605-47e8f84478b4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 21 Nov 2022 08:43:43 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 205818

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:99:5b:88:c9:7f:de:13:ab:92:a1:10:77:37:8e:07:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 21 08:43:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5685e8761667b6e04e242981ea787f79c101c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:0f:8b:e3:66:70:8d:65:03:2f:34:36:19:
                    23:dd:90:1c:64:b7:b7:af:82:61:3e:c5:94:d4:27:
                    5e:7c:03:47:25:24:39:ab:c4:4a:0a:12:e0:1e:2b:
                    74:84:a2:77:76:d2:9d:22:b6:12:80:35:4a:0c:6f:
                    ee:94:28:76:88:18:6e:8b:59:12:81:81:82:e1:04:
                    3f:9e:71:88:17:81:55:dc:3a:c7:2d:eb:29:2c:d6:
                    3a:ea:1c:84:1f:97:5e:e0:d1:87:59:00:9c:45:0f:
                    65:4c:25:be:8f:d7:ff:fc:44:2c:6a:0c:c1:f9:b6:
                    1e:22:a6:1f:39:d3:b2:fa:ea:22:cb:b9:a2:7d:be:
                    36:98:07:41:d0:2a:d4:84:f3:12:c4:9e:43:c4:17:
                    d5:a3:12:c4:cc:47:8f:85:62:ab:55:1e:fc:88:0d:
                    58:9e:2e:04:f0:45:80:6c:2e:19:99:22:07:e1:c1:
                    8d:ff:53:e4:7a:83:67:f3:c9:65:ec:86:89:bd:d7:
                    1d:a7:ae:cb:66:e1:d1:14:49:91:0d:cc:47:1d:1a:
                    63:96:9e:3d:c7:26:45:ce:80:11:b8:c6:5f:69:ae:
                    ab:64:8f:d1:e3:52:a1:e4:83:85:c9:df:f1:2f:5b:
                    f6:24:42:60:c7:d2:18:e9:bf:98:35:c3:31:33:95:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:68:5E:87:61:66:7B:6E:04:E2:42:98:1E:A7:87:F7:9C:10:1C:39
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/344f89-6d14-473e-b605-47e8f84478b4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/344f89-6d14-473e-b605-47e8f84478b4/1/tWheh2Fme24E4kKYHqeH95wQHDk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205818

    Signature Algorithm: sha256WithRSAEncryption
         99:0e:f0:a6:19:53:6a:f0:99:6f:11:44:ae:bf:b3:23:00:31:
         d2:2e:3a:d8:74:de:7e:61:e5:17:5d:76:d7:06:a6:c3:bf:9e:
         95:e1:63:d2:24:e8:23:b2:0e:59:65:a9:ca:98:ee:c1:15:7c:
         3d:e3:8a:a4:61:f7:77:37:34:ed:9c:e4:50:e4:59:8c:1a:19:
         3e:7b:ea:11:d8:22:a4:e7:07:5c:fb:e9:5d:88:f4:66:72:b1:
         0f:39:5a:7e:bb:d3:af:61:0a:95:b7:e1:5a:8d:77:9a:71:69:
         c4:6b:ec:30:af:6e:0c:12:d3:e3:57:c7:6a:ca:fa:44:1e:01:
         76:b4:66:c3:72:be:4e:e5:0d:f8:6b:d7:2c:9a:53:ae:66:fc:
         89:76:d7:d0:81:1d:59:09:43:db:1c:8b:de:16:24:3e:6c:e6:
         91:a8:6a:d8:ab:43:5e:69:7a:06:4f:64:95:04:2c:bb:81:ac:
         07:f8:f6:8b:75:f4:1c:8e:3e:ea:3b:6c:8b:7b:c8:13:7a:28:
         76:4b:67:db:a8:7e:d3:99:a5:e7:17:a8:aa:ca:7d:23:88:e2:
         23:76:08:7a:a8:42:fc:2a:42:f1:1e:f8:4b:42:83:06:c3:12:
         07:fc:24:f5:cb:90:2c:1b:17:bc:d9:18:22:51:d2:45:8d:be:
         1b:1a:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:23 2024 by rpki-client on console-fra.rpki-client.org