Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uZecJvLKbw9ObnShxQsefR0gkRE.cer
File:                     uZecJvLKbw9ObnShxQsefR0gkRE.cer (raw, json)
Hash identifier:          zFBC0DuDxcw8B6tSfueMo3WgwBQp79kbXK0e7vmx6wk=
Subject key identifier:   B9:97:9C:26:F2:CA:6F:0F:4E:6E:74:A1:C5:0B:1E:7D:1D:20:91:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0181F20828B0FF4CBAF1B7F21481253452AE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/uZecJvLKbw9ObnShxQsefR0gkRE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 12 Jul 2022 10:50:29 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 45.82.200.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f2:08:28:b0:ff:4c:ba:f1:b7:f2:14:81:25:34:52:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 12 10:50:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9979c26f2ca6f0f4e6e74a1c50b1e7d1d209111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:01:b7:2e:08:97:fb:64:dd:4f:64:81:26:
                    fd:83:a5:d5:f7:c1:ef:4c:af:f0:6c:a4:52:a6:d7:
                    20:fe:b1:8f:d7:50:e6:7a:6e:b0:48:96:fa:c1:ff:
                    b1:43:c6:04:59:ed:91:11:9f:47:a6:ef:90:86:d1:
                    a3:2a:c3:b0:e0:6f:60:d5:94:ed:ce:f3:dd:34:1f:
                    34:c5:42:4a:65:9a:77:e1:3f:5b:a9:7d:b7:a8:35:
                    90:30:d4:e1:8c:b0:bf:78:7b:81:73:fc:1f:1a:a7:
                    bf:c7:5d:f7:a8:ac:68:10:d3:9b:cd:12:e1:93:60:
                    02:eb:fa:6d:e5:f7:07:6e:5c:84:ea:b3:3b:b2:62:
                    85:ba:cc:6e:08:75:c0:eb:a8:a4:32:dd:3a:85:e3:
                    0f:af:4d:e8:16:d1:d8:a5:e1:86:87:c6:57:f9:ec:
                    29:d2:89:88:bd:bc:78:1a:5b:04:3b:54:8d:dd:ce:
                    89:64:6c:21:87:e5:b4:6c:f3:49:0b:fe:4d:b8:b4:
                    ac:fd:f7:2b:52:b3:cd:8e:d7:1b:88:9e:76:33:2d:
                    b7:37:9c:72:af:92:95:2a:ae:a0:a2:92:37:c1:bb:
                    3f:50:76:16:e4:38:cc:97:f0:13:e6:75:00:a3:b6:
                    da:1e:ee:3e:a4:f4:a9:f5:15:25:d8:c2:ce:43:24:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:97:9C:26:F2:CA:6F:0F:4E:6E:74:A1:C5:0B:1E:7D:1D:20:91:11
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/uZecJvLKbw9ObnShxQsefR0gkRE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:c2:49:0d:4b:51:84:2a:26:6c:e8:8d:79:0e:d9:81:64:
         48:f1:bd:71:95:d1:80:7c:ed:da:6d:be:c5:a8:27:1d:5b:ae:
         5b:91:e7:6c:f7:0d:b7:6e:9c:30:24:89:e2:38:a5:da:4f:9b:
         d8:ce:93:71:a9:f7:79:03:7c:13:19:cb:e5:9a:92:c7:30:d0:
         6b:75:db:23:9c:5e:f2:ce:72:4c:c6:cb:cc:05:e0:13:0f:0a:
         66:7d:0a:50:fe:3b:c6:7a:04:e7:6e:9f:80:78:59:65:77:2a:
         f5:9d:aa:3e:7c:83:67:c3:c2:8a:2d:93:a8:89:c9:8f:5a:ed:
         36:d5:fd:b8:d6:95:b2:11:b2:ed:6e:5b:90:9f:9c:64:de:57:
         78:33:ff:f9:d5:68:c5:e5:3a:90:72:e3:4b:30:63:5a:20:12:
         c9:1f:73:56:33:f5:6b:21:9d:eb:62:c2:86:1f:fb:64:58:b2:
         f0:0a:2d:39:07:41:90:2c:1e:55:99:52:48:2f:9f:ba:b4:f5:
         f2:19:f7:ed:e8:11:1d:f3:10:22:d7:a2:2f:b5:e2:09:2e:8b:
         de:99:97:53:1c:2c:50:25:6e:66:6e:97:c4:75:a4:fe:0b:d4:
         e0:05:7b:dc:55:58:57:0d:4c:63:c5:6a:a5:65:5e:4c:ef:4f:
         93:e6:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:18 2024 by rpki-client on console-ams.rpki-client.org